yo.rb
# -*- coding: utf-8 -*-
require 'net/http'
require 'uri'
require 'securerandom'
require 'digest/sha2'
require_relative 'config'
module Yo
def getTokenUser(database, api_token)
return nil if api_token.nil?
token_user = nil
database.query("SELECT * FROM apiToken WHERE token='#{database.escape(api_token)}' LIMIT 1").each do |r|
token_user = r["userId"]
end
return token_user
end
def self.existsUser(database, username)
return false if username.nil?
result = database.query("SELECT * FROM password WHERE userId='#{database.escape(username)}' LIMIT 1")
return result.count != 0
end
def self.tooFast(database, fromUser)
return true if RATE_BLACKBOX0(database, fromUser)
delta = RATEDELTA
max = RATEMAX
span = RATESPAN
rate = RATERATE
result = database.query("SELECT * FROM logYoed WHERE UNIX_TIMESTAMP(time) > UNIX_TIMESTAMP(NOW()) - #{span} AND fromUser = '#{database.escape(fromUser)}'")
banResult = database.query("SELECT * FROM banWhen WHERE UNIX_TIMESTAMP(time) > UNIX_TIMESTAMP(NOW()) AND userId = '#{database.escape(fromUser)}'")
return false if result.count < rate && banResult.count == 0 # rate 以下で、Ban されていない
result = database.query("SELECT * FROM banWhen WHERE time = (SELECT MAX(time) FROM banWhen WHERE userId='#{database.escape(fromUser)}') AND userId='#{database.escape(fromUser)}' AND UNIX_TIMESTAMP(time) > UNIX_TIMESTAMP(NOW())")
if result.count == 0 # 今はされてない
database.query("INSERT INTO banWhen VALUES('#{database.escape(fromUser)}', #{RATE_BLACKBOX1(delta)}, FROM_UNIXTIME(UNIX_TIMESTAMP(NOW()) + #{delta * 2}))")
end
result.each do |r|
bl = RATE_BLACKBOX2(r["forT"])
forT = if bl > max then max else bl end
database.query("INSERT INTO banWhen VALUES('#{database.escape(fromUser)}', #{forT}, FROM_UNIXTIME(UNIX_TIMESTAMP(NOW()) + #{forT}))")
break
end
return true
end
def self.tooFastMsg(database, fromUser)
database.query("SELECT * FROM banWhen WHERE time = (SELECT MAX(time) FROM banWhen WHERE userId='#{database.escape(fromUser)}') AND userId='#{database.escape(fromUser)}' AND UNIX_TIMESTAMP(time) > UNIX_TIMESTAMP(NOW())").each do |r|
return "You have reached a rate limit. Wait until #{r["time"]} and try again."
end
end
def sendYo(database, api_token, username)
token_user = getTokenUser(database, api_token)
return returnMsg 400, "unknown api_token: #{api_token}" if token_user.nil?
return returnMsg 400, "unknown username: #{username}" if not existsUser(database, username)
return returnMsg 403, tooFastMsg(database, token_user) if tooFast(database, token_user)
addFriendEachOther(database, token_user, username)
notify(database, username, token_user)
returnMsg 200, "send Yo!"
end
def yoAll(database, api_token)
token_user = getTokenUser(database, api_token)
return returnMsg 400, "unknown api_token: #{api_token}." if token_user.nil?
database.query("SELECT * FROM friends WHERE userId='#{token_user}'").each do |r|
notify(database, r["friend"], token_user)
end
# そもそもfriend にしか送れないのでfriend 登録は不要
returnMsg 200, "send Yo ALL!"
end
def self.addFriendEachOther(database, token_user, username)
addFriend(database, token_user, username)
addFriend(database, username, token_user)
end
def self.addFriend(database, username, friend)
userExist = nil
database.query("SELECT * FROM friends WHERE userId='#{database.escape(username)}' AND friend='#{database.escape(friend)}' LIMIT 1").each do |r|
userExist = r["userId"]
end
if userExist.nil?
database.query("INSERT INTO friends VALUES('#{database.escape(username)}', '#{database.escape(friend)}')")
end
end
def notify(database, username, fromUser)
database.query("SELECT * FROM notifyType WHERE userId='#{database.escape(username)}'").each do |r|
decideType(database, username, fromUser, r["type"])
end
logYoed(database, username, fromUser)
end
def self.logYoed(database, username, fromUser)
database.query("INSERT INTO logYoed VALUES('#{database.escape(username)}', '#{database.escape(fromUser)}', NOW())")
end
def friends_count(database, api_token)
token_user = getTokenUser(database, api_token)
return returnMsg 400, "unknown api_token: #{api_token}" if token_user.nil?
