74 lines
1.9 KiB
TypeScript
74 lines
1.9 KiB
TypeScript
import type { NextApiRequest } from "next";
|
|
|
|
import { HttpError } from "@calcom/lib/http-error";
|
|
import prisma from "@calcom/prisma";
|
|
|
|
import { decodeOAuthState } from "./decodeOAuthState";
|
|
import { throwIfNotHaveAdminAccessToTeam } from "./throwIfNotHaveAdminAccessToTeam";
|
|
|
|
/**
|
|
* This function is used to create app credentials for either a user or a team
|
|
*
|
|
* @param appData information about the app
|
|
* @param appData.type the app slug
|
|
* @param appData.appId the app slug
|
|
* @param key the keys for the app's credentials
|
|
* @param req the request object from the API call. Used to determine if the credential belongs to a user or a team
|
|
*/
|
|
const createOAuthAppCredential = async (
|
|
appData: { type: string; appId: string },
|
|
key: unknown,
|
|
req: NextApiRequest
|
|
) => {
|
|
const userId = req.session?.user.id;
|
|
if (!userId) {
|
|
throw new HttpError({ statusCode: 401, message: "You must be logged in to do this" });
|
|
}
|
|
// For OAuth flows, see if a teamId was passed through the state
|
|
const state = decodeOAuthState(req);
|
|
|
|
if (state?.teamId) {
|
|
// Check that the user belongs to the team
|
|
const team = await prisma.team.findFirst({
|
|
where: {
|
|
id: state.teamId,
|
|
members: {
|
|
some: {
|
|
userId: req.session?.user.id,
|
|
accepted: true,
|
|
},
|
|
},
|
|
},
|
|
select: { id: true, members: { select: { userId: true } } },
|
|
});
|
|
|
|
if (!team) throw new Error("User does not belong to the team");
|
|
|
|
await prisma.credential.create({
|
|
data: {
|
|
type: appData.type,
|
|
key: key || {},
|
|
teamId: state.teamId,
|
|
appId: appData.appId,
|
|
},
|
|
});
|
|
|
|
return;
|
|
}
|
|
|
|
await throwIfNotHaveAdminAccessToTeam({ teamId: state?.teamId ?? null, userId });
|
|
|
|
await prisma.credential.create({
|
|
data: {
|
|
type: appData.type,
|
|
key: key || {},
|
|
userId,
|
|
appId: appData.appId,
|
|
},
|
|
});
|
|
|
|
return;
|
|
};
|
|
|
|
export default createOAuthAppCredential;
|