Make SCUM logs live relay only

platform/service/game_client_bridge_sessions.go

@@ -13,6 +13,7 @@ import (
 )
 
 const gameClientBridgeCapability = "game-client.bridge"
+const gameClientBridgeLogStreamCapability = "logs.stream"
 
 func (svc *CoreService) ClaimGameClientBridgeCommands(request domain.GameClientBridgeClaimRequest) ([]domain.GameClientBridgeCommand, error) {
 	if err := validator.ValidateGameClientBridgeClaimRequest(request); err != nil {
@@ -127,6 +128,27 @@ func (svc *CoreService) UploadGameClientBridgeSnapshot(request domain.GameClient
 	return domain.CopyGameClientBridgeSnapshot(snapshot), nil
 }
 
+func (svc *CoreService) AuthorizeGameClientBridgeLogStream(request domain.GameClientBridgeLogStreamRequest) (domain.ServerInstance, error) {
+	if err := validator.ValidateGameClientBridgeLogStreamRequest(request); err != nil {
+		return domain.ServerInstance{}, err
+	}
+	component, err := svc.authorizeGameClientBridgeSession(request.SessionToken)
+	if err != nil {
+		return domain.ServerInstance{}, err
+	}
+	if !containsString(component.Session.Capabilities, gameClientBridgeLogStreamCapability) {
+		return domain.ServerInstance{}, ErrForbidden
+	}
+	instance, err := svc.store.ServerInstances().Get(component.Session.ServerInstanceID)
+	if err != nil {
+		return domain.ServerInstance{}, err
+	}
+	if instance.PluginID != component.Installation.PluginID {
+		return domain.ServerInstance{}, ErrUnauthorized
+	}
+	return domain.CopyServerInstance(instance), nil
+}
+
 func gameClientBridgeSnapshotDeclaration(plugin domain.GamePlugin, snapshotType, schemaVersion string) (domain.GameClientBridgeSnapshotDeclaration, bool) {
 	for _, declaration := range plugin.GameClientBridge.Snapshots {
 		if declaration.Type == snapshotType && declaration.SchemaVersion == schemaVersion {