kingdombattles/server/equipment.js

//environment variables
require('dotenv').config();

//utilities
let { log } = require('../common/utilities.js');

let { getStatistics, getOwned, isAttacking, isSpying, logActivity } = require('./utilities.js');

const equipmentRequest = (connection) => (req, res) => {
	//validate the credentials
	let query = 'SELECT COUNT(*) AS total FROM sessions WHERE accountId = ? AND token = ?;';
	connection.query(query, [req.body.id, req.body.token], (err, results) => {
		if (err) throw err;

		if (results[0].total !== 1) {
			res.status(400).write(log('Invalid equipment credentials', req.body.id, req.body.token));
			res.end();
			return;
		}

		//if no field received, send everything
		if (!req.body.field) {
			//compose the returned objects
			return getStatistics((err, statisticsObj) => {
				if (err) {
					res.status(400).write(log(err, req.body.id, req.body.token, req.body.field));
					res.end();
					return;
				}

				return getOwned(connection, req.body.id, (err, ownedObj) => {
					if (err) {
						res.status(400).write(log(err, req.body.id, req.body.token, req.body.field));
						res.end();
						return;
					}

					//finally, compose the resulting objects
					res.status(200).json(Object.assign({}, statisticsObj, ownedObj));
					res.end();
				});
			});
		}

		//send specific fields
		switch(req.body.field) {
			case 'statistics':
				return getStatistics((err, obj) => {
					if (err) {
						res.status(400).write(log(err, req.body.id, req.body.token, req.body.field));
					} else {
						res.status(200).json(obj);
					}

					res.end();
				});

			case 'owned':
				return getOwned(connection, req.body.id, (err, obj) => {
					if (err) {
						res.status(400).write(log(err, req.body.id, req.body.token, req.body.field));
					} else {
						res.status(200).json(obj);
					}

					res.end();
				});

			default:
				res.status(400).write(log('Unknown field received', req.body.id, req.body.token, req.body.field));
				res.end();
		}
	});
};

const purchaseRequest = (connection) => (req, res) => {
	//validate the credentials
	let query = 'SELECT COUNT(*) AS total FROM sessions WHERE accountId = ? AND token = ?;';
	connection.query(query, [req.body.id, req.body.token], (err, credentials) => {
		if (err) throw err;

		if (credentials[0].total !== 1) {
			res.status(400).write(log('Invalid equipment purchase credentials', JSON.stringify(body), body.id, body.token));
			res.end();
			return;
		}

		//no purchasing if you're attacking
		isAttacking(connection, req.body.id, (err, attacking) => {
			if (err) throw err;

			if (attacking) {
				res.status(400).write(log('Can\'t purchase while attacking', req.body.id, req.body. token, req.body.type, req.body.name));
				res.end();
				return;
			}

			isSpying(connection, req.body.id, (err, spying) => {
				if (err) throw err;

				if (spying) {
					res.status(400).write(log('Can\'t purchase while spying', req.body.id, req.body. token, req.body.type, req.body.name));
					res.end();
					return;
				}

				//get the player's gold
				let query = 'SELECT gold, scientists FROM profiles WHERE accountId = ?;';
				connection.query(query, [req.body.id], (err, results) => {
					if (err) throw err;

					//just in case
					if (results.length === 0) {
						res.status(400).write(log('Purchase made on unrecognized account', req.body.id, req.body.token));
						res.end();
						return;
					}

					//get the stats for all objects
					getStatistics((err, { statistics }) => {
						if (err) throw err;

						//valid parameters
						if(!statistics[req.body.type] || !statistics[req.body.type][req.body.name]) {
							res.status(400).write(log('Invalid equipment purchase parameters', req.body.id, req.body.token, req.body.type, req.body.name));
							res.end();
							return;
						}

						//enough gold?
						if (results[0].gold < statistics[req.body.type][req.body.name].cost) {
							res.status(400).write(log('Not enough gold', req.body.id, req.body.token, req.body.type, req.body.name));
							res.end();
							return;
						}

						//for sale?
						if (!statistics[req.body.type][req.body.name].visible || !statistics[req.body.type][req.body.name].purchasable) {
							res.status(400).write(log('Item not for sale', req.body.id, req.body.token, req.body.type, req.body.name));
							res.end();
							return;
						}

						//high enough level?
						if (results[0].scientists < statistics[req.body.type][req.body.name].scientistsRequired) {
							res.status(400).write(log('Not enough scientists', req.body.id, req.body.token, req.body.type, req.body.name));
							res.end();
							return;
						}

						//purchase approved.

