Add admin API, permissions, and player management routes

Introduces admin database tables, repository, and service for managing administrators and permissions. Adds new admin routes for banning players, managing cosmetics (capes), changing player passwords and usernames, and handling player textures. Updates user and session services to support admin actions and permission checks. Adds related schema validation for new endpoints.

repositories/userRepository.js

@@ -660,6 +660,72 @@ async function setSkin(uuid, hash, variant) {
     return true
 }
 
+async function updatePassword(uuid, hashedPassword) {
+    try {
+        const sql = "UPDATE players SET password = ? WHERE uuid = ?"
+        const result = await database.query(sql, [hashedPassword, uuid])
+        
+        if (result.affectedRows > 0) {
+            return { code: 200, message: "Password updated successfully" }
+        } else {
+            throw new DefaultError(404, "User not found")
+        }
+    } catch (error) {
+        if (error instanceof DefaultError) throw error
+        logger.log("Internal Server Error".bold + " : " + error.toString(), ["MariaDB", "yellow"])
+        throw new DefaultError(500, "Internal Server Error", "Database Error")
+    }
+}
+
+async function addCapeToPlayer(uuid, hash) {
+    try {
+        const sql = `
+            INSERT INTO playersCapes (playerUuid, assetHash, isSelected)
+            VALUES (?, ?, 0)
+        `
+        const result = await database.query(sql, [uuid, hash])
+        
+        if (result.affectedRows > 0) {
+            return { code: 200, message: "Cape accordée au joueur." }
+        }
+        throw new DefaultError(500, "Erreur lors de l'attribution de la cape.")
+    } catch (error) {
+        if (error.code === 'ER_DUP_ENTRY') {
+            throw new DefaultError(409, "Le joueur possède déjà cette cape.")
+        }
+        logger.log("Internal Server Error".bold + " : " + error.toString(), ["MariaDB", "yellow"])
+        throw new DefaultError(500, "Internal Server Error", "Database Error")
+    }
+}
+
+async function removeCapeFromPlayer(uuid, hash) {
+    try {
+        const sql = "DELETE FROM playersCapes WHERE playerUuid = ? AND assetHash = ?"
+        const result = await database.query(sql, [uuid, hash])
+        
+        if (result.affectedRows > 0) {
+            return { code: 200, message: "Cape retirée du joueur." }
+        } else {
+            throw new DefaultError(404, "Le joueur ne possède pas cette cape.")
+        }
+    } catch (error) {
+        if (error instanceof DefaultError) throw error
+        logger.log("Internal Server Error".bold + " : " + error.toString(), ["MariaDB", "yellow"])
+        throw new DefaultError(500, "Internal Server Error", "Database Error")
+    }
+}
+
+async function deleteTexture(hash) {
+    try {
+        const sql = "DELETE FROM textures WHERE hash = ?"
+        const result = await database.query(sql, [hash])
+        return result.affectedRows > 0
+    } catch (error) {
+        logger.log("Internal Server Error".bold + " : " + error.toString(), ["MariaDB", "yellow"])
+        throw new DefaultError(500, "Internal Server Error", "Database Error")
+    }
+}
+
 module.exports = {
     setSkin,
     banUser,
@@ -669,14 +735,17 @@ module.exports = {
     isBlocked,
     unbanUser,
     blockPlayer,
+    deleteTexture,
     createTexture,
     getPlayerBans,
     getPlayerMeta,
     unblockPlayer,
     changeUsername,
     getNameHistory,
+    updatePassword,
     getBlockedUuids,
     getUsersByNames,
+    addCapeToPlayer,
     getPlayerActions,
     getTextureByUuid,
     getTextureByHash,
@@ -690,6 +759,7 @@ module.exports = {
     getPlayerProperties,
     removeProfileAction,
     addPropertyToPlayer,
+    removeCapeFromPlayer,
     getProfileByUsername,
     getPlayerPreferences,
     getPlayerCertificate,