import type { NextApiRequest, NextApiResponse } from "next"; import prisma from "@calcom/prisma"; import { withMiddleware } from "@lib/helpers/withMiddleware"; import { AttendeeResponse, AttendeesResponse } from "@lib/types"; import { getCalcomUserId } from "@lib/utils/getCalcomUserId"; import { schemaAttendeeBodyParams, schemaAttendeePublic, withValidAttendee } from "@lib/validations/attendee"; /** * @swagger * /api/attendees: * get: * summary: Get all attendees * tags: * - attendees * responses: * 200: * description: OK * 401: * description: Authorization information is missing or invalid. * 404: * description: No attendees were found * post: * summary: Creates a new attendee * tags: * - attendees * responses: * 201: * description: OK, attendee created * model: Attendee * 400: * description: Bad request. Attendee body is invalid. * 401: * description: Authorization information is missing or invalid. */ async function createOrlistAllAttendees( req: NextApiRequest, res: NextApiResponse ) { const { method } = req; const userId = getCalcomUserId(res); // Here we make sure to only return attendee's of the user's own bookings. const userBookings = await prisma.booking.findMany({ where: { userId, }, include: { attendees: true, }, }); const userBookingsAttendees = userBookings.map((booking) => booking.attendees).flat(); if (method === "GET") { if (userBookingsAttendees) res.status(200).json({ data: userBookingsAttendees }); else (error: Error) => res.status(404).json({ message: "No Attendees were found", error, }); } else if (method === "POST") { const safe = schemaAttendeeBodyParams.safeParse(req.body); if (!safe.success) { console.log(safe.error); throw new Error("Invalid request body", safe.error); } const bookingId = safe.data.bookingId; delete safe.data.bookingId; const noBookingId = safe.data; const attendee = await prisma.attendee.create({ data: { ...noBookingId, booking: { connect: { id: parseInt(bookingId as string) } } }, }); const data = schemaAttendeePublic.parse(attendee); if (data) res.status(201).json({ data, message: "Attendee created successfully" }); else (error: Error) => res.status(400).json({ message: "Could not create new attendee", error, }); } else res.status(405).json({ message: `Method ${method} not allowed` }); } export default withMiddleware("HTTP_GET_OR_POST")(createOrlistAllAttendees);