53 lines
1.8 KiB
TypeScript
53 lines
1.8 KiB
TypeScript
/**
|
|
* Serves the invite endpoints. Any signed-in user can invite someone, from
|
|
* their profile page, and the invite link opens the `/register` page.
|
|
*
|
|
* - `POST /api/invites` — signed in. Makes an invite and answers its token.
|
|
* - `GET /api/invites/:token` — public. Checks that an invite still works,
|
|
* before the register page shows its form; 404 when it doesn't.
|
|
*
|
|
* @module
|
|
*/
|
|
|
|
import { Router } from "@oak/oak";
|
|
import { APIErrorCode, type APIResponse } from "../../shared/api.ts";
|
|
import { APIException } from "../lib/api-exception.ts";
|
|
import type { InviteResponse } from "../../shared/user.ts";
|
|
import { type AuthContext, authMiddleware } from "../middleware/auth.ts";
|
|
import { createInvite, validateInvite } from "../services/invite-service.ts";
|
|
|
|
/**
|
|
* Mounted by `api/main.ts` behind the error, Open Graph and CORS middleware.
|
|
* An `APIException` thrown by a handler becomes the JSON error response there.
|
|
*/
|
|
const router: Router = new Router({ prefix: "/api/invites" });
|
|
|
|
router.post("/", authMiddleware, (ctx: AuthContext) => {
|
|
if (!ctx.state.user) {
|
|
throw new APIException(APIErrorCode.UNAUTHORIZED, 401, "Not authenticated");
|
|
}
|
|
const responseBody: APIResponse<InviteResponse> = {
|
|
success: true,
|
|
data: { token: createInvite(ctx.state.user.userId) },
|
|
};
|
|
ctx.response.status = 201;
|
|
ctx.response.body = responseBody;
|
|
});
|
|
|
|
router.get("/:token", (ctx) => {
|
|
// A used invite answers 404 too: the page only needs to know it won't work.
|
|
try {
|
|
validateInvite(ctx.params.token);
|
|
const responseBody: APIResponse<null> = { success: true, data: null };
|
|
ctx.response.body = responseBody;
|
|
} catch {
|
|
throw new APIException(
|
|
APIErrorCode.NOT_FOUND,
|
|
404,
|
|
"Invalid or expired invite",
|
|
);
|
|
}
|
|
});
|
|
|
|
export default router;
|