117 lines
4.3 KiB
TypeScript
117 lines
4.3 KiB
TypeScript
import type { NextApiRequest } from "next";
|
|
|
|
import { HttpError } from "@calcom/lib/http-error";
|
|
import { defaultResponder } from "@calcom/lib/server";
|
|
|
|
import { schemaQueryUserId } from "~/lib/validations/shared/queryUserId";
|
|
import { schemaUserEditBodyParams, schemaUserReadPublic } from "~/lib/validations/user";
|
|
|
|
/**
|
|
* @swagger
|
|
* /users/{userId}:
|
|
* patch:
|
|
* summary: Edit an existing user
|
|
* operationId: editUserById
|
|
* parameters:
|
|
* - in: path
|
|
* name: userId
|
|
* example: 4
|
|
* schema:
|
|
* type: integer
|
|
* required: true
|
|
* description: ID of the user to edit
|
|
* - in: query
|
|
* name: apiKey
|
|
* required: true
|
|
* schema:
|
|
* type: string
|
|
* description: Your API key
|
|
* requestBody:
|
|
* description: Edit an existing attendee related to one of your bookings
|
|
* required: true
|
|
* content:
|
|
* application/json:
|
|
* schema:
|
|
* type: object
|
|
* properties:
|
|
* email:
|
|
* type: string
|
|
* format: email
|
|
* description: Email that belongs to the user being edited
|
|
* username:
|
|
* type: string
|
|
* description: Username for the user being edited
|
|
* brandColor:
|
|
* description: The user's brand color
|
|
* type: string
|
|
* darkBrandColor:
|
|
* description: The user's brand color for dark mode
|
|
* type: string
|
|
* weekStart:
|
|
* description: Start of the week. Acceptable values are one of [SUNDAY, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY]
|
|
* type: string
|
|
* timeZone:
|
|
* description: The user's time zone
|
|
* type: string
|
|
* theme:
|
|
* description: Default theme for the user. Acceptable values are one of [DARK, LIGHT]
|
|
* type: string
|
|
* timeFormat:
|
|
* description: The user's time format. Acceptable values are one of [TWELVE, TWENTY_FOUR]
|
|
* type: string
|
|
* locale:
|
|
* description: The user's locale. Acceptable values are one of [EN, FR, IT, RU, ES, DE, PT, RO, NL, PT_BR, ES_419, KO, JA, PL, AR, IW, ZH_CH, ZH_TW, CS, SR, SV, VI]
|
|
* type: string
|
|
* examples:
|
|
* user:
|
|
* summary: An example of USER
|
|
* value:
|
|
* email: email@example.com
|
|
* username: johndoe
|
|
* weekStart: MONDAY
|
|
* brandColor: #555555
|
|
* darkBrandColor: #111111
|
|
* timeZone: EUROPE/PARIS
|
|
* theme: LIGHT
|
|
* timeFormat: TWELVE
|
|
* locale: FR
|
|
* tags:
|
|
* - users
|
|
* responses:
|
|
* 200:
|
|
* description: OK, user edited successfuly
|
|
* 400:
|
|
* description: Bad request. User body is invalid.
|
|
* 401:
|
|
* description: Authorization information is missing or invalid.
|
|
* 403:
|
|
* description: Insufficient permissions to access resource.
|
|
*/
|
|
export async function patchHandler(req: NextApiRequest) {
|
|
const { prisma, isAdmin } = req;
|
|
const query = schemaQueryUserId.parse(req.query);
|
|
// Here we only check for ownership of the user if the user is not admin, otherwise we let ADMIN's edit any user
|
|
if (!isAdmin && query.userId !== req.userId) throw new HttpError({ statusCode: 403, message: "Forbidden" });
|
|
|
|
const body = await schemaUserEditBodyParams.parseAsync(req.body);
|
|
const userSchedules = await prisma.schedule.findMany({
|
|
where: { userId: query.userId },
|
|
});
|
|
const userSchedulesIds = userSchedules.map((schedule) => schedule.id);
|
|
// @note: here we make sure user can only make as default his own scheudles
|
|
if (body.defaultScheduleId && !userSchedulesIds.includes(Number(body.defaultScheduleId))) {
|
|
throw new HttpError({
|
|
statusCode: 400,
|
|
message: "Bad request: Invalid default schedule id",
|
|
});
|
|
}
|
|
const data = await prisma.user.update({
|
|
where: { id: query.userId },
|
|
data: body,
|
|
});
|
|
const user = schemaUserReadPublic.parse(data);
|
|
return { user };
|
|
}
|
|
|
|
export default defaultResponder(patchHandler);
|