136 lines
4 KiB
TypeScript
136 lines
4 KiB
TypeScript
import { Request, Response, NextFunction } from "express";
|
|
import { z } from "zod";
|
|
import { db } from "@server/db";
|
|
import { actions, apiKeyActions } from "@server/db/schemas";
|
|
import response from "@server/lib/response";
|
|
import HttpCode from "@server/types/HttpCode";
|
|
import createHttpError from "http-errors";
|
|
import logger from "@server/logger";
|
|
import { fromError } from "zod-validation-error";
|
|
import { eq, and, inArray } from "drizzle-orm";
|
|
import { OpenAPITags, registry } from "@server/openApi";
|
|
|
|
const bodySchema = z
|
|
.object({
|
|
actionIds: z
|
|
.array(z.string().nonempty())
|
|
.transform((v) => Array.from(new Set(v)))
|
|
})
|
|
.strict();
|
|
|
|
const paramsSchema = z.object({
|
|
apiKeyId: z.string().nonempty()
|
|
});
|
|
|
|
registry.registerPath({
|
|
method: "post",
|
|
path: "/org/{orgId}/api-key/{apiKeyId}/actions",
|
|
description:
|
|
"Set actions for an API key. This will replace any existing actions.",
|
|
tags: [OpenAPITags.Org, OpenAPITags.ApiKey],
|
|
request: {
|
|
params: paramsSchema,
|
|
body: {
|
|
content: {
|
|
"application/json": {
|
|
schema: bodySchema
|
|
}
|
|
}
|
|
}
|
|
},
|
|
responses: {}
|
|
});
|
|
|
|
export async function setApiKeyActions(
|
|
req: Request,
|
|
res: Response,
|
|
next: NextFunction
|
|
): Promise<any> {
|
|
try {
|
|
const parsedBody = bodySchema.safeParse(req.body);
|
|
if (!parsedBody.success) {
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.BAD_REQUEST,
|
|
fromError(parsedBody.error).toString()
|
|
)
|
|
);
|
|
}
|
|
|
|
const { actionIds: newActionIds } = parsedBody.data;
|
|
|
|
const parsedParams = paramsSchema.safeParse(req.params);
|
|
if (!parsedParams.success) {
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.BAD_REQUEST,
|
|
fromError(parsedParams.error).toString()
|
|
)
|
|
);
|
|
}
|
|
|
|
const { apiKeyId } = parsedParams.data;
|
|
|
|
const actionsExist = await db
|
|
.select()
|
|
.from(actions)
|
|
.where(inArray(actions.actionId, newActionIds));
|
|
|
|
if (actionsExist.length !== newActionIds.length) {
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.BAD_REQUEST,
|
|
"One or more actions do not exist"
|
|
)
|
|
);
|
|
}
|
|
|
|
await db.transaction(async (trx) => {
|
|
const existingActions = await trx
|
|
.select()
|
|
.from(apiKeyActions)
|
|
.where(eq(apiKeyActions.apiKeyId, apiKeyId));
|
|
|
|
const existingActionIds = existingActions.map((a) => a.actionId);
|
|
|
|
const actionIdsToAdd = newActionIds.filter(
|
|
(id) => !existingActionIds.includes(id)
|
|
);
|
|
const actionIdsToRemove = existingActionIds.filter(
|
|
(id) => !newActionIds.includes(id)
|
|
);
|
|
|
|
if (actionIdsToRemove.length > 0) {
|
|
await trx
|
|
.delete(apiKeyActions)
|
|
.where(
|
|
and(
|
|
eq(apiKeyActions.apiKeyId, apiKeyId),
|
|
inArray(apiKeyActions.actionId, actionIdsToRemove)
|
|
)
|
|
);
|
|
}
|
|
|
|
if (actionIdsToAdd.length > 0) {
|
|
const insertValues = actionIdsToAdd.map((actionId) => ({
|
|
apiKeyId,
|
|
actionId
|
|
}));
|
|
await trx.insert(apiKeyActions).values(insertValues);
|
|
}
|
|
});
|
|
|
|
return response(res, {
|
|
data: {},
|
|
success: true,
|
|
error: false,
|
|
message: "API key actions updated successfully",
|
|
status: HttpCode.OK
|
|
});
|
|
} catch (error) {
|
|
logger.error(error);
|
|
return next(
|
|
createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred")
|
|
);
|
|
}
|
|
}
|