added collaboration mode for collections
This commit is contained in:
@@ -10,7 +10,7 @@ import AES from "crypto-js/aes";
|
||||
import enc from "crypto-js/enc-utf8";
|
||||
import path from "path";
|
||||
import fs from "fs";
|
||||
import hasAccessToCollection from "@/lib/api/hasAccessToCollection";
|
||||
import getPermission from "@/lib/api/getPermission";
|
||||
|
||||
export default async function (req: NextApiRequest, res: NextApiResponse) {
|
||||
if (!req.query.params)
|
||||
@@ -23,7 +23,7 @@ export default async function (req: NextApiRequest, res: NextApiResponse) {
|
||||
if (!session?.user?.email)
|
||||
return res.status(401).json({ response: "You must be logged in." });
|
||||
|
||||
const collectionIsAccessible = await hasAccessToCollection(
|
||||
const collectionIsAccessible = await getPermission(
|
||||
session.user.id,
|
||||
Number(collectionId)
|
||||
);
|
||||
|
||||
@@ -8,14 +8,7 @@ import { getServerSession } from "next-auth/next";
|
||||
import { authOptions } from "pages/api/auth/[...nextauth]";
|
||||
import getTags from "@/lib/api/controllers/tags/getTags";
|
||||
|
||||
type Data = {
|
||||
response: object[] | string;
|
||||
};
|
||||
|
||||
export default async function (
|
||||
req: NextApiRequest,
|
||||
res: NextApiResponse<Data>
|
||||
) {
|
||||
export default async function (req: NextApiRequest, res: NextApiResponse) {
|
||||
const session = await getServerSession(req, res, authOptions);
|
||||
|
||||
if (!session?.user?.email) {
|
||||
|
||||
@@ -0,0 +1,23 @@
|
||||
// Copyright (C) 2022-present Daniel31x13 <daniel31x13@gmail.com>
|
||||
// This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 3.
|
||||
// This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
||||
// You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
|
||||
import type { NextApiRequest, NextApiResponse } from "next";
|
||||
import { getServerSession } from "next-auth/next";
|
||||
import { authOptions } from "pages/api/auth/[...nextauth]";
|
||||
import getUsers from "@/lib/api/controllers/users/getUsers";
|
||||
|
||||
export default async function (req: NextApiRequest, res: NextApiResponse) {
|
||||
const session = await getServerSession(req, res, authOptions);
|
||||
|
||||
if (!session?.user?.email) {
|
||||
return res.status(401).json({ response: "You must be logged in." });
|
||||
}
|
||||
|
||||
// get unsensitive user info by email
|
||||
if (req.method === "GET") {
|
||||
const users = await getUsers(req.query.email as string);
|
||||
return res.status(users.status).json({ response: users.response });
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user