using Backend.Common; using Backend.Contracts; using Backend.Data; using Backend.Domain; using Backend.Services; using Microsoft.EntityFrameworkCore; namespace Backend.Endpoints; public static partial class PublicEndpoints { private static async Task CreateNomination( HttpContext context, CreateNominationRequest request, AwardsDbContext db, IUserSessionService userSessionService, IRiskFlagService riskFlagService, IRiskRuleService riskRuleService) { var submittedNominations = NormalizeSubmittedNominations(request); if (submittedNominations.Length is 0 or > 3) { return Results.BadRequest(new { message = "A nomination request must include between 1 and 3 stream links." }); } if (submittedNominations.Any(item => item.Name is { Length: > 120 })) { return Results.BadRequest(new { message = "Legacy nominee names must stay below 120 characters." }); } if (submittedNominations.Any(item => item.StreamUrl.Length > 300)) { return Results.BadRequest(new { message = "Stream links must stay below 300 characters." }); } var distinctStreamUrls = submittedNominations .Select(item => item.StreamUrl) .Distinct(StringComparer.OrdinalIgnoreCase) .ToArray(); if (distinctStreamUrls.Length != submittedNominations.Length) { return Results.BadRequest(new { message = "Duplicate stream links are not allowed inside one category." }); } var invalidStreamUrl = submittedNominations .Where(item => !string.IsNullOrWhiteSpace(item.StreamUrl)) .Select(item => item.StreamUrl) .FirstOrDefault(item => !TryNormalizeExternalUrl(item, out _)); if (invalidStreamUrl is not null) { return Results.BadRequest(new { message = "A valid http(s) stream link is required." }); } var settings = await db.SiteSettings.AsNoTracking().FirstOrDefaultAsync(item => item.Id == 1); var linkBlacklist = NominationLinkBlacklistSettings.Read(settings); var blacklistedStreamUrl = submittedNominations .Select(item => item.StreamUrl) .FirstOrDefault(item => NominationLinkBlacklistSettings.IsBlocked(item, linkBlacklist)); if (blacklistedStreamUrl is not null) { return Results.BadRequest(new { message = "Dieser Link kann nicht nominiert werden. Bitte reiche einen direkten Kanal- oder Profil-Link ein." }); } var category = await db.Categories .Include(item => item.Season) .FirstOrDefaultAsync(item => item.Id == request.CategoryId && item.Season.Year == request.Year); if (category is null) { return Results.BadRequest(new { message = "The selected category does not exist for this season." }); } var nominationSeasonResolution = EnsurePublicWriteSeason(category.Season, "nomination"); if (nominationSeasonResolution.Result is not null) { return nominationSeasonResolution.Result; } var submitterIdResult = await ResolveSubmitterIdAsync(context, request.TwitchUserId, userSessionService); if (submitterIdResult.Result is not null) { return submitterIdResult.Result; } var submitterId = submitterIdResult.SubmitterId!; var requestMetadata = RequestMetadataReader.Read(context); var existingNominationCount = await db.Nominations.CountAsync(item => item.SeasonId == category.SeasonId && item.CategoryId == category.Id && item.SubmittedByTwitchId == submitterId && item.Status == "pending"); var records = submittedNominations.Select(nomination => new Nomination { SeasonId = category.SeasonId, CategoryId = category.Id, SubmittedByTwitchId = submitterId, CandidateText = string.IsNullOrWhiteSpace(nomination.Name) ? null : nomination.Name, StreamUrl = string.IsNullOrWhiteSpace(nomination.StreamUrl) ? null : nomination.StreamUrl, Status = "pending", ReviewNote = $"Stream-Link: {nomination.StreamUrl}", CreatedAt = DateTimeOffset.UtcNow, }).ToArray(); await db.Nominations.AddRangeAsync(records); var resubmittedNominationRule = await riskRuleService.GetRuleAsync("resubmitted_nomination", context.RequestAborted); var rapidNominationBurstRule = await riskRuleService.GetRuleAsync("rapid_nomination_burst", context.RequestAborted); var recentNominationVolume = await db.Nominations.CountAsync(item => item.SubmittedByTwitchId == submitterId && item.CreatedAt >= DateTimeOffset.UtcNow.AddMinutes(-rapidNominationBurstRule.WindowMinutes)); await db.SaveChangesAsync(context.RequestAborted); var reviewLink = new { label = "Review-Fälle öffnen", entityType = "nomination", entityId = string.Join(",", records.Select(item => item.Id)), to = $"/admin/reviews?query={Uri.EscapeDataString(submitterId)}", }; if (existingNominationCount > 0 && resubmittedNominationRule.Enabled) { await riskFlagService.AddIfMissingAsync( category.SeasonId, submitterId, "nomination", "resubmitted_nomination", resubmittedNominationRule.Severity, "Ein User hat seine Nominierung in derselben Kategorie erneut eingereicht.", requestMetadata, new { categoryId = category.Id, existingNominationCount, nominationIds = records.Select(item => item.Id).ToArray(), entityLinks = new[] { reviewLink } }, context.RequestAborted); } if (rapidNominationBurstRule.Enabled && recentNominationVolume >= rapidNominationBurstRule.Threshold) { await riskFlagService.AddIfMissingAsync( category.SeasonId, submitterId, "nomination", "rapid_nomination_burst", rapidNominationBurstRule.Severity, "Ungewoehnlich viele Nominierungsaktionen in kurzer Zeit erkannt.", requestMetadata, new { recentNominationVolume, threshold = rapidNominationBurstRule.Threshold, windowMinutes = rapidNominationBurstRule.WindowMinutes, nominationIds = records.Select(item => item.Id).ToArray(), entityLinks = new[] { reviewLink } }, context.RequestAborted); } await db.SaveChangesAsync(context.RequestAborted); return Results.Ok(new { saved = submittedNominations.Length, category = category.Name, collectedSignal = existingNominationCount > 0 }); } private readonly record struct SubmittedNomination(string? Name, string StreamUrl); private static SubmittedNomination[] NormalizeSubmittedNominations(CreateNominationRequest request) { if (request.Nominations is { Length: > 0 }) { return request.Nominations .Select(item => { var name = item.Name?.Trim() ?? string.Empty; var streamUrl = item.StreamUrl?.Trim() ?? string.Empty; if (!string.IsNullOrWhiteSpace(streamUrl) && TryNormalizeExternalUrl(streamUrl, out var normalizedUrl)) { streamUrl = normalizedUrl; } return new SubmittedNomination(string.IsNullOrWhiteSpace(name) ? null : name, streamUrl); }) .Where(item => !string.IsNullOrWhiteSpace(item.StreamUrl)) .ToArray(); } return (request.Nominees ?? []) .Select(item => { var streamUrl = item.Trim(); if (!string.IsNullOrWhiteSpace(streamUrl) && TryNormalizeExternalUrl(streamUrl, out var normalizedUrl)) { streamUrl = normalizedUrl; } return new SubmittedNomination(null, streamUrl); }) .Where(item => !string.IsNullOrWhiteSpace(item.StreamUrl)) .ToArray(); } }