All files / src/app/api/collections/[id] route.ts

100% Statements 31/31
100% Branches 6/6
100% Functions 3/3
100% Lines 28/28

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62                      4x 4x 4x 3x 3x 3x   1x 1x   1x               5x 5x 5x 4x 4x 4x   2x 2x 1x   2x               4x 4x 4x 3x 3x 3x   1x 1x   1x      
import { NextRequest, NextResponse } from "next/server";
import { requireAuth } from "@/lib/auth";
import { CollectionController } from "@/server/api/collections";
import { requireApiCapability, requireApiCollectionAccess } from "@/server/dal/collection-access";
import { getDb } from "@/lib/db";
import { errorResponse } from "@/server/api/http-errors";
 
export async function GET(
  _request: NextRequest,
  { params }: { params: Promise<{ id: string }> }
) {
  try {
    const { id } = await params;
    const user = await requireAuth();
    const db = getDb();
    const access = await requireApiCollectionAccess(db, id, user.id);
    if (access instanceof NextResponse) return access;
 
    const collection = await CollectionController.fromDb(db).getCollection(id);
    return NextResponse.json(collection);
  } catch (error) {
    return errorResponse(error);
  }
}
 
export async function PATCH(
  request: NextRequest,
  { params }: { params: Promise<{ id: string }> }
) {
  try {
    const { id } = await params;
    const user = await requireAuth();
    const db = getDb();
    const access = await requireApiCapability(db, id, user.id, "collection:manage");
    if (access instanceof NextResponse) return access;
 
    const body = await request.json();
    const collection = await CollectionController.fromDb(db).updateCollection(id, body);
    return NextResponse.json(collection);
  } catch (error) {
    return errorResponse(error);
  }
}
 
export async function DELETE(
  _request: NextRequest,
  { params }: { params: Promise<{ id: string }> }
) {
  try {
    const { id } = await params;
    const user = await requireAuth();
    const db = getDb();
    const access = await requireApiCapability(db, id, user.id, "collection:manage");
    if (access instanceof NextResponse) return access;
 
    const collection = await CollectionController.fromDb(db).deleteCollection(id);
    return NextResponse.json({ message: "Collection deleted", collection });
  } catch (error) {
    return errorResponse(error);
  }
}