From 24e264d229cc134616d51f5157ee3799beac9d71 Mon Sep 17 00:00:00 2001
From: Chord <chord@tuta.io>
Date: Sun, 17 May 2020 17:04:19 +0200
Subject: [PATCH] Temporarily disable registration/login for non gm

---
 api/db.js                 | 2 +-
 app/components/Nav.svelte | 4 ++--
 app/views/Home.svelte     | 4 ++--
 app/views/Login.svelte    | 1 +
 app/views/Register.svelte | 1 +
 5 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/api/db.js b/api/db.js
index d9b7d76..2753f30 100644
--- a/api/db.js
+++ b/api/db.js
@@ -484,7 +484,7 @@ export async function search(term, pagination) {
 
 export async function validate_account(username, password) {
 	try {
-		const data = await pool.query('SELECT id, passhash FROM accounts WHERE username=$1', [username]);
+		const data = await pool.query('SELECT id, passhash FROM accounts WHERE username=$1 and gm=true', [username]);
 
 		if (data.rows.length === 0) {
 			return undefined;
diff --git a/app/components/Nav.svelte b/app/components/Nav.svelte
index 41d9630..721bdc5 100644
--- a/app/components/Nav.svelte
+++ b/app/components/Nav.svelte
@@ -36,9 +36,9 @@
 				<li class="nav-item" class:active={route=="/login"}>
 					<a class="nav-link" href="/login">Login</a>
 				</li>
-				<li class="nav-item" class:active={route=="/register"}>
+				<!--<li class="nav-item" class:active={route=="/register"}>
 					<a class="nav-link" href="/register">Register</a>
-				</li>
+				</li>-->
 				{/if}
 			</ul>
 		</div>
diff --git a/app/views/Home.svelte b/app/views/Home.svelte
index 4b8f88e..2614a24 100644
--- a/app/views/Home.svelte
+++ b/app/views/Home.svelte
@@ -77,8 +77,8 @@
 		<div class="row">
 			<div class="col">
 				{#if !$loggedIn}
-				<a class="btn btn-primary" href="/login" role="button">Login</a>
-				<a class="btn btn-primary" href="/register" role="button">Create Account</a>
+				<!--<a class="btn btn-primary" href="/login" role="button">Login</a>
+				<a class="btn btn-primary" href="/register" role="button">Create Account</a>-->
 				{/if}
 				<a class="btn btn-secondary" href="https://docs.google.com/document/d/1ZMx1NUylVZCXJNRyhkuVWT0eUKSVYu0JXsU-y3f93BY/edit" role="button">Setup Instructions</a>
 			</div>
diff --git a/app/views/Login.svelte b/app/views/Login.svelte
index 3d2372d..8204171 100644
--- a/app/views/Login.svelte
+++ b/app/views/Login.svelte
@@ -76,6 +76,7 @@
 
   <Alert bind:this={alert} />
 
+  <h3 style="color: red;">Login only enabled for GMs at this time</h3>
   <form name="login" class="form-group" on:submit|preventDefault={submitLogin}>
     <div class="form-group">
       <label for="inputUsername">Username</label>
diff --git a/app/views/Register.svelte b/app/views/Register.svelte
index 92ab742..eb7aa49 100644
--- a/app/views/Register.svelte
+++ b/app/views/Register.svelte
@@ -73,6 +73,7 @@
 
 	<Alert bind:this={alert} />
 
+	<h2 style="color:red;">Registration is currently disabled. Login via the game client</h2>
 	<form name="login" class:was-validated={validated} class="form-group needs-validation" novalidate on:submit|preventDefault={submitLogin}>
 		<div class="form-group">
 			<label for="inputUsername">Username</label>