1
Fork 0
mirror of https://github.com/Steffo99/festa.git synced 2024-12-23 15:14:23 +00:00
festa/pages/api/events/[slug].ts

112 lines
3.4 KiB
TypeScript

import { database } from "../../../utils/prismaClient";
import { NextApiRequest, NextApiResponse } from "next";
import { Event, Prisma } from "@prisma/client";
import { festaAPI } from "../../../utils/api";
import { festaNoConfig } from "../../../utils/api/configurator";
import { festaBearerAuthOptional, FestaToken } from "../../../utils/api/authenticator";
import { festaJsonSchemaBody } from "../../../utils/api/bodyValidator";
import { festaRESTSpecific } from "../../../utils/api/executor";
import { festaJsonSchemaQuery } from "../../../utils/api/queryValidator";
import { Response } from "../../../utils/api/throwables";
type Config = {}
type Auth = FestaToken | undefined
type Query = {
slug: string
}
type Body = {
name: string,
postcard?: string,
description: string,
startingAt?: string,
endingAt?: string,
}
export default async function handler(req: NextApiRequest, res: NextApiResponse) {
await festaAPI(req, res, {
configurator: festaNoConfig,
authenticator: festaBearerAuthOptional,
queryValidator: festaJsonSchemaQuery<Query>({
type: "object",
properties: {
slug: { type: "string" }
},
required: [
"slug",
]
}),
bodyValidator: festaJsonSchemaBody<Body>({
type: "object",
properties: {
name: { type: "string" },
postcard: { type: "string", nullable: true },
description: { type: "string" },
startingAt: { type: "string", nullable: true },
endingAt: { type: "string", nullable: true },
},
required: [
"slug",
"name",
"description",
]
}),
executor: festaRESTSpecific<Config, Auth, Query, Body, Event, Prisma.EventDelegate<any>, Prisma.EventFindUniqueArgs, Prisma.EventUpdateArgs>({
delegate: database.event,
getFindArgs: async ({ query }) => {
return {
where: {
slug: query.slug,
}
}
},
beforeUpdate: async ({ auth }, item) => {
if (!auth) {
throw Response.error({ status: 403, message: "Authentication is required to edit events" })
}
if (item && item.creatorId !== auth.user.id) {
throw Response.error({ status: 403, message: "Only the creator can edit an event" })
}
},
getUpdateArgs: async ({ body, query }) => {
return {
where: {
slug: query.slug,
},
data: body!,
}
},
beforeDestruction: async ({ auth }, item) => {
if (!auth) {
throw Response.error({ status: 403, message: "Authentication is required to destroy events" })
}
if (item && item.creatorId !== auth.user.id) {
throw Response.error({ status: 403, message: "Only the creator can destroy an event" })
}
},
getDestroyArgs: async ({ query }) => {
return {
where: {
slug: query.slug,
}
}
}
}),
})
}