summary refs log tree commit diff
path: root/src/routes/api/v8/guilds/#id/bans.ts
blob: 8e6e35de76f6ecf5967460f53c66e5f181ec8f3b (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
import { Request, Response, Router } from "express";
import { BanModel, getPermission, GuildBanAddEvent, GuildBanRemoveEvent, GuildModel } from "fosscord-server-util";
import { HTTPError } from "lambert-server";
import { getIpAdress } from "../../../../../middlewares/GlobalRateLimit";
import { BanCreateSchema } from "../../../../../schema/Ban";
import { emitEvent } from "../../../../../util/Event";
import { check } from "../../../../../util/instanceOf";
import { removeMember } from "../../../../../util/Member";
import { getPublicUser } from "../../../../../util/User";

const router: Router = Router();

router.get("/", async (req: Request, res: Response) => {
	const guild_id = BigInt(req.params.id);

	const guild = await GuildModel.findOne({ id: guild_id }).exec();
	if (!guild) throw new HTTPError("Guild not found", 404);

	var bans = await BanModel.find({ guild_id: guild_id }).exec();
	return res.json(bans);
});

router.get("/:user", async (req: Request, res: Response) => {
	const guild_id = BigInt(req.params.id);
	const user_id = BigInt(req.params.ban);

	var ban = await BanModel.findOne({ guild_id: guild_id, user_id: user_id }).exec();
	if (!ban) throw new HTTPError("Ban not found", 404);
	return res.json(ban);
});

router.post("/:userid", check(BanCreateSchema), async (req: Request, res: Response) => {
	const guild_id = BigInt(req.params.id);
	const banned_user_id = BigInt(req.params.userid);

	const banned_user = await getPublicUser(banned_user_id);
	const perms = await getPermission(req.userid, guild_id);
	if (!perms.has("BAN_MEMBERS")) throw new HTTPError("You don't have the permission to ban members", 403);
	if (req.userid === banned_user_id) throw new HTTPError("You can't ban yourself", 400);

	await removeMember(banned_user_id, guild_id);

	const ban = await new BanModel({
		user_id: banned_user_id,
		guild_id: guild_id,
		ip: getIpAdress(req),
		executor_id: req.userid,
		reason: req.body.reason, // || otherwise empty
	}).save();

	await emitEvent({
		event: "GUILD_BAN_ADD",
		data: {
			guild_id: guild_id,
			user: banned_user,
		},
		guild_id: guild_id,
	} as GuildBanAddEvent);

	return res.json(ban).send();
});

router.delete("/:userid", async (req: Request, res: Response) => {
	var guild_id = BigInt(req.params.id);
	var banned_user_id = BigInt(req.params.userid);

	const banned_user = await getPublicUser(banned_user_id);
	const guild = await GuildModel.findOne({ id: guild_id }).exec();
	if (!guild) throw new HTTPError("Guild not found", 404);

	const perms = await getPermission(req.userid, guild.id);
	if (!perms.has("BAN_MEMBERS")) {
		throw new HTTPError("No permissions", 403);
	}

	await BanModel.deleteOne({
		user_id: banned_user_id,
		guild_id: guild.id,
	}).exec();

	await emitEvent({
		event: "GUILD_BAN_REMOVE",
		data: {
			guild_id: guild.id,
			user: banned_user,
		},
		guild_id: guild.id,
	} as GuildBanRemoveEvent);

	return res.status(204).send();
});

export default router;