54 lines
1.6 KiB
TypeScript
54 lines
1.6 KiB
TypeScript
import { requireAuth } from '~/server/utils/auth'
|
|
import { prisma } from '~/server/utils/prisma'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const adminUser = requireAuth(event)
|
|
const groupId = getRouterParam(event, 'id')
|
|
const body = await readBody(event)
|
|
const { email, role = 'member' } = body
|
|
|
|
if (!groupId || !email) {
|
|
throw createError({ statusCode: 400, message: 'Group ID and Email are required' })
|
|
}
|
|
|
|
// 1. Проверяем, является ли текущий пользователь админом группы или глобальным админом
|
|
const group = await prisma.group.findUnique({
|
|
where: { id: groupId }
|
|
})
|
|
|
|
if (!group || (group.ownerId !== adminUser.id && adminUser.role !== 'admin')) {
|
|
throw createError({ statusCode: 403, message: 'Only group owners or admins can add members' })
|
|
}
|
|
|
|
// 2. Ищем пользователя по email
|
|
const userToAdd = await prisma.user.findUnique({
|
|
where: { email }
|
|
})
|
|
|
|
if (!userToAdd) {
|
|
throw createError({ statusCode: 404, message: 'User with this email not found in system' })
|
|
}
|
|
|
|
// 3. Добавляем в группу
|
|
try {
|
|
const membership = await prisma.groupMember.upsert({
|
|
where: {
|
|
userId_groupId: {
|
|
userId: userToAdd.id,
|
|
groupId: groupId
|
|
}
|
|
},
|
|
update: { role },
|
|
create: {
|
|
userId: userToAdd.id,
|
|
groupId: groupId,
|
|
role
|
|
}
|
|
})
|
|
|
|
return { success: true, membership }
|
|
} catch (e) {
|
|
throw createError({ statusCode: 500, message: 'Failed to add member to group' })
|
|
}
|
|
})
|