Prevent banned users from continuing to auto-bid or bid manually

Author: ntbeastboy

server/src/main/java/com/auction/server/controller/BidController.java

@@ -46,6 +46,10 @@ public void handlePlaceBid(Context ctx) {
         userRepo
             .findById(bidderId)
             .orElseThrow(() -> new UserNotFoundException("User not found: " + bidderId));
+    if(user.isBanned()) {
+      ctx.status(403).json(Map.of("error", "You are banned from bidding."));
+      return;
+    }
     Bid bid = bidService.placeBid(user, itemId, amount);
     broadcastItemUpdated(itemId);
 
@@ -91,6 +95,11 @@ public void handleSetAutoBid(Context ctx) {
         userRepo
             .findById(userId)
             .orElseThrow(() -> new UserNotFoundException("User not found: " + userId));
+    if(user.isBanned()) {
+      ctx.status(403).json(Map.of("error", "You are banned from setting auto-bids."));
+      bidService.cancelAutoBid(user, itemId);
+      return;
+    }
     AutoBid autoBid = bidService.setAutoBid(user, itemId, maxBid, increment);
     broadcastItemUpdated(itemId);
     ctx.status(201).json(autoBidToMap(autoBid));