						//get the user's current item data (including quantity)
						let query = 'SELECT * FROM equipment WHERE accountId = ? AND name = ?;';
						connection.query(query, [req.body.id, req.body.name], (err, results) => {
							if (err) throw err;

							//add to or update the record
							let query;
							if (results.length > 0) {
								query = 'UPDATE equipment SET quantity = quantity + 1 WHERE accountId = ? AND name = ? AND type = ?;';
							} else {
								query = 'INSERT INTO equipment (accountId, name, type, quantity) VALUES (?, ?, ?, 1);';
							}

							connection.query(query, [req.body.id, req.body.name, req.body.type], (err) => {
								if (err) throw err;

								//remove gold from the user's account
								let query = 'UPDATE profiles SET gold = gold - ? WHERE accountId = ?;';
								connection.query(query, [statistics[req.body.type][req.body.name].cost, req.body.id], (err) => {
									if (err) throw err;

									//return the new owned data
									getOwned(connection, req.body.id, (err, results) => {
										if (err) throw err;

										res.status(200).json(Object.assign(results));
										res.end();

										log('Purchase made', req.body.id, req.body.token, req.body.type, req.body.name);

										logActivity(connection, req.body.id);
									});
								});
							});
						});
					});
				});
			});
		});
	});
}

const sellRequest = (connection) => (req, res) => {
	//validate the credentials
	let query = 'SELECT COUNT(*) AS total FROM sessions WHERE accountId = ? AND token = ?;';
	connection.query(query, [req.body.id, req.body.token], (err, credentials) => {
		if (err) throw err;

		if (credentials[0].total !== 1) {
			res.status(400).write(log('Invalid equipment sell credentials', JSON.stringify(body), body.id, body.token));
			res.end();
			return;
		}

		//no selling if you're attacking
		isAttacking(connection, req.body.id, (err, attacking) => {
			if (err) throw err;

			if (attacking) {
				res.status(400).write(log('Can\'t sell while attacking', req.body.id, req.body. token, req.body.type, req.body.name));
				res.end();
				return;
			}

			isSpying(connection, req.body.id, (err, spying) => {
				if (err) throw err;

				if (spying) {
					res.status(400).write(log('Can\'t sell while spying', req.body.id, req.body. token, req.body.type, req.body.name));
					res.end();
					return;
				}

				//get the player's item quantity
				let query = 'SELECT * FROM equipment WHERE accountId = ? AND type = ? AND name = ?;';
				connection.query(query, [req.body.id, req.body.type, req.body.name], (err, results) => {
					if (err) throw err;

					if (results.length === 0) {
						res.status(400).write(log('Can\'t sell something you don\'t own', req.body.id, req.body. token, req.body.type, req.body.name));
						res.end();
						return;
					}

					//get the stats for all objects
					getStatistics((err, { statistics }) => {
						if (err) throw err;

						//valid parameters
						if(!statistics[req.body.type] || !statistics[req.body.type][req.body.name]) {
							res.status(400).write(log('Invalid equipment sell parameters', req.body.id, req.body.token, req.body.type, req.body.name));
							res.end();
							return;
						}

						//for sale?
						if (!statistics[req.body.type][req.body.name].saleable) {
							res.status(400).write(log('Item can\'t be sold', req.body.id, req.body.token, req.body.type, req.body.name));
							res.end();
							return;
						}

						//sale approved.

						//add gold to the user's account
						let query = 'UPDATE profiles SET gold = gold + ? WHERE accountId = ?;';
						connection.query(query, [Math.floor(statistics[req.body.type][req.body.name].cost/2), req.body.id], (err) => {
							if (err) throw err;

							//remove the item from the inventory
							let query = 'UPDATE equipment SET quantity = quantity - 1 WHERE id = ?;';
							connection.query(query, [results[0].id], (err) => {
								if (err) throw err;

								//return the new owned data
								getOwned(connection, req.body.id, (err, results) => {
									if (err) throw err;

									res.status(200).json(Object.assign(results));
									res.end();

									log('Sale made', req.body.id, req.body.token, req.body.type, req.body.name);

									//Extra: clean the database
									let query = 'DELETE FROM equipment WHERE quantity <= 0;';
									connection.query(query, (err) => {
										if (err) throw err;

										log('Cleaned database', 'equipment sale');

										logActivity(connection, req.body.id);
									});
								});
							});
						});
					});
				});
			});
		});
	});
}

module.exports = {
	equipmentRequest: equipmentRequest,
	purchaseRequest: purchaseRequest,
	sellRequest, sellRequest
};