public/owltide
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages 1 Wiki Activity Actions

Add API utility for requiring an admin session

Browse source
This commit is contained in:
Hornwitser 2025-06-28 00:55:26 +02:00
parent b0d5cdf791
commit b2f48e98e0
3 changed files with 13 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

9
server/api/admin/delete-database.post.ts
View file

@ -1,13 +1,6 @@
import { deleteDatabase } from "~/server/database";
export default defineEventHandler(async (event) => {
const session = await requireServerSession(event);
if (session.account.type !== "admin") {
throw createError({
statusCode: 403,
statusMessage: "Forbidden",
});
}
await requireServerSessionWithAdmin(event);
await deleteDatabase();
})

8
server/api/admin/user.patch.ts
View file

@ -4,13 +4,7 @@ import { z } from "zod/v4-mini";
import { broadcastEvent } from "~/server/streams";
export default defineEventHandler(async (event) => {
const session = await requireServerSession(event);
if (session.account.type !== "admin") {
throw createError({
statusCode: 403,
statusMessage: "Forbidden",
});
}
await requireServerSessionWithAdmin(event);
const { success, error, data: patch } = apiUserPatchSchema.safeParse(await readBody(event));
if (!success) {
throw createError({

11
server/utils/session.ts
View file

@ -70,3 +70,14 @@ export async function requireServerSession(event: H3Event) {
});
return session;
}
export async function requireServerSessionWithAdmin(event: H3Event) {
const session = await requireServerSession(event);
if (session.account.type !== "admin") {
throw createError({
statusCode: 403,
statusMessage: "Forbidden",
});
}
return session;
}