adilallo
74 lines
1.9 KiB
TypeScript
74 lines
1.9 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { prisma } from "../../../../lib/server/db";
|
|
import { isDatabaseConfigured } from "../../../../lib/server/env";
|
|
import {
|
|
dbUnavailable,
|
|
forbidden,
|
|
notFound,
|
|
unauthorized,
|
|
} from "../../../../lib/server/responses";
|
|
import { getPublicPublishedRuleById } from "../../../../lib/server/publishedRules";
|
|
import { getSessionUser } from "../../../../lib/server/session";
|
|
import { apiRoute } from "../../../../lib/server/apiRoute";
|
|
|
|
type RouteContext = { params: Promise<{ id: string }> };
|
|
|
|
export const GET = apiRoute<RouteContext>(
|
|
"rules.byId",
|
|
async (_request, context) => {
|
|
if (!isDatabaseConfigured()) {
|
|
return dbUnavailable();
|
|
}
|
|
|
|
const { id } = await context.params;
|
|
|
|
const rule = await getPublicPublishedRuleById(id);
|
|
if (!rule) {
|
|
return notFound();
|
|
}
|
|
|
|
const user = await getSessionUser();
|
|
let viewerIsOwner = false;
|
|
if (user) {
|
|
const ownerRow = await prisma.publishedRule.findUnique({
|
|
where: { id },
|
|
select: { userId: true },
|
|
});
|
|
viewerIsOwner = ownerRow?.userId === user.id;
|
|
}
|
|
|
|
return NextResponse.json({ rule, viewerIsOwner });
|
|
},
|
|
);
|
|
|
|
export const DELETE = apiRoute<RouteContext>(
|
|
"rules.byId.delete",
|
|
async (_request, context) => {
|
|
if (!isDatabaseConfigured()) {
|
|
return dbUnavailable();
|
|
}
|
|
|
|
const user = await getSessionUser();
|
|
if (!user) {
|
|
return unauthorized();
|
|
}
|
|
|
|
const { id } = await context.params;
|
|
|
|
const row = await prisma.publishedRule.findUnique({
|
|
where: { id },
|
|
select: { id: true, userId: true },
|
|
});
|
|
if (!row) {
|
|
return notFound();
|
|
}
|
|
if (row.userId !== user.id) {
|
|
return forbidden("You do not have permission to delete this rule");
|
|
}
|
|
|
|
await prisma.publishedRule.delete({ where: { id: row.id } });
|
|
|
|
return NextResponse.json({ ok: true });
|
|
},
|
|
);
|