34 lines
1.8 KiB
TypeScript
34 lines
1.8 KiB
TypeScript
import { and, eq } from "drizzle-orm";
|
|
import * as z from "zod";
|
|
import { getDb } from "@/db";
|
|
import { commissionMessages, commissionTickets } from "@/db/schema";
|
|
import { notifyCommission } from "@/lib/commission/server";
|
|
import { authorizeTicket } from "@/lib/commission/tickets";
|
|
import { getMediaStorage } from "@/lib/media/storage";
|
|
import { errorResponse, HttpError, requireSameOrigin } from "@/lib/security/http";
|
|
import { limitRequest } from "@/lib/security/rate-limit";
|
|
|
|
export async function DELETE(request: Request,
|
|
context: RouteContext<"/api/commission/tickets/[id]/messages/[messageId]">) {
|
|
try {
|
|
requireSameOrigin(request);
|
|
const { id, messageId } = await context.params;
|
|
if (!z.uuid().safeParse(messageId).success) throw new HttpError(404, "message-not-found");
|
|
const { ticket, user } = await authorizeTicket(id);
|
|
if (ticket.status !== "open") throw new HttpError(409, "ticket-closed");
|
|
await limitRequest("commission-message-delete", user.id, 30);
|
|
const imageObjectKey = await getDb().transaction(async (tx) => {
|
|
const [message] = await tx.delete(commissionMessages)
|
|
.where(and(eq(commissionMessages.id, messageId), eq(commissionMessages.ticketId, id),
|
|
eq(commissionMessages.authorId, user.id)))
|
|
.returning({ imageObjectKey: commissionMessages.imageObjectKey });
|
|
if (!message) throw new HttpError(404, "message-not-found");
|
|
await tx.update(commissionTickets).set({ updatedAt: new Date() }).where(eq(commissionTickets.id, id));
|
|
return message.imageObjectKey;
|
|
});
|
|
if (imageObjectKey) await (await getMediaStorage()).delete(imageObjectKey).catch(() => undefined);
|
|
await notifyCommission(id, ticket.userId);
|
|
return new Response(null, { status: 204 });
|
|
} catch (cause) { return errorResponse(cause); }
|
|
}
|