/* Spacebar: A FOSS re-implementation and extension of the Discord.com backend. Copyright (C) 2023 Spacebar and Spacebar Contributors This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details. You should have received a copy of the GNU Affero General Public License along with this program. If not, see . */ import { route } from "@spacebar/api"; import { Channel, ChannelPinsUpdateEvent, Config, DiscordApiErrors, emitEvent, Message, MessageUpdateEvent, } from "@spacebar/util"; import { Request, Response, Router } from "express"; const router: Router = Router(); router.put( "/:message_id", route({ permission: "VIEW_CHANNEL", responses: { 204: {}, 403: {}, 404: {}, 400: { body: "APIErrorResponse", }, }, }), async (req: Request, res: Response) => { const { channel_id, message_id } = req.params; const message = await Message.findOneOrFail({ where: { id: message_id }, }); // * in dm channels anyone can pin messages -> only check for guilds if (message.guild_id) req.permission?.hasThrow("MANAGE_MESSAGES"); const pinned_count = await Message.count({ where: { channel: { id: channel_id }, pinned: true }, }); const { maxPins } = Config.get().limits.channel; if (pinned_count >= maxPins) throw DiscordApiErrors.MAXIMUM_PINS.withParams(maxPins); await Promise.all([ Message.update({ id: message_id }, { pinned: true }), emitEvent({ event: "MESSAGE_UPDATE", channel_id, data: message, } as MessageUpdateEvent), emitEvent({ event: "CHANNEL_PINS_UPDATE", channel_id, data: { channel_id, guild_id: message.guild_id, last_pin_timestamp: undefined, }, } as ChannelPinsUpdateEvent), ]); res.sendStatus(204); }, ); router.delete( "/:message_id", route({ permission: "VIEW_CHANNEL", responses: { 204: {}, 403: {}, 404: {}, 400: { body: "APIErrorResponse", }, }, }), async (req: Request, res: Response) => { const { channel_id, message_id } = req.params; const channel = await Channel.findOneOrFail({ where: { id: channel_id }, }); if (channel.guild_id) req.permission?.hasThrow("MANAGE_MESSAGES"); const message = await Message.findOneOrFail({ where: { id: message_id }, }); message.pinned = false; await Promise.all([ message.save(), emitEvent({ event: "MESSAGE_UPDATE", channel_id, data: message, } as MessageUpdateEvent), emitEvent({ event: "CHANNEL_PINS_UPDATE", channel_id, data: { channel_id, guild_id: channel.guild_id, last_pin_timestamp: undefined, }, } as ChannelPinsUpdateEvent), ]); res.sendStatus(204); }, ); router.get( "/", route({ permission: ["READ_MESSAGE_HISTORY"], responses: { 200: { body: "APIMessageArray", }, 400: { body: "APIErrorResponse", }, }, }), async (req: Request, res: Response) => { const { channel_id } = req.params; const pins = await Message.find({ where: { channel_id: channel_id, pinned: true }, }); res.send(pins); }, ); export default router;