cal.pub0.org/pages/api/teams/[team]/invite.ts

72 lines
1.8 KiB
TypeScript

import type { NextApiRequest, NextApiResponse } from 'next';
import prisma from '../../../../lib/prisma';
import createInvitationEmail from "../../../../lib/emails/invitation";
import {getSession} from "next-auth/client";
export default async function handler(req: NextApiRequest, res: NextApiResponse) {
if (req.method !== "POST") {
return res.status(400).json({ message: "Bad request" });
}
const session = await getSession({req: req});
if (!session) {
return res.status(401).json({message: "Not authenticated"});
}
const team = await prisma.team.findFirst({
where: {
id: parseInt(req.query.team)
}
});
if (!team) {
return res.status(404).json({message: "Invalid team"});
}
const invitee = await prisma.user.findFirst({
where: {
OR: [
{ username: req.body.usernameOrEmail },
{ email: req.body.usernameOrEmail }
]
}
});
if (!invitee) {
return res.status(400).json({
message: `Invite failed because there is no corresponding user for ${req.body.usernameOrEmail}`});
}
// create provisional membership
try {
const createMembership = await prisma.membership.create({
data: {
teamId: parseInt(req.query.team),
userId: invitee.id,
role: req.body.role,
},
});
}
catch (err) {
if (err.code === "P2002") { // unique constraint violation
return res.status(409).json({
message: 'This user is a member of this team / has a pending invitation.',
});
} else {
throw err; // rethrow
}
};
// inform user of membership by email
if (req.body.sendEmailInvitation) {
createInvitationEmail({
toEmail: invitee.email,
from: session.user.name,
teamName: team.name
});
}
res.status(201).json({});
}