Fix permission checking

2024-02-10 01:38:19 -06:00
parent ea31eb47ae
commit 26997475fd
7 changed files with 268 additions and 16 deletions
@@ -1,12 +1,19 @@
 import type { NextApiRequest, NextApiResponse } from "next";
 import verifyUser from "@/lib/api/verifyUser";
 import deleteLinksById from "@/lib/api/controllers/links/bulk/deleteLinksById";
+import updateLinksById from "@/lib/api/controllers/links/bulk/updateLinksById";

 export default async function links(req: NextApiRequest, res: NextApiResponse) {
 	const user = await verifyUser({ req, res });
 	if (!user) return;

-	if (req.method === "DELETE") {
+	if (req.method === "PUT") {
+		const updated = await updateLinksById(user.id, req.body.linkIds, req.body.data);
+		return res.status(updated.status).json({
+			response: updated.response,
+		});
+	}
+	else if (req.method === "DELETE") {
 		const deleted = await deleteLinksById(user.id, req.body.linkIds);
 		return res.status(deleted.status).json({
 			response: deleted.response,