watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-13 00:55:37 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merged auth into new parseRequest method.

Browse source
This commit is contained in:
Mike Cao 2025-01-25 00:19:22 -08:00
parent e51f182403
commit 2d6428172b
39 changed files with 296 additions and 316 deletions
Download patch file Download diff file Expand all files Collapse all files

34
src/app/api/websites/[websiteId]/route.ts
View file

@ -1,19 +1,23 @@
import { z } from 'zod';
import { canUpdateWebsite, canDeleteWebsite, checkAuth, canViewWebsite } from 'lib/auth';
import { canUpdateWebsite, canDeleteWebsite, canViewWebsite } from 'lib/auth';
import { SHARE_ID_REGEX } from 'lib/constants';
import { checkRequest } from 'lib/request';
import { ok, json, badRequest, unauthorized, serverError } from 'lib/response';
import { parseRequest } from 'lib/request';
import { ok, json, unauthorized, serverError } from 'lib/response';
import { deleteWebsite, getWebsite, updateWebsite } from 'queries';
export async function GET(
request: Request,
{ params }: { params: Promise<{ websiteId: string }> },
) {
const { auth, error } = await parseRequest(request);
if (error) {
return error();
}
const { websiteId } = await params;
const auth = await checkAuth(request);
if (!auth || !(await canViewWebsite(auth, websiteId))) {
if (!(await canViewWebsite(auth, websiteId))) {
return unauthorized();
}
@ -32,18 +36,16 @@ export async function POST(
shareId: z.string().regex(SHARE_ID_REGEX).nullable(),
});
const { body, error } = await checkRequest(request, schema);
const { auth, body, error } = await parseRequest(request, schema);
if (error) {
return badRequest(error);
return error();
}
const { websiteId } = await params;
const { name, domain, shareId } = body;
const auth = await checkAuth(request);
if (!auth || !(await canUpdateWebsite(auth, websiteId))) {
if (!(await canUpdateWebsite(auth, websiteId))) {
return unauthorized();
}
@ -64,11 +66,15 @@ export async function DELETE(
request: Request,
{ params }: { params: Promise<{ websiteId: string }> },
) {
const { auth, error } = await parseRequest(request);
if (error) {
return error();
}
const { websiteId } = await params;
const auth = await checkAuth(request);
if (!auth || !(await canDeleteWebsite(auth, websiteId))) {
if (!(await canDeleteWebsite(auth, websiteId))) {
return unauthorized();
}