// Next.js API route support: https://nextjs.org/docs/api-routes/introduction import type {NextApiRequest, NextApiResponse} from "next"; import {app} from "@/firebase"; import {getFirestore, doc, getDoc, deleteDoc, setDoc} from "firebase/firestore"; import {withIronSessionApiRoute} from "iron-session/next"; import {sessionOptions} from "@/lib/session"; import {PERMISSIONS} from "@/constants/userPermissions"; const db = getFirestore(app); export default withIronSessionApiRoute(handler, sessionOptions); async function handler(req: NextApiRequest, res: NextApiResponse) { if (req.method === "GET") return get(req, res); if (req.method === "DELETE") return del(req, res); if (req.method === "PATCH") return patch(req, res); } async function get(req: NextApiRequest, res: NextApiResponse) { if (!req.session.user) { res.status(401).json({ok: false}); return; } const {id} = req.query as {id: string}; const docRef = doc(db, "packages", id); const docSnap = await getDoc(docRef); if (docSnap.exists()) { res.status(200).json({ id: docSnap.id, ...docSnap.data(), module, }); } else { res.status(404).json(undefined); } } async function patch(req: NextApiRequest, res: NextApiResponse) { if (!req.session.user) { res.status(401).json({ok: false}); return; } const {id} = req.query as {id: string}; const docRef = doc(db, "packages", id); const docSnap = await getDoc(docRef); if (docSnap.exists()) { if (!["developer", "admin"].includes(req.session.user.type)) { res.status(403).json({ok: false}); return; } await setDoc(docRef, req.body, {merge: true}); res.status(200).json({ok: true}); } else { res.status(404).json({ok: false}); } } async function del(req: NextApiRequest, res: NextApiResponse) { if (!req.session.user) { res.status(401).json({ok: false}); return; } const {id} = req.query as {id: string}; const docRef = doc(db, "packages", id); const docSnap = await getDoc(docRef); if (docSnap.exists()) { if (!["developer", "admin"].includes(req.session.user.type)) { res.status(403).json({ok: false}); return; } await deleteDoc(docRef); res.status(200).json({ok: true}); } else { res.status(404).json({ok: false}); } }