cal.pub0.org/pages/api/users/[userId]/_get.ts

46 lines
1.4 KiB
TypeScript
Raw Normal View History

2022-06-14 20:35:15 +00:00
import type { NextApiRequest } from "next";
import { HttpError } from "@calcom/lib/http-error";
import { defaultResponder } from "@calcom/lib/server";
import { schemaQueryUserId } from "@lib/validations/shared/queryUserId";
2022-06-14 20:35:15 +00:00
import { schemaUserReadPublic } from "@lib/validations/user";
/**
* @swagger
* /users/{id}:
* get:
* summary: Find a user, returns your user if regular user.
* operationId: getUserById
* parameters:
* - in: path
* name: id
* example: 4
* schema:
* type: integer
* required: true
* description: ID of the user to get
* tags:
* - users
* responses:
* 200:
* description: OK
* 401:
* description: Authorization information is missing or invalid.
* 404:
* description: User was not found
*/
export async function getHandler(req: NextApiRequest) {
const { prisma, isAdmin } = req;
const query = schemaQueryUserId.parse(req.query);
2022-06-14 20:35:15 +00:00
// Here we only check for ownership of the user if the user is not admin, otherwise we let ADMIN's edit any user
if (!isAdmin && query.userId !== req.userId)
throw new HttpError({ statusCode: 401, message: "Unauthorized" });
const data = await prisma.user.findUnique({ where: { id: query.userId } });
2022-06-14 20:35:15 +00:00
const user = schemaUserReadPublic.parse(data);
return { user };
}
export default defaultResponder(getHandler);