import type { NextApiRequest, NextApiResponse } from "next"; import prisma from "@calcom/prisma"; import { withMiddleware } from "@lib/helpers/withMiddleware"; import type { UserResponse } from "@lib/types"; import { schemaQueryIdParseInt, withValidQueryIdTransformParseInt, } from "@lib/validations/shared/queryIdTransformParseInt"; import { schemaUserBodyParams, schemaUserPublic } from "@lib/validations/user"; /** * @swagger * /api/users/{id}: * get: * summary: Get a user by ID * parameters: * - in: path * name: id * schema: * type: integer * required: true * description: Numeric ID of the user to get * tags: * - users * responses: * 200: * description: OK * 401: * description: Authorization information is missing or invalid. * 404: * description: User was not found * patch: * summary: Edit an existing user * consumes: * - application/json * parameters: * - in: body * name: user * description: The user to edit * schema: * type: object * $ref: '#/components/schemas/User' * required: true * - in: path * name: id * schema: * type: integer * required: true * description: Numeric ID of the user to edit * tags: * - users * responses: * 201: * description: OK, user edited successfuly * model: User * 400: * description: Bad request. User body is invalid. * 401: * description: Authorization information is missing or invalid. * delete: * summary: Remove an existing user * parameters: * - in: path * name: id * schema: * type: integer * required: true * description: Numeric ID of the user to delete * tags: * - users * responses: * 201: * description: OK, user removed successfuly * model: User * 400: * description: Bad request. User id is invalid. * 401: * description: Authorization information is missing or invalid. */ export async function userById(req: NextApiRequest, res: NextApiResponse) { const { method, query, body } = req; const safeQuery = await schemaQueryIdParseInt.safeParse(query); const safeBody = await schemaUserBodyParams.safeParse(body); if (!safeQuery.success) throw new Error("Invalid request query", safeQuery.error); switch (method) { case "GET": await prisma.user .findUnique({ where: { id: safeQuery.data.id } }) .then((user) => schemaUserPublic.parse(user)) .then((data) => res.status(200).json({ data })) .catch((error: Error) => res.status(404).json({ message: `User with id: ${safeQuery.data.id} not found`, error }) ); break; case "PATCH": if (!safeBody.success) throw new Error("Invalid request body"); await prisma.user .update({ where: { id: safeQuery.data.id }, data: safeBody.data, }) .then((user) => schemaUserPublic.parse(user)) .then((data) => res.status(200).json({ data })) .catch((error: Error) => res.status(404).json({ message: `User with id: ${safeQuery.data.id} not found`, error }) ); break; case "DELETE": await prisma.user .delete({ where: { id: safeQuery.data.id } }) .then(() => res.status(200).json({ message: `User with id: ${safeQuery.data.id} deleted successfully` }) ) .catch((error: Error) => res.status(404).json({ message: `User with id: ${safeQuery.data.id} not found`, error }) ); break; default: res.status(405).json({ message: "Method not allowed" }); break; } } export default withMiddleware("HTTP_GET_DELETE_PATCH")(withValidQueryIdTransformParseInt(userById));