Add team member and hunt member management for admins

server/api/admin/hunt/[huntId]/index.get.ts

@@ -55,7 +55,6 @@ export default defineEventHandler(async (event) => {
       },
       members: {
         select: {
-          createdAt: true,
           member: {
             select: {
               id: true,

server/api/admin/hunt/[huntId]/member.delete.ts

@@ -0,0 +1,60 @@
+import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+
+  const { huntId } = await useValidatedParams(
+    event,
+    z.object({
+      huntId: zh.numAsString
+    })
+  );
+
+  const { userId } = await useValidatedBody(
+    event,
+    z.object({
+      userId: z.int().gt(0)
+    })
+  );
+
+  try {
+    await prisma.huntMember.delete({
+      where: {
+        memberId_huntId: {
+          memberId: userId,
+          huntId
+        },
+        hunt: {
+          OR: [
+            {
+              creatorId: user.user.id
+            },
+            {
+              members: {
+                some: {
+                  memberId: user.user.id
+                }
+              }
+            }
+          ]
+        }
+      },
+      select: {
+        memberId: true
+      }
+    });
+  } catch (e) {
+    console.error('Kick member from hunt', huntId, userId, user.user.id, e);
+    throw createError({ status: 404, statusText: 'Not found!', cause: e });
+  }
+
+  return { success: true };
+});

server/api/admin/hunt/[huntId]/member.post.ts

@@ -0,0 +1,116 @@
+import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+
+  const { huntId } = await useValidatedParams(
+    event,
+    z.object({
+      huntId: zh.numAsString
+    })
+  );
+
+  const { userId } = await useValidatedBody(
+    event,
+    z.object({
+      userId: z.int().gt(0)
+    })
+  );
+
+  const hunt = await prisma.hunt.findUnique({
+    where: {
+      id: huntId,
+      OR: [
+        {
+          creatorId: user.user.id
+        },
+        {
+          members: {
+            some: {
+              memberId: user.user.id
+            }
+          }
+        }
+      ]
+    },
+    select: {
+      id: true,
+      members: {
+        select: {
+          memberId: true
+        },
+        where: {
+          memberId: userId
+        },
+        take: 1
+      }
+    }
+  });
+
+  if (!hunt) {
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+
+  const newUser = await prisma.user.findUnique({
+    select: {
+      id: true,
+      role: true
+    },
+    where: {
+      id: userId,
+      teamsOwner: {
+        none: {
+          huntId
+        }
+      },
+      teamsMember: {
+        none: {
+          team: {
+            huntId
+          }
+        }
+      },
+      huntsMember: {
+        none: {
+          huntId
+        }
+      },
+      huntsCreated: {
+        none: {
+          id: huntId
+        }
+      }
+    }
+  });
+
+  if (!newUser) {
+    throw createError({ status: 409, statusText: 'User is already member!' });
+  }
+
+  await prisma.huntMember.create({
+    data: {
+      huntId: hunt.id,
+      memberId: newUser.id
+    }
+  });
+  if (newUser.role !== 'ADMIN') {
+    await prisma.user.update({
+      where: {
+        id: newUser.id
+      },
+      data: {
+        role: 'ADMIN'
+      }
+    });
+  }
+
+  return { success: true };
+});

server/api/admin/hunt/[huntId]/teamless.get.ts

@@ -0,0 +1,88 @@
+import { useValidatedParams, useValidatedQuery, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+  const userId = user.user.id;
+  const { huntId } = await useValidatedParams(
+    event,
+    z.object({
+      huntId: zh.numAsString
+    })
+  );
+  const hunt = await prisma.hunt.findUnique({
+    where: {
+      id: huntId,
+      OR: [
+        {
+          creatorId: userId
+        },
+        {
+          members: {
+            some: {
+              memberId: userId
+            }
+          }
+        }
+      ]
+    },
+    select: { id: true }
+  });
+
+  if (!hunt) {
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+
+  const { email } = await useValidatedQuery(
+    event,
+    z.object({
+      email: z.string().min(3).trim()
+    })
+  );
+
+  return prisma.user.findMany({
+    select: {
+      email: true,
+      name: true,
+      id: true
+    },
+    where: {
+      email: {
+        contains: email
+      },
+      teamsOwner: {
+        none: {
+          huntId
+        }
+      },
+      teamsMember: {
+        none: {
+          team: {
+            huntId
+          }
+        }
+      },
+      huntsMember: {
+        none: {
+          huntId
+        }
+      },
+      huntsCreated: {
+        none: {
+          id: huntId
+        }
+      }
+    },
+    take: 10,
+    orderBy: {
+      createdAt: 'desc'
+    }
+  });
+});

server/api/admin/hunt/[huntId]/teams.get.ts

@@ -0,0 +1,83 @@
+import { useValidatedParams, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+  const userId = user.user.id;
+  const { huntId } = await useValidatedParams(
+    event,
+    z.object({
+      huntId: zh.numAsString
+    })
+  );
+
+  const hunt = await prisma.hunt.findUnique({
+    where: {
+      id: huntId,
+      OR: [
+        {
+          creatorId: userId
+        },
+        {
+          members: {
+            some: {
+              memberId: userId
+            }
+          }
+        }
+      ]
+    },
+    select: {
+      id: true,
+      name: true,
+      teams: {
+        omit: {
+          huntId: true,
+          ownerId: true
+        },
+        orderBy: {
+          createdAt: 'desc'
+        },
+        include: {
+          owner: {
+            select: {
+              id: true,
+              name: true,
+              email: true
+            }
+          },
+          _count: {
+            select: {
+              answers: true
+            }
+          },
+          members: {
+            select: {
+              createdAt: true,
+              member: {
+                select: {
+                  id: true,
+                  name: true,
+                  email: true
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  });
+
+  if (!hunt) {
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+
+  return hunt;
+});