ProjectLighthouse/ProjectLighthouse.Servers.Website/Controllers/Admin/AdminUserController.cs

#nullable enable
using LBPUnion.ProjectLighthouse.Database;
using LBPUnion.ProjectLighthouse.Extensions;
using LBPUnion.ProjectLighthouse.Files;
using LBPUnion.ProjectLighthouse.Logging;
using LBPUnion.ProjectLighthouse.Types.Entities.Level;
using LBPUnion.ProjectLighthouse.Types.Entities.Profile;
using LBPUnion.ProjectLighthouse.Types.Entities.Token;
using LBPUnion.ProjectLighthouse.Types.Logging;
using LBPUnion.ProjectLighthouse.Types.Moderation.Cases;
using LBPUnion.ProjectLighthouse.Types.Users;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;

namespace LBPUnion.ProjectLighthouse.Servers.Website.Controllers.Admin;

[ApiController]
[Route("moderation/user/{id:int}")]
public class AdminUserController : ControllerBase
{
    private readonly DatabaseContext database;

    public AdminUserController(DatabaseContext database)
    {
        this.database = database;
    }

    /// <summary>
    /// Resets the user's earth decorations to a blank state. Useful for users who abuse audio for example.
    /// </summary>
    [HttpGet("wipePlanets")]
    public async Task<IActionResult> WipePlanets([FromRoute] int id)
    {
        UserEntity? user = this.database.UserFromWebRequest(this.Request);
        if (user == null || !user.IsModerator) return this.NotFound();

        UserEntity? targetedUser = await this.database.Users.FirstOrDefaultAsync(u => u.UserId == id);
        if (targetedUser == null) return this.NotFound();

        string[] hashes = {
            targetedUser.PlanetHashLBP2,
            targetedUser.PlanetHashLBP3,
            targetedUser.PlanetHashLBPVita,
        };

        // This will also wipe users' earth with the same hashes.
        foreach (string hash in hashes)
        {
            // Don't try to remove empty hashes. That's a horrible idea.
            if (string.IsNullOrWhiteSpace(hash)) continue;

            // Find users with a matching hash
            List<UserEntity> users = await this.database.Users
                .Where(u => u.PlanetHashLBP2 == hash ||
                            u.PlanetHashLBP3 == hash ||
                            u.PlanetHashLBPVita == hash)
                .ToListAsync();

            // We should match at least the targeted user...
            System.Diagnostics.Debug.Assert(users.Count != 0);

            // Reset each users' hash.
            foreach (UserEntity userWithPlanet in users)
            {
                userWithPlanet.PlanetHashLBP2 = "";
                userWithPlanet.PlanetHashLBP3 = "";
                userWithPlanet.PlanetHashLBPVita = "";
                Logger.Success($"Deleted planets for {userWithPlanet.Username} (id:{userWithPlanet.UserId})", LogArea.Admin);
            }

            // And finally, attempt to remove the resource from the filesystem. We don't want that taking up space.
            try
            {
                FileHelper.DeleteResource(hash);
                Logger.Success($"Deleted planet resource {hash}",
                    LogArea.Admin);
            }
            catch(DirectoryNotFoundException)
            {
                // This is certainly a strange case, but it's not worth doing anything about since we were about
                // to delete the file anyways. Carry on~
            }
            catch(Exception e)
            {
                // Welp, guess I'll die then. We tried~
                Logger.Error($"Failed to delete planet resource {hash}\n{e}", LogArea.Admin);
            }
        }

        await this.database.SendNotification(targetedUser.UserId,
            "Your earth decorations have been reset by a moderator.");

        await this.database.SaveChangesAsync();

        return this.Redirect($"/user/{targetedUser.UserId}");
    }
    
    /// <summary>
    /// Deletes every comment by the user. Useful in case of mass spam
    /// </summary>
    [HttpGet("wipeComments")]
    public async Task<IActionResult> WipeComments([FromRoute] int id)
    {
        UserEntity? user = this.database.UserFromWebRequest(this.Request);
        if (user == null || !user.IsModerator) return this.NotFound();

