1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
import { z } from 'zod';
import { parseRequest } from '@/lib/request';
import { json, notFound, ok, unauthorized } from '@/lib/response';
import { canDeleteTeam, canUpdateTeam, canViewTeam } from '@/permissions';
import { deleteTeam, getTeam, updateTeam } from '@/queries/prisma';
export async function GET(request: Request, { params }: { params: Promise<{ teamId: string }> }) {
const { auth, error } = await parseRequest(request);
if (error) {
return error();
}
const { teamId } = await params;
if (!(await canViewTeam(auth, teamId))) {
return unauthorized();
}
const team = await getTeam(teamId, { includeMembers: true });
if (!team) {
return notFound({ message: 'Team not found.' });
}
return json(team);
}
export async function POST(request: Request, { params }: { params: Promise<{ teamId: string }> }) {
const schema = z.object({
name: z.string().max(50).optional(),
accessCode: z.string().max(50).optional(),
});
const { auth, body, error } = await parseRequest(request, schema);
if (error) {
return error();
}
const { teamId } = await params;
if (!(await canUpdateTeam(auth, teamId))) {
return unauthorized({ message: 'You must be the owner/manager of this team.' });
}
const team = await updateTeam(teamId, body);
return json(team);
}
export async function DELETE(
request: Request,
{ params }: { params: Promise<{ teamId: string }> },
) {
const { auth, error } = await parseRequest(request);
if (error) {
return error();
}
const { teamId } = await params;
if (!(await canDeleteTeam(auth, teamId))) {
return unauthorized({ message: 'You must be the owner/manager of this team.' });
}
await deleteTeam(teamId);
return ok();
}
|