Merge branch '6-update-highscores' into 'dev'

Resolve "Update highscores"

Closes #6

See merge request !25

backend/api/highscores.js

@@ -53,10 +53,10 @@ router.post("/highscore", (req, res) => {
 
       db.collection(collection).updateOne(
         {
-          gameid: req.body.gameid,
-          userid: req.body.userid
+          gameid: mongo.ObjectID(req.body.gameid),
+          userid: mongo.ObjectID(req.body.userid)
         },
-        { $set: { value: parseInt(req.body.score) } },
+        { $max: { value: req.body.value } },
         { upsert: true },
         (err, result) => {
           if (err) {

backend/api/players.js

@@ -19,9 +19,13 @@ router.get("/username/:userid", (req, res) => {
       // Using the database gameWare and collection games
       const db = client.db("gameWare");
       const collection = "players";
-
-      const id = mongo.ObjectId(req.params.userid);
-
+      let id;
+      try {
+        id = mongo.ObjectId(req.params.userid);
+      } catch (err) {
+        res.status(400).send("Invalid userid");
+        return;
+      }
       db.collection(collection)
         .find({
           _id: id