import { canViewTeam } from 'lib/auth'; import { useAuth, useValidate } from 'lib/middleware'; import { NextApiRequestQueryBody, SearchFilter, WebsiteSearchFilterType } from 'lib/types'; import { getFilterValidation } from 'lib/yup'; import { NextApiResponse } from 'next'; import { methodNotAllowed, ok, unauthorized } from 'next-basics'; import { getWebsitesByTeamId } from 'queries'; import { createTeamWebsites } from 'queries/admin/teamWebsite'; export interface TeamWebsiteRequestQuery extends SearchFilter { id: string; } export interface TeamWebsiteRequestBody { websiteIds?: string[]; } import * as yup from 'yup'; const schema = { GET: yup.object().shape({ id: yup.string().uuid().required(), ...getFilterValidation(/All|Name|Domain/i), }), POST: yup.object().shape({ id: yup.string().uuid().required(), websiteIds: yup.array().of(yup.string()).min(1).required(), }), }; export default async ( req: NextApiRequestQueryBody, res: NextApiResponse, ) => { await useAuth(req, res); req.yup = schema; await useValidate(req, res); const { id: teamId } = req.query; if (req.method === 'GET') { if (!(await canViewTeam(req.auth, teamId))) { return unauthorized(res); } const { page, filter, pageSize } = req.query; const websites = await getWebsitesByTeamId(teamId, { page, filter, pageSize: +pageSize || null, }); return ok(res, websites); } if (req.method === 'POST') { if (!(await canViewTeam(req.auth, teamId))) { return unauthorized(res); } const { websiteIds } = req.body; const websites = await createTeamWebsites(teamId, websiteIds); return ok(res, websites); } return methodNotAllowed(res); };