Flappybird security

app/modules/flappybird/endpoints_flappybird.py

@@ -1,3 +1,4 @@
+import hashlib
 import uuid
 from datetime import UTC, datetime
 
@@ -14,6 +15,16 @@
 )
 from app.types.module import Module
 
+
+def genKey(score: int) -> int:
+    """ Generates a key based on the score of the player. """
+    data = f"{score}"
+
+    hash_bytes = hashlib.sha256(data.encode()).digest()
+    key = int.from_bytes(hash_bytes[:4], byteorder="big")
+
+    return key
+
 module = Module(
     root="flappybird",
     tag="Flappy Bird",
@@ -95,25 +106,27 @@ async def create_flappybird_score(
         id=score_id,
         user_id=user.id,
         value=flappybird_score.value,
+        key=flappybird_score.key,
         creation_time=creation_time,
     )
     db_flappybird_best_score = models_flappybird.FlappyBirdBestScore(
         id=score_id,
         user_id=user.id,
         value=flappybird_score.value,
+        key=flappybird_score.key,
         creation_time=creation_time,
     )
     personal_best = await cruds_flappybird.get_flappybird_personal_best_by_user_id(
         user_id=user.id,
         db=db,
     )
-    if personal_best is None:
+    if personal_best is None and genKey(flappybird_score.value) == flappybird_score.key:
         await cruds_flappybird.create_flappybird_best_score(
             flappybird_best_score=db_flappybird_best_score,
             db=db,
         )
     else:
-        if personal_best.value < flappybird_score.value:
+        if personal_best.value < flappybird_score.value and genKey(flappybird_score.value) == flappybird_score.key:
             await cruds_flappybird.update_flappybird_best_score(
                 user_id=user.id,
                 best_score=flappybird_score.value,

app/modules/flappybird/models_flappybird.py

@@ -14,6 +14,7 @@ class FlappyBirdScore(Base):
     user_id: Mapped[str] = mapped_column(ForeignKey("core_user.id"))
     user: Mapped[CoreUser] = relationship("CoreUser", init=False)
     value: Mapped[int]
+    key: Mapped[int]
     creation_time: Mapped[datetime]
 
 
@@ -24,4 +25,5 @@ class FlappyBirdBestScore(Base):
     user_id: Mapped[str] = mapped_column(ForeignKey("core_user.id"))
     user: Mapped[CoreUser] = relationship("CoreUser", init=False)
     value: Mapped[int]
+    key: Mapped[int]
     creation_time: Mapped[datetime]

app/modules/flappybird/schemas_flappybird.py

@@ -8,6 +8,7 @@
 
 class FlappyBirdScoreBase(BaseModel):
     value: int
+    key: int
 
 
 class FlappyBirdScore(FlappyBirdScoreBase):