61 lines
1.8 KiB
TypeScript
61 lines
1.8 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { prisma } from "../../../../../lib/prisma";
|
|
import { requireSession } from "../../../../../lib/auth-helpers";
|
|
|
|
async function ensureOwner(viewId: string, email: string) {
|
|
const view = await prisma.userView.findFirst({
|
|
where: { id: viewId, user: { email } }
|
|
});
|
|
return view;
|
|
}
|
|
|
|
export async function POST(request: Request, context: { params: { id: string } }) {
|
|
const { session } = await requireSession();
|
|
if (!session) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const email = session.user?.email || "";
|
|
const view = await ensureOwner(context.params.id, email);
|
|
if (!view) {
|
|
return NextResponse.json({ error: "Not found" }, { status: 404 });
|
|
}
|
|
|
|
const body = await request.json();
|
|
const { eventId } = body || {};
|
|
if (!eventId) {
|
|
return NextResponse.json({ error: "Event erforderlich." }, { status: 400 });
|
|
}
|
|
|
|
await prisma.userViewItem.create({
|
|
data: { viewId: view.id, eventId }
|
|
});
|
|
|
|
return NextResponse.json({ ok: true }, { status: 201 });
|
|
}
|
|
|
|
export async function DELETE(request: Request, context: { params: { id: string } }) {
|
|
const { session } = await requireSession();
|
|
if (!session) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const email = session.user?.email || "";
|
|
const view = await ensureOwner(context.params.id, email);
|
|
if (!view) {
|
|
return NextResponse.json({ error: "Not found" }, { status: 404 });
|
|
}
|
|
|
|
const body = await request.json();
|
|
const { eventId } = body || {};
|
|
if (!eventId) {
|
|
return NextResponse.json({ error: "Event erforderlich." }, { status: 400 });
|
|
}
|
|
|
|
await prisma.userViewItem.deleteMany({
|
|
where: { viewId: view.id, eventId }
|
|
});
|
|
|
|
return NextResponse.json({ ok: true });
|
|
}
|