Better username censoring (#3122)

## Description:

Many inapropriate names bypass the current filter. This PR does the
following:

1. Moves name censoring to server side so inappropriate names are
scrubbed before being sent to the client
2. Requests a list of profane words from the api, this allows us to
quickly add new profane words in the admin panel without having to
redeploy.

## Please complete the following:

- [x] I have added screenshots for all UI updates
- [x] I process any text displayed to the user through translateText()
and I've added it to the en.json file
- [x] I have added relevant tests to the test directory
- [x] I confirm I have thoroughly tested these changes and take full
responsibility for any bugs introduced

## Please put your Discord username so you can be contacted if a bug or
regression is found:

evan

src/server/PrivilegeRefresher.ts

@@ -8,7 +8,7 @@ import {
   PrivilegeCheckerImpl,
 } from "./Privilege";
 
-// Refreshes the privilege checker every 5 minutes.
+// Refreshes the privilege checker every 3 minutes.
 // WARNING: This fails open if cosmetics.json is not available.
 export class PrivilegeRefresher {
   private privilegeChecker: PrivilegeChecker | null = null;
@@ -18,7 +18,9 @@ export class PrivilegeRefresher {
   private log: Logger;
 
   constructor(
-    private endpoint: string,
+    private cosmeticsEndpoint: string,
+    private profaneWordsEndpoint: string,
+    private apiKey: string,
     parentLog: Logger,
     private refreshInterval: number = 1000 * 60 * 3,
   ) {
@@ -37,27 +39,62 @@ export class PrivilegeRefresher {
   }
 
   private async loadPrivilegeChecker(): Promise<void> {
-    this.log.info(`Loading privilege checker from ${this.endpoint}`);
+    this.log.info(`Loading privilege checker`);
     try {
-      const response = await fetch(this.endpoint);
-      if (!response.ok) {
-        throw new Error(`HTTP error! status: ${response.status}`);
+      const fetchWithTimeout = async (url: string) => {
+        try {
+          return await fetch(url, {
+            signal: AbortSignal.timeout(5000),
+            headers: { "x-api-key": this.apiKey },
+          });
+        } catch (error) {
+          this.log.warn(`Failed to fetch ${url}: ${error}`);
+          return null;
+        }
+      };
+
+      const [cosmeticsResponse, profaneWordsResponse] = await Promise.all([
+        fetchWithTimeout(this.cosmeticsEndpoint),
+        fetchWithTimeout(this.profaneWordsEndpoint),
+      ]);
+
+      if (!cosmeticsResponse || !cosmeticsResponse.ok) {
+        throw new Error(
+          `Cosmetics HTTP error! status: ${cosmeticsResponse?.status ?? "network error"}`,
+        );
       }
 
-      const cosmeticsData = await response.json();
+      const cosmeticsData = await cosmeticsResponse.json();
       const result = CosmeticsSchema.safeParse(cosmeticsData);
 
       if (!result.success) {
         throw new Error(`Invalid cosmetics data: ${result.error.message}`);
       }
 
+      let bannedWords: string[] = [];
+      if (profaneWordsResponse && profaneWordsResponse.ok) {
+        try {
+          bannedWords = await profaneWordsResponse.json();
+          this.log.info(
+            `Loaded ${bannedWords.length} profane words from ${this.profaneWordsEndpoint}`,
+          );
+        } catch (error) {
+          this.log.warn(`Failed to parse profane words JSON, using empty list`);
+        }
+      } else {
+        this.log.warn(
+          `Failed to fetch profane words (status ${profaneWordsResponse?.status ?? "network error"}), using empty list`,
+        );
+      }
+
       this.privilegeChecker = new PrivilegeCheckerImpl(
         result.data,
         base64url.decode,
+        bannedWords,
       );
       this.log.info(`Privilege checker loaded successfully`);
     } catch (error) {
-      this.log.error(`Failed to fetch cosmetics from ${this.endpoint}:`, error);
+      this.log.error(`Failed to load privilege checker:`, error);
       throw error;
     }
   }