54 lines
1.6 KiB
TypeScript
54 lines
1.6 KiB
TypeScript
import { requireAuth } from '~/server/utils/auth'
|
|
import { prisma } from '~/server/utils/prisma'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const adminUser = requireAuth(event)
|
|
const groupId = getRouterParam(event, 'id')
|
|
const body = await readBody(event)
|
|
const { email, userId, role = 'member' } = body
|
|
|
|
if (!groupId || (!email && !userId)) {
|
|
throw createError({ statusCode: 400, message: 'Group ID and either Email or User ID are required' })
|
|
}
|
|
|
|
// 1. Проверяем права
|
|
const group = await prisma.group.findUnique({ where: { id: groupId } })
|
|
if (!group || (group.ownerId !== adminUser.id && adminUser.role !== 'admin')) {
|
|
throw createError({ statusCode: 403, message: 'Only group owners or admins can add members' })
|
|
}
|
|
|
|
// 2. Находим пользователя
|
|
let userToAdd = null
|
|
if (userId) {
|
|
userToAdd = await prisma.user.findUnique({ where: { id: userId } })
|
|
} else if (email) {
|
|
userToAdd = await prisma.user.findUnique({ where: { email } })
|
|
}
|
|
|
|
if (!userToAdd) {
|
|
throw createError({ statusCode: 404, message: 'User not found' })
|
|
}
|
|
|
|
// 3. Добавляем в группу
|
|
try {
|
|
const membership = await prisma.groupMember.upsert({
|
|
where: {
|
|
userId_groupId: {
|
|
userId: userToAdd.id,
|
|
groupId: groupId
|
|
}
|
|
},
|
|
update: { role },
|
|
create: {
|
|
userId: userToAdd.id,
|
|
groupId: groupId,
|
|
role
|
|
}
|
|
})
|
|
|
|
return { success: true, membership }
|
|
} catch (e) {
|
|
throw createError({ statusCode: 500, message: 'Failed to add member to group' })
|
|
}
|
|
})
|