Add support for dev tokens

Author: SirLynix

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "this_api_of_mine"
-version = "0.1.0"
+version = "0.2.0"
 edition = "2024"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
@@ -10,6 +10,7 @@ actix-governor = "0.8"
 actix-web = "4.9"
 base64 = "0.22"
 cached = { version = "0.55", features = ["async"] }
+const_base = "0.2"
 chacha20poly1305 = { version = "0.10", features = ["std"] }
 confy = "0.6"
 deadpool-postgres = "0.14"

Cargo.toml

@@ -64,7 +64,7 @@ pub struct ConnectionToken<'a> {
 
 impl<'a> ConnectionToken<'a> {
     pub fn generate(
-        token_key: chacha20poly1305::Key,
+        token_key: &chacha20poly1305::Key,
         duration: Duration,
         server_address: ServerAddress<'a>,
         private_token: PrivateConnectionToken,
@@ -89,7 +89,7 @@ impl<'a> ConnectionToken<'a> {
         let mut private_token_bytes = private_token.to_bytes()?;
         private_token_bytes.resize(private_token_bytes.len() + XCHACHA20POLY1305_IETF_ABYTES, 0);
 
-        let mut cipher = XChaCha20Poly1305::new(&token_key);
+        let mut cipher = XChaCha20Poly1305::new(token_key);
         cipher.encrypt_in_place(
             &nonce,
             additional_data_bytes.as_slice(),

src/data/connection_token.rs

@@ -14,9 +14,15 @@ use crate::errors::api::{ErrorCause, RouteError};
 use crate::errors::codes::ServerErrorCode;
 use crate::routes::players::validate_player_token;
 
+const DEV_TOKEN: &[u8] = const_base::decode!(
+    "Unsecure+Developer+Token+Giving+Admin+Perms=",
+    const_base::Config::B64
+);
+
 #[derive(Deserialize)]
 struct GameConnectionParams {
     token: String,
+    dev: Option<bool>,
 }
 
 #[post("/v1/game/connect")]
@@ -28,6 +34,8 @@ async fn game_connect(
     let pg_client = pg_pool.get().await?;
     let player_id = validate_player_token(&pg_client, &params.token).await?;
 
+    let is_dev = params.dev.unwrap_or(false);
+
     // TODO(SirLynix): to do this with only one query
     let find_player_info = pg_client
         .prepare_typed_cached(
@@ -36,13 +44,6 @@ async fn game_connect(
         )
         .await?;
 
-    let get_player_permissions = pg_client
-        .prepare_typed_cached(
-            "SELECT permission FROM player_permissions WHERE player_id = $1",
-            &[Type::INT4],
-        )
-        .await?;
-
     let player_result = pg_client
         .query_opt(&find_player_info, &[&player_id])
         .await?
@@ -53,17 +54,27 @@ async fn game_connect(
 
     let uuid: Uuid = player_result.try_get(0)?;
     let nickname: String = player_result.try_get(1)?;
-    let permissions: Vec<String> = pg_client
-        .query_raw(&get_player_permissions, &[&player_id])
-        .await?
-        .map(|row: Result<Row, tokio_postgres::Error>| row.and_then(|row| row.try_get(0)))
-        .try_collect()
-        .await?;
 
-    let player_data = PlayerData::new(uuid, nickname, permissions);
+    let permissions: Vec<String>;
+    if !is_dev {
+        let get_player_permissions = pg_client
+            .prepare_typed_cached(
+                "SELECT permission FROM player_permissions WHERE player_id = $1",
+                &[Type::INT4],
+            )
+            .await?;
 
-    let server_address =
-        ServerAddress::new(config.game_server_address.as_str(), config.game_server_port);
+        permissions = pg_client
+            .query_raw(&get_player_permissions, &[&player_id])
+            .await?
+            .map(|row: Result<Row, tokio_postgres::Error>| row.and_then(|row| row.try_get(0)))
+            .try_collect()
+            .await?;
+    } else {
+        permissions = vec!["admin".into(), "dev".into()];
+    }
+
+    let player_data = PlayerData::new(uuid, nickname, permissions);
 
     let refresh_token =
         GameDataToken::new_refresh(player_id, uuid, config.game_api_refresh_token_duration);
@@ -79,8 +90,21 @@ async fn game_connect(
         player_data,
     );
 
+    let server_address = if !is_dev {
+        ServerAddress::new(config.game_server_address.as_str(), config.game_server_port)
+    } else {
+        ServerAddress::new("localhost", config.game_server_port)
+    };
+
+    // force connection token key to be zero in dev mode to ensure it can't be used to connect to a regular server
+    let connection_token_key = chacha20poly1305::Key::from_slice(if !is_dev {
+        &config.connection_token_key
+    } else {
+        DEV_TOKEN
+    });
+
     let token = ConnectionToken::generate(
-        config.connection_token_key.into(),
+        connection_token_key,
         config.connection_token_duration,
         server_address,
         private_token,