import { NextApiRequestQueryBody } from 'lib/types'; import { canViewWebsite } from 'lib/auth'; import { useAuth, useCors } from 'lib/middleware'; import { NextApiResponse } from 'next'; import { badRequest, methodNotAllowed, ok, unauthorized } from 'next-basics'; import { EVENT_COLUMNS, FILTER_COLUMNS, SESSION_COLUMNS } from 'lib/constants'; import { getValues } from 'queries'; export interface WebsiteResetRequestQuery { id: string; } export default async ( req: NextApiRequestQueryBody, res: NextApiResponse, ) => { await useCors(req, res); await useAuth(req, res); const { id: websiteId, type } = req.query; if (req.method === 'GET') { if (!SESSION_COLUMNS.includes(type as string) && !EVENT_COLUMNS.includes(type as string)) { return badRequest(res); } if (!(await canViewWebsite(req.auth, websiteId))) { return unauthorized(res); } const values = await getValues(websiteId, FILTER_COLUMNS[type as string]); return ok( res, values .map(({ value }) => value) .filter(n => n) .sort(), ); } return methodNotAllowed(res); };