implement login-required functionality (fixes #219)

client/multiplayer/room.html

@@ -172,7 +172,7 @@ <h1 id="funny-toast-text" class="me-auto text-danger"></h1>
                     </div>
                     <div class="form-check form-switch">
                         <input class="form-check-input" id="toggle-login-required" type="checkbox" role="switch" disabled>
-                        <label class="form-check-label" for="toggle-login-required">Require players to be logged in</label>
+                        <label class="form-check-label" for="toggle-login-required">Require new players to be logged in</label>
                     </div>
                     <div class="mb-2"></div>
                     <label for="reading-speed">Reading speed: <span id="reading-speed-display">50</span><br></label>

server/multiplayer/handle-wss-connection.js

@@ -1,3 +1,4 @@
+import { checkToken } from '../authentication.js';
 import hasValidCharacters from '../moderation/has-valid-characters.js';
 import isAppropriateString from '../moderation/is-appropriate-string.js';
 import { createAndReturnRoom } from './TossupRoom.js';
@@ -46,6 +47,24 @@ export default function handleWssConnection (ws, req) {
     return false;
   }
 
+  if (room.settings.loginRequired === true) {
+    const cookieString = (req?.headers?.cookie ?? 'session=;').split(';').find(token => token.trim().startsWith('session='));
+    const cookieBuffer = Buffer.from(cookieString.split('=')[1], 'base64');
+    let valid = true;
+    try {
+      const cookies = JSON.parse(cookieBuffer.toString('utf-8'));
+      valid = checkToken(cookies.username, cookies.token, true);
+    } catch (e) { valid = false; }
+
+    if (!valid) {
+      ws.send(JSON.stringify({
+        type: 'error',
+        message: 'You must be logged in with a verified email to join this room.'
+      }));
+      return false;
+    }
+  }
+
   if (!isAppropriateString(username)) {
     username = getRandomName();
     ws.send(JSON.stringify({