public-offering
/
cal.pub0.org
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: fixess attends:id endpoit

pull/9078/head
Agusti Fernandez Pardo 2022-04-23 05:51:26 +02:00
parent 8c19303baf
commit 096fd40044
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pages/api/attendees/index.ts
View File

@ -41,8 +41,7 @@ async function createOrlistAllAttendees(
req: NextApiRequest,
res: NextApiResponse<AttendeesResponse | AttendeeResponse>
) {
const { method } = req;
const userId = req.userId;
const { method, userId } = req;
// Here we make sure to only return attendee's of the user's own bookings.
const userBookings = await prisma.booking.findMany({
where: {
@ -76,14 +75,16 @@ async function createOrlistAllAttendees(
throw new Error("User not found");
}
const userBookingIds = userWithBookings.bookings.map((booking: any) => booking.id).flat();
if (!userBookingIds.includes(bookingId)) res.status(401).json({ message: "Unauthorized" });
// Here we make sure to only return attendee's of the user's own bookings.
if (!userBookingIds.includes(parseInt(safe.data.bookingId)))
res.status(401).json({ message: "Unauthorized" });
else {
delete safe.data.bookingId;
const noBookingId = safe.data;
const data = await prisma.attendee.create({
data: {
...noBookingId,
booking: { connect: { id: bookingId } },
booking: { connect: { id: parseInt(bookingId) } },
},
});
const attendee = schemaAttendeePublic.parse(data);