Maxim Dolgolyov
98ec1ed478
A new cosmetic family: a fixed-position overlay painted behind every
page of the app, switchable from the profile shop. 4 free presets + 6
paid (250-1200 coins) so the new economy has another sink. Every
animation respects prefers-reduced-motion and falls back to its static
gradient.
Catalogue (migration 035):
free: none, gradient-soft, dots, dark
paid: gradient-flow, grid, bubbles, stars (mid)
aurora, nebula (premium)
Backend:
• migration 035 adds users.active_background + rebuilds shop_items
CHECK to include 'background' (standard SQLite 'new + copy + swap')
and seeds 10 items
• shopController.getMyActive returns { background: { slug } } and
activateItem handles type='background' (stores bare slug in
active_background) + skips the user_purchases check for price=0
so free presets work for everyone without per-user rows
• routes/shop validate schema lets 'background' through
Frontend:
• api.js applyCosmetics injects <div id='ls-bg-fx'> at body start
and toggles class to bg-<slug>. Cleared backgrounds remove the
element so dark→light transitions don't leave artifacts.
• ls.css gains a self-contained 'ANIMATED BACKGROUNDS' block:
keyframes per animated slug (ls-bg-flow, ls-bg-grid-scan,
ls-bg-bubble-rise, ls-bg-stars-twinkle, ls-bg-aurora-spin,
ls-bg-nebula-pan) wrapped in a prefers-reduced-motion kill-switch.
Same .bg-<slug> classes are reused for the .bg-preview swatches.
• profile.html shop:
- new 'Фоны' filter button between Рамки and Титулы
- _renderItemPreview type='background' draws a real 56-aspect swatch
(same CSS as the page bg — what you see is what you apply)
- _isItemActive matches by slug for background type
- free items (price===0) treated as auto-owned in render so users
can apply them without a fake 'purchase' step
Verified: getMyActive returns { background: { slug: 'nebula' } } after
flipping users.active_background; activate path updates the row.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
53 lines
2.7 KiB
JavaScript
53 lines
2.7 KiB
JavaScript
const router = require('express').Router();
|
|
const { authMiddleware, requireRole, requirePermission } = require('../middleware/auth');
|
|
const rateLimit = require('../middleware/rateLimit');
|
|
const validate = require('../middleware/validate');
|
|
const {
|
|
getItems, purchaseItem, getPurchases, getCoins, getMyActive, activateItem,
|
|
adminGetItems, adminCreateItem, adminUpdateItem, adminDeleteItem, adminAwardCoins, adminShopStats
|
|
} = require('../controllers/shopController');
|
|
const { isGamificationEnabled } = require('../controllers/gamification/_shared');
|
|
|
|
/* Same kill-switch as gamification routes — shop is part of the gam loop. */
|
|
function shopGate(req, res, next) {
|
|
if (req.path.startsWith('/admin/')) return next();
|
|
if (!isGamificationEnabled()) {
|
|
return res.status(404).json({ error: 'Gamification disabled' });
|
|
}
|
|
next();
|
|
}
|
|
|
|
const purchaseLimiter = rateLimit({ windowMs: 60_000, max: 10, message: 'Слишком много покупок, подождите минуту' });
|
|
const activateSchema = { body: { type: { type: 'string', oneOf: ['frame', 'title', 'effect', 'background'] } } };
|
|
const adminItemSchema = { body: {
|
|
name: { type: 'string', required: true, minLen: 1, maxLen: 200 },
|
|
type: { type: 'string', required: true, oneOf: ['frame', 'title', 'effect', 'background'] },
|
|
price: { type: 'number', required: true, min: 0 },
|
|
}};
|
|
const awardCoinsSchema = { body: {
|
|
userId: { type: 'number', required: true, min: 1, integer: true },
|
|
amount: { type: 'number', required: true, min: 1, integer: true },
|
|
}};
|
|
|
|
router.use(authMiddleware);
|
|
router.use(shopGate);
|
|
|
|
router.get('/items', getItems);
|
|
router.post('/items/:id/purchase', requirePermission('shop.purchase'), purchaseLimiter, purchaseItem);
|
|
router.get('/purchases', getPurchases);
|
|
router.get('/coins', getCoins);
|
|
router.get('/my-active', getMyActive);
|
|
router.post('/activate', validate(activateSchema), activateItem);
|
|
|
|
/* Admin routes — read/award/stats require shop.manage permission
|
|
(admin always passes; teachers need explicit grant from permissions UI)
|
|
Create/update/delete items remain admin-only (shop catalogue changes) */
|
|
router.get('/admin/items', requirePermission('shop.manage'), adminGetItems);
|
|
router.post('/admin/items', requireRole('admin'), validate(adminItemSchema), adminCreateItem);
|
|
router.put('/admin/items/:id', requireRole('admin'), adminUpdateItem);
|
|
router.delete('/admin/items/:id', requireRole('admin'), adminDeleteItem);
|
|
router.post('/admin/award-coins', requirePermission('shop.manage'), validate(awardCoinsSchema), adminAwardCoins);
|
|
router.get('/admin/stats', requirePermission('shop.manage'), adminShopStats);
|
|
|
|
module.exports = router;
|