Files

57 lines
2.3 KiB
TypeScript

import { getQuery, setResponseStatus } from "h3"
import mongoose from "mongoose"
import { readAdminForm, adminFormText, adminFormTexts, adminFormFile, safeFileExtension, splitIds } from "../../utils/admin-form"
import { putObjects, tryDeleteObject } from "../../utils/object-storage"
import { defineAuthenticatedEventHandler, requireAuthenticatedUser } from "../../utils/auth"
import { parseMongoId, validationResponse } from "../../utils/api-validation"
import { Album } from "../../models/album"
export default defineAuthenticatedEventHandler(async (event) => {
await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
const parsedId = parseMongoId(getQuery(event).id)
if ("error" in parsedId) return validationResponse(event, parsedId.error)
const parts = await readAdminForm(event)
const name = adminFormText(parts, "name")
const artistInput = adminFormTexts(parts, "artists")
const artists = artistInput.length ? splitIds(artistInput.join(",")) : undefined
const genre = adminFormText(parts, "genre")
const file = adminFormFile(parts, "file")
if (artists && !artists.every((id) => mongoose.isValidObjectId(id))) {
setResponseStatus(event, 400)
return { message: "One or more ID(s) are invalid" }
}
if (genre && !mongoose.isValidObjectId(genre)) return validationResponse(event, "Invalid id")
if (file && !file.type.includes("image/")) {
setResponseStatus(event, 400)
return { message: "Only image files are accepted" }
}
const album = await Album.findById(parsedId.value)
if (!album) {
setResponseStatus(event, 404)
return {}
}
if (file) {
const filePath = `album/${crypto.randomUUID()}.${safeFileExtension(file.name)}`
await putObjects(event, [{ key: filePath, body: file.data, contentType: file.type }])
const previousPath = album.file
album.file = filePath
if (name) album.name = name
if (artists) album.artists = artists.map((id) => new mongoose.Types.ObjectId(id))
if (genre) album.genre = new mongoose.Types.ObjectId(genre)
try {
await album.save()
} catch (error) {
await tryDeleteObject(event, filePath)
throw error
}
await tryDeleteObject(event, previousPath)
return album
}
if (name) album.name = name
if (artists) album.artists = artists.map((id) => new mongoose.Types.ObjectId(id))
if (genre) album.genre = new mongoose.Types.ObjectId(genre)
await album.save()
return album
})