refactored/cleaned up API + added support for renaming tags

2023-10-23 00:28:39 -04:00
parent 24cced9dba
commit ed24685aaf
48 changed files with 603 additions and 305 deletions
@@ -0,0 +1,60 @@
+import type { NextApiRequest, NextApiResponse } from "next";
+import { getServerSession } from "next-auth/next";
+import { authOptions } from "@/pages/api/v1/auth/[...nextauth]";
+import { prisma } from "@/lib/api/db";
+import readFile from "@/lib/api/storage/readFile";
+
+export default async function Index(req: NextApiRequest, res: NextApiResponse) {
+  const session = await getServerSession(req, res, authOptions);
+
+  const userId = session?.user.id;
+  const username = session?.user.username?.toLowerCase();
+  const queryId = Number(req.query.id);
+
+  if (!userId || !username)
+    return res
+      .setHeader("Content-Type", "text/html")
+      .status(401)
+      .send("You must be logged in.");
+  else if (session?.user?.isSubscriber === false)
+    res.status(401).json({
+      response:
+        "You are not a subscriber, feel free to reach out to us at support@linkwarden.app in case of any issues.",
+    });
+
+  if (!queryId)
+    return res
+      .setHeader("Content-Type", "text/html")
+      .status(401)
+      .send("Invalid parameters.");
+
+  if (userId !== queryId) {
+    const targetUser = await prisma.user.findUnique({
+      where: {
+        id: queryId,
+      },
+      include: {
+        whitelistedUsers: true,
+      },
+    });
+
+    const whitelistedUsernames = targetUser?.whitelistedUsers.map(
+      (whitelistedUsername) => whitelistedUsername.username
+    );
+
+    if (targetUser?.isPrivate && !whitelistedUsernames?.includes(username)) {
+      return res
+        .setHeader("Content-Type", "text/html")
+        .send("This profile is private.");
+    }
+  }
+
+  const { file, contentType, status } = await readFile(
+    `uploads/avatar/${queryId}.jpg`
+  );
+
+  return res
+    .setHeader("Content-Type", contentType)
+    .status(status as number)
+    .send(file);
+}