Simo
80f591a343
Phase A — Public REST API (was the biggest gap). 20 JSON endpoints under
/api mirroring AtomCMS: users/[username], online(+/count), me, articles
(+/[slug]), photos, home, staff, teams, leaderboard, shop(+/categories),
values(+/categories), settings, radio/{config,now-playing,listeners,
shouts}. Shared src/lib/api.ts (apiJson — BigInt-safe + CORS, pagination).
Read-only, fail-soft, and field-safe (never exposes password/auth_ticket/
2FA secrets/mail).
Phase B — Anti-abuse on registration: CAPTCHA (Cloudflare Turnstile /
Google reCAPTCHA, settings-driven, widget rendered on the register page),
VPN/proxy detection (proxycheck.io / IPQualityScore via /admin/vpn
settings), and max-accounts-per-IP. All fail-open when unconfigured.
src/lib/services/{captcha,ip-lookup}.ts.
Phase C — jobs-worker cron suite: radio-record-songs (30s, logs track
changes to radio_song_plays), radio-auto-dj (rotates radio_auto_dj_playlist
when no live DJ), github-update-check (hourly, sets update_available).
Shared src/lib/services/radio.ts (now-playing/listeners parsing).
Verified live (prod, amx_test): /api/* return real JSON (leaderboard 6
users, settings carry no secrets, user endpoint hides password). tsc 0,
vitest 49/49, next build 0 (20 new API routes).
45 lines
1.4 KiB
TypeScript
45 lines
1.4 KiB
TypeScript
import { apiJson } from "@/lib/api";
|
|
import { prisma } from "@/lib/prisma";
|
|
|
|
// Latest 50 radio shouts with their author's username/look resolved. Mirrors the
|
|
// query behind the public /radio/shouts page (radio_shouts ordered by created_at
|
|
// desc, then joined to users by user_id).
|
|
export const dynamic = "force-dynamic";
|
|
|
|
export async function GET(_req: Request) {
|
|
try {
|
|
const shouts = await prisma.radioShouts.findMany({
|
|
orderBy: { createdAt: "desc" },
|
|
take: 50,
|
|
});
|
|
|
|
// Resolve author usernames/looks. radio_shouts.user_id is an UnsignedBigInt
|
|
// while users.id is an Int, so narrow to Number for the lookup.
|
|
const authorIds = Array.from(new Set(shouts.map((s) => Number(s.userId))));
|
|
const authors = authorIds.length
|
|
? await prisma.user.findMany({
|
|
where: { id: { in: authorIds } },
|
|
select: { id: true, username: true, look: true },
|
|
})
|
|
: [];
|
|
const authorById = new Map(authors.map((a) => [a.id, a]));
|
|
|
|
const data = shouts.map((s) => {
|
|
const author = authorById.get(Number(s.userId));
|
|
return {
|
|
id: s.id,
|
|
userId: s.userId,
|
|
username: author?.username ?? null,
|
|
look: author?.look ?? null,
|
|
message: s.message,
|
|
createdAt: s.createdAt,
|
|
};
|
|
});
|
|
|
|
return apiJson({ shouts: data });
|
|
} catch {
|
|
// DB unavailable — serve an empty list rather than a 500.
|
|
return apiJson({ shouts: [] }, { status: 200 });
|
|
}
|
|
}
|