        UserEntity? targetedUser = await this.database.Users.FirstOrDefaultAsync(u => u.UserId == id);
        if (targetedUser == null) return this.NotFound();

        // Find every comment by the user, then set the deletion info on them
        await this.database.Comments.Where(c => c.PosterUserId == targetedUser.UserId)
            .ExecuteUpdateAsync(s =>
                s.SetProperty(c => c.Deleted, true)
                 .SetProperty(c => c.DeletedBy, user.Username)
                 .SetProperty(c => c.DeletedType, "moderator"));
        Logger.Success($"Deleted comments for {targetedUser.Username} (id:{targetedUser.UserId})", LogArea.Admin);

        await this.database.SendNotification(targetedUser.UserId,
            "Your comments have been deleted by a moderator.");

        return this.Redirect($"/user/{targetedUser.UserId}");
    }

    /// <summary>
    /// Deletes every score from the user. Useful in the case where a user cheated a ton of scores
    /// </summary>
    [HttpGet("wipeScores")]
    public async Task<IActionResult> WipeScores([FromRoute] int id)
    {
        UserEntity? user = this.database.UserFromWebRequest(this.Request);
        if (user == null || !user.IsModerator) return this.NotFound();

        UserEntity? targetedUser = await this.database.Users.FirstOrDefaultAsync(u => u.UserId == id);
        if (targetedUser == null) return this.NotFound();

        // Find and delete every score uploaded by the target user
        await this.database.Scores.Where(c => c.UserId == targetedUser.UserId).ExecuteDeleteAsync();
        Logger.Success($"Deleted scores for {targetedUser.Username} (id:{targetedUser.UserId})", LogArea.Admin);

        await this.database.SendNotification(targetedUser.UserId, "Your scores have been deleted by a moderator.");

        return this.Redirect($"/user/{targetedUser.UserId}");
    }

    /// <summary>
    ///     Forces the email verification of a user.
    /// </summary>
    [HttpGet("forceVerifyEmail")]
    public async Task<IActionResult> ForceVerifyEmail([FromRoute] int id)
    {
        UserEntity? user = this.database.UserFromWebRequest(this.Request);
        if (user == null || !user.IsModerator) return this.NotFound();

        UserEntity? targetedUser = await this.database.Users.FirstOrDefaultAsync(u => u.UserId == id);
        if (targetedUser == null) return this.NotFound();
        if (targetedUser.EmailAddress == null || targetedUser.EmailAddressVerified) return this.NotFound();

        List<EmailVerificationTokenEntity> tokens = await this.database.EmailVerificationTokens
            .Where(t => t.UserId == targetedUser.UserId)
            .ToListAsync();
        this.database.EmailVerificationTokens.RemoveRange(tokens);

        targetedUser.EmailAddressVerified = true;

        await this.database.SaveChangesAsync();

        return this.Redirect($"/user/{targetedUser.UserId}");
    }

    [HttpPost("/admin/user/{id:int}/setPermissionLevel")]
    public async Task<IActionResult> SetUserPermissionLevel([FromRoute] int id, [FromForm] PermissionLevel role)
    {
        UserEntity? user = this.database.UserFromWebRequest(this.Request);
        if (user == null || !user.IsAdmin) return this.NotFound();

        UserEntity? targetedUser = await this.database.Users.FirstOrDefaultAsync(u => u.UserId == id);
        if (targetedUser == null) return this.NotFound();

        if (role != PermissionLevel.Banned)
        {
            targetedUser.PermissionLevel = role;
            await this.database.SaveChangesAsync();
        }
        else
        {
            return this.Redirect($"/moderation/newCase?type={(int)CaseType.UserBan}&affectedId={id}");
        }

        return this.Redirect("/admin/users/0");
    }
}