owltide/server/api/schedule.ts

/*
	SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>
	SPDX-License-Identifier: AGPL-3.0-or-later
*/
import { readSchedule } from "~/server/database";

export default defineEventHandler(async (event) => {
	const session = await getServerSession(event, false);
	const schedule = await readSchedule();
	return canSeeCrew(session?.access) ? schedule : filterSchedule(schedule);
});
License under AGPL version 3 or later I firmly believe in free software. The application I'm making here have capabilities that I've not seen in any system. It presents itself as an opportunity to collaborate on a tool that serves the people rather than corporations. Whose incentives are to help people rather, not make the most money. And whose terms ensure that these freedoms and incentives cannot be taken back or subverted. I license this software under the AGPL. 2025-06-30 18:58:24 +02:00			`/*`
			`SPDX-FileCopyrightText: © 2025 Hornwitser <code@hornwitser.no>`
			`SPDX-License-Identifier: AGPL-3.0-or-later`
			`*/`
Fix import statements Remove unused or unneeded imports and change imports of luxon APIs to use the wrapper. 2025-06-23 12:48:09 +02:00			`import { readSchedule } from "~/server/database";`
Port application from Next.js to Nuxt Nuxt is based on Vue.js and I find their building blocks to be much neater compared to the React based Next.js. 2025-03-05 15:36:50 +01:00
			`export default defineEventHandler(async (event) => {`
Refactor sessions to frequently rotate In order to minimise the window of opportunity to steal a session, automatically rotate it onto a new session on a frequent basis. This makes a session cookie older than the automatic rollover time less likely to grant access and more likely to be detected. Should a stolen session cookie get rotated while the attacker is using it, the user will be notificed that their session has been taken the next time they open the app if the user re-visits the website before the session is discarded. 2025-07-07 22:42:49 +02:00			`const session = await getServerSession(event, false);`
Filter crew events to only be visible for crew 2025-03-10 16:26:52 +01:00			`const schedule = await readSchedule();`
Refactor sessions to frequently rotate In order to minimise the window of opportunity to steal a session, automatically rotate it onto a new session on a frequent basis. This makes a session cookie older than the automatic rollover time less likely to grant access and more likely to be detected. Should a stolen session cookie get rotated while the attacker is using it, the user will be notificed that their session has been taken the next time they open the app if the user re-visits the website before the session is discarded. 2025-07-07 22:42:49 +02:00			`return canSeeCrew(session?.access) ? schedule : filterSchedule(schedule);`
Refactor API types and sync logic Rename and refactor the types passed over the API to be based on an entity that's either living or a tombstone. A living entity has a deleted property that's either undefined or false, while a tombstone has a deleted property set to true. All entities have a numeric id and an updatedAt timestamp. To sync entities, an array of replacements are passed around. Living entities are replaced with tombstones when they're deleted. And tombstones are replaced with living entities when restored. 2025-06-11 21:05:17 +02:00			`});`