public-offering
/
cal.pub0.org
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: fixess attends:id endpoit

pull/9078/head
Agusti Fernandez Pardo 2022-04-23 05:51:26 +02:00
parent 8c19303baf
commit 096fd40044
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pages/api/attendees/index.ts
View File

@ -41,8 +41,7 @@ async function createOrlistAllAttendees(
req: NextApiRequest, req: NextApiRequest,
res: NextApiResponse<AttendeesResponse | AttendeeResponse> res: NextApiResponse<AttendeesResponse | AttendeeResponse>
) { ) {
const { method } = req; const { method, userId } = req;
const userId = req.userId;
// Here we make sure to only return attendee's of the user's own bookings. // Here we make sure to only return attendee's of the user's own bookings.
const userBookings = await prisma.booking.findMany({ const userBookings = await prisma.booking.findMany({
where: { where: {
@ -76,14 +75,16 @@ async function createOrlistAllAttendees(
throw new Error("User not found"); throw new Error("User not found");
} }
const userBookingIds = userWithBookings.bookings.map((booking: any) => booking.id).flat(); const userBookingIds = userWithBookings.bookings.map((booking: any) => booking.id).flat();
if (!userBookingIds.includes(bookingId)) res.status(401).json({ message: "Unauthorized" }); // Here we make sure to only return attendee's of the user's own bookings.
if (!userBookingIds.includes(parseInt(safe.data.bookingId)))
res.status(401).json({ message: "Unauthorized" });
else { else {
delete safe.data.bookingId; delete safe.data.bookingId;
const noBookingId = safe.data; const noBookingId = safe.data;
const data = await prisma.attendee.create({ const data = await prisma.attendee.create({
data: { data: {
...noBookingId, ...noBookingId,
booking: { connect: { id: bookingId } }, booking: { connect: { id: parseInt(bookingId) } },
}, },
}); });
const attendee = schemaAttendeePublic.parse(data); const attendee = schemaAttendeePublic.parse(data);