summary refs log tree commit diff
path: root/api/src/routes/guilds/#guild_id/members/#member_id/index.ts
blob: db29cd08088a1e2b9a0d33fd1a42938bfebf24f9 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
import { Request, Response, Router } from "express";
import {
	Guild,
	Member,
	User,
	GuildMemberAddEvent,
	getPermission,
	PermissionResolvable,
	Role,
	GuildMemberUpdateEvent,
	emitEvent
} from "@fosscord/util";
import { HTTPError } from "lambert-server";
import { check } from "../../../../../util/instanceOf";
import { MemberChangeSchema } from "../../../../../schema/Member";
import { In } from "typeorm";

const router = Router();

router.get("/", async (req: Request, res: Response) => {
	const { guild_id, member_id } = req.params;
	await Member.IsInGuildOrFail(req.user_id, guild_id);

	const member = await Member.findOneOrFail({ id: member_id, guild_id });

	return res.json(member);
});

router.patch("/", check(MemberChangeSchema), async (req: Request, res: Response) => {
	const { guild_id, member_id } = req.params;
	const body = req.body as MemberChangeSchema;
	if (body.roles) {
		const roles = await Role.find({ id: In(body.roles) });
		if (body.roles.length !== roles.length) throw new HTTPError("Roles not found", 404);
		// TODO: check if user has permission to add role
	}

	const member = await Member.findOneOrFail({ id: member_id, guild_id });
	member.assign(req.body);

	Promise.all([
		member.save(),
		emitEvent({
			event: "GUILD_MEMBER_UPDATE",
			guild_id,
			data: { ...member, roles: member.role_ids }
		} as GuildMemberUpdateEvent)
	]);

	res.json(member);
});

router.put("/", async (req: Request, res: Response) => {
	const { guild_id, member_id } = req.params;

	throw new HTTPError("Maintenance: Currently you can't add a member", 403);
	// TODO: only for oauth2 applications
	await Member.addToGuild(member_id, guild_id);
	res.sendStatus(204);
});

router.delete("/", async (req: Request, res: Response) => {
	const { guild_id, member_id } = req.params;

	const perms = await getPermission(req.user_id, guild_id);
	perms.hasThrow("KICK_MEMBERS");

	await Member.removeFromGuild(member_id, guild_id);
	res.sendStatus(204);
});

export default router;