backend for xcvr appview

add some returns, don't serve blob from banned user

+10
+6
server/internal/handler/lrcHandlers.go
··· 241 h.serverError(w, errors.New("empty did")) 242 return 243 } 244 if cid == "" { 245 cid = vals.Get("cid") 246 } 247 if cid == "" { 248 h.serverError(w, errors.New("empty cid")) 249 } 250 imgPath, err := h.rm.AddImageToCache(did, cid, r.Context()) 251 if err != nil {
··· 241 h.serverError(w, errors.New("empty did")) 242 return 243 } 244 + ib, _ := h.db.IsBanned(did, r.Context()) 245 + if ib { 246 + h.badRequest(w, errors.New("i don't serve banned content")) 247 + return 248 + } 249 if cid == "" { 250 cid = vals.Get("cid") 251 } 252 if cid == "" { 253 h.serverError(w, errors.New("empty cid")) 254 + return 255 } 256 imgPath, err := h.rm.AddImageToCache(did, cid, r.Context()) 257 if err != nil {
+4
server/internal/handler/oauthHandlers.go
··· 21 key, err := oauth.GetPrivateKey() 22 if err != nil { 23 h.serverError(w, err) 24 } 25 pubKey, err := key.PublicKey() 26 if err != nil { 27 h.serverError(w, err) 28 } 29 ro, err := pubKey.JWK() 30 if err != nil { 31 h.serverError(w, err) 32 } 33 34 cski := os.Getenv("CLIENT_SECRET_KEY_ID") ··· 186 err = r.ParseForm() 187 if err != nil { 188 h.badRequest(w, err) 189 } 190 userhandle := r.FormValue("user") 191 userdid, err := atputils.GetDidFromHandle(r.Context(), userhandle)
··· 21 key, err := oauth.GetPrivateKey() 22 if err != nil { 23 h.serverError(w, err) 24 + return 25 } 26 pubKey, err := key.PublicKey() 27 if err != nil { 28 h.serverError(w, err) 29 + return 30 } 31 ro, err := pubKey.JWK() 32 if err != nil { 33 h.serverError(w, err) 34 + return 35 } 36 37 cski := os.Getenv("CLIENT_SECRET_KEY_ID") ··· 189 err = r.ParseForm() 190 if err != nil { 191 h.badRequest(w, err) 192 + return 193 } 194 userhandle := r.FormValue("user") 195 userdid, err := atputils.GetDidFromHandle(r.Context(), userhandle)