Harden minecraft-server-play analytics (#5484)

* Harden minecraft-server-play analytics

* Verify based on mc token

* Fail for non-server projects

* Nitpicks and factor out HTTP client

* Allow passing old minecraft_uuid field for clients

* Remove server play analytics test since it relies on auth against Minecraft API which I don't want to mock :(

* Switch to using hasJoined for uuid validation

* Fix formatting

* Fix sessionserver status code

* Ensure profile name and queried username matches

* replace some wrap_request_errs with internal errs

* add HTTP client into web::Data

* short timeout on client-side session join query

* further fixes

* sqlx prepare

* fix clippy

---------

Co-authored-by: Creeperkatze <178587183+Creeperkatze@users.noreply.github.com>
Co-authored-by: aecsocket <aecsocket@tutanota.com>

apps/labrinth/src/database/models/project_item.rs

@@ -187,6 +187,7 @@ impl ProjectBuilder {
     pub async fn insert(
         self,
         transaction: &mut PgTransaction<'_>,
+        http: &reqwest::Client,
     ) -> Result<DBProjectId, DatabaseError> {
         let project_struct = DBProject {
             id: self.project_id,
@@ -234,7 +235,7 @@ impl ProjectBuilder {
 
         for mut version in self.initial_versions {
             version.project_id = self.project_id;
-            version.insert(&mut *transaction).await?;
+            version.insert(&mut *transaction, http).await?;
         }
 
         LinkUrl::insert_many_projects(

apps/labrinth/src/database/models/version_item.rs

@@ -135,6 +135,7 @@ impl VersionFileBuilder {
         self,
         version_id: DBVersionId,
         transaction: &mut PgTransaction<'_>,
+        http: &reqwest::Client,
     ) -> Result<DBFileId, DatabaseError> {
         let file_id = generate_file_id(&mut *transaction).await?;
 
@@ -173,6 +174,7 @@ impl VersionFileBuilder {
             DelphiRunParameters {
                 file_id: file_id.into(),
             },
+            http,
         )
         .await
         {
@@ -193,6 +195,7 @@ impl VersionBuilder {
     pub async fn insert(
         self,
         transaction: &mut PgTransaction<'_>,
+        http: &reqwest::Client,
     ) -> Result<DBVersionId, DatabaseError> {
         let version = DBVersion {
             id: self.version_id,
@@ -233,7 +236,7 @@ impl VersionBuilder {
         } = self;
 
         for file in files {
-            file.insert(version_id, transaction).await?;
+            file.insert(version_id, transaction, http).await?;
         }
 
         DependencyBuilder::insert_many(