import type { NextApiRequest, NextApiResponse } from "next"; import { withMiddleware } from "@lib/helpers/withMiddleware"; import type { MembershipResponse } from "@lib/types"; import { schemaMembershipBodyParams, schemaMembershipPublic } from "@lib/validations/membership"; import { schemaQueryIdAsString, withValidQueryIdString } from "@lib/validations/shared/queryIdString"; export async function membershipById( { method, query, body, userId, prisma }: NextApiRequest, res: NextApiResponse ) { const safeQuery = schemaQueryIdAsString.safeParse(query); if (!safeQuery.success) { res.status(400).json({ message: "Your query was invalid" }); return; } // This is how we set the userId and teamId in the query for managing compoundId. const [paramUserId, teamId] = safeQuery.data.id.split("_"); if (parseInt(paramUserId) !== userId) res.status(401).json({ message: "Unauthorized" }); else { switch (method) { /** * @swagger * /memberships/{userId}_{teamId}: * get: * summary: Find a membership by userID and teamID * parameters: * - in: path * name: userId * schema: * type: integer * required: true * description: Numeric userId of the membership to get * - in: path * name: teamId * schema: * type: integer * required: true * description: Numeric teamId of the membership to get * tags: * - memberships * responses: * 200: * description: OK * 401: * description: Authorization information is missing or invalid. * 404: * description: Membership was not found */ case "GET": await prisma.membership .findUnique({ where: { userId_teamId: { userId: userId, teamId: parseInt(teamId), }, }, }) .then((data) => schemaMembershipPublic.parse(data)) .then((membership) => res.status(200).json({ membership })) .catch((error: Error) => res.status(404).json({ message: `Membership with id: ${safeQuery.data.id} not found`, error, }) ); break; /** * @swagger * /memberships/{userId}_{teamId}: * patch: * summary: Edit an existing membership * parameters: * - in: path * name: userId * schema: * type: integer * required: true * description: Numeric userId of the membership to get * - in: path * name: teamId * schema: * type: integer * required: true * description: Numeric teamId of the membership to get * tags: * - memberships * responses: * 201: * description: OK, membership edited successfuly * 400: * description: Bad request. Membership body is invalid. * 401: * description: Authorization information is missing or invalid. */ case "PATCH": const safeBody = schemaMembershipBodyParams.safeParse(body); if (!safeBody.success) { { res.status(400).json({ message: "Invalid request body" }); return; } } await prisma.membership .update({ where: { userId_teamId: { userId: userId, teamId: parseInt(teamId), }, }, data: safeBody.data, }) .then((data) => schemaMembershipPublic.parse(data)) .then((membership) => res.status(200).json({ membership })) .catch((error: Error) => res.status(404).json({ message: `Membership with id: ${safeQuery.data.id} not found`, error, }) ); break; /** * @swagger * /memberships/{userId}_{teamId}: * delete: * summary: Remove an existing membership * parameters: * - in: path * name: userId * schema: * type: integer * required: true * description: Numeric userId of the membership to get * - in: path * name: teamId * schema: * type: integer * required: true * description: Numeric teamId of the membership to get * tags: * - memberships * responses: * 201: * description: OK, membership removed successfuly * 400: * description: Bad request. Membership id is invalid. * 401: * description: Authorization information is missing or invalid. */ case "DELETE": await prisma.membership .delete({ where: { userId_teamId: { userId: userId, teamId: parseInt(teamId), }, }, }) .then(() => res.status(200).json({ message: `Membership with id: ${safeQuery.data.id} deleted successfully`, }) ) .catch((error: Error) => res.status(404).json({ message: `Membership with id: ${safeQuery.data.id} not found`, error, }) ); break; default: res.status(405).json({ message: "Method not allowed" }); break; } } } export default withMiddleware("HTTP_GET_DELETE_PATCH")(withValidQueryIdString(membershipById));