count = 0
database.query("SELECT COUNT(*) FROM friends WHERE userId='#{token_user}'").each do |r|
count = r["COUNT(*)"]
end
return returnMsg 200, count
end
def list_friends(database, api_token)
token_user = getTokenUser(database, api_token)
return returnMsg 400, "unknown api_token: #{api_token}" if token_user.nil?
list = []
database.query("SELECT * FROM friends WHERE userId='#{token_user}'").each do |r|
list << r["friend"]
end
return "{\"code\": 200, \"result\": #{list}}\n"
end
def history(database, api_token, count)
token_user = getTokenUser(database, api_token)
return returnMsg 400, "unknown api_token: #{api_token}" if token_user.nil?
list = []
database.query("SELECT * FROM logYoed WHERE userId='#{token_user}' ORDER BY time DESC LIMIT #{database.escape(count)}").each do |r|
list << "{\"user\": \"#{r["fromUser"]}\", \"time\": \"#{r["time"]}\"}"
end
str = "{\"code\": 200, \"result\": [" # #{list}}\n"
fst = false
list.each do |e|
if not fst
fst = true
else
str += ","
end
str += e
end
str += "]}"
return str
end
def createUser(database, username, password)
if existsUser(database, username)
return returnMsg 400, "username #{username} is already exist."
end
usernameOrig = username
username.upcase!
if (/^[A-Z0-9]{1,20}$/ =~ username).nil? # ユーザ名は[A-Z0-9] の1〜20文字という制限でいいかな？
return returnMsg 400, "username should match [A-Z0-9]{1,20}. #{usernameOrig} is not match."
end
if password.nil?
return returnMsg 400, "password should not be empty."
end
salt = SecureRandom.uuid
newToken = SecureRandom.uuid
hash = Digest::SHA512.hexdigest(salt + password)
database.query("INSERT INTO password VALUES('#{database.escape(username)}', '#{salt}', '#{hash}')")
database.query("INSERT INTO apiToken VALUES('#{database.escape(username)}', '#{newToken}')")
return returnMsg 200, newToken
end
def addImkayac(database, username, kayacId, kayacPass, kayacSec)
return returnMsg 400, "need kayac_id." if kayacId.nil? || kayacId == ""
database.query("INSERT INTO imkayac VALUES('#{username}', '#{database.escape(kayacId)}', #{if kayacPass.nil? then 'NULL' else "'#{database.escape(kayacPass)}'" end}, #{if kayacSec.nil? then 'NULL' else "'#{database.escape(kayacSec)}'" end})")
exists = nil
database.query("SELECT * FROM notifyType WHERE userId='#{database.escape(username)}' AND type='imkayac' LIMIT 1").each do |r|
exists = r["userId"]
end
if exists.nil?
database.query("INSERT INTO notifyType VALUES('#{database.escape(username)}', 'imkayac')")
end
return returnMsg 200, "success!"
end
def addGCMId(database, username, projNum, regID)
return returnMsg 400, "need proj_num." if projNum.nil?
return returnMsg 400, "need reg_id." if regID.nil?
database.query("INSERT INTO GCMRegId VALUES('#{database.escape(username)}', '#{database.escape(projNum)}', '#{database.escape(regID)}')")
exists = nil
database.query("SELECT * FROM notifyType WHERE userId='#{database.escape(username)}' AND type='gcm' LIMIT 1").each do |r|
exists = r["userId"]
end
if exists.nil?
database.query("INSERT INTO notifyType VALUES('#{database.escape(username)}', 'gcm')")
end
return returnMsg 200, "success!"
end
def newApiToken(database, username)
newToken = SecureRandom.uuid
database.query("INSERT INTO apiToken VALUES('#{database.escape(username)}', '#{newToken}')")
return returnMsg 200, newToken
end
def listTokens(database, username)
list = []
database.query("SELECT * FROM apiToken WHERE userId='#{database.escape(username)}'").each do |r|
list << r["token"]
end
return "{\"code\": 200, \"result\": #{list}}\n"
end
def checkApiVersion(ver)
if ver != "0.1" then
returnMsg 400, "bad api_ver{0.1}."
end
end
def checkPassword(database, username, password)
return false if (username.nil? or password.nil?)
exists = nil
salt = nil
hash = nil
database.query("SELECT * FROM password WHERE userId='#{database.escape(username)}' LIMIT 1").each do |r|
exists = r["userId"]
salt = r["salt"]
hash = r["hash"]
end
return false if exists.nil?
return Digest::SHA512.hexdigest(salt + password) == hash
end
def returnMsg(code, msg)
return "{\"code\": #{code}, \"result\": \"#{msg}\"}\n"
end
module_function :getTokenUser, :sendYo, :yoAll, :notify, :friends_count, :list_friends, :history, :createUser, :addImkayac, :addGCMId, :newApiToken, :listTokens, :checkApiVersion, :checkPassword, :returnMsg
end