Add team member and hunt member management for admins

server/api/admin/team/[teamId]/add.post.ts

@@ -0,0 +1,110 @@
+import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+
+  const { teamId } = await useValidatedParams(
+    event,
+    z.object({
+      teamId: zh.numAsString
+    })
+  );
+
+  const { userId } = await useValidatedBody(
+    event,
+    z.object({
+      userId: z.int().gt(0)
+    })
+  );
+
+  const team = await prisma.huntTeam.findUnique({
+    where: {
+      id: teamId,
+      hunt: {
+        OR: [
+          {
+            creatorId: user.user.id
+          },
+          {
+            members: {
+              some: {
+                memberId: user.user.id
+              }
+            }
+          }
+        ]
+      }
+    },
+    select: {
+      id: true,
+      ownerId: true,
+      huntId: true,
+      members: {
+        select: {
+          memberId: true
+        },
+        where: {
+          memberId: userId
+        },
+        take: 1
+      }
+    }
+  });
+
+  if (!team) {
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+  const huntId = team.huntId;
+
+  const newUser = await prisma.user.findUnique({
+    select: {
+      id: true
+    },
+    where: {
+      id: userId,
+      teamsOwner: {
+        none: {
+          huntId
+        }
+      },
+      teamsMember: {
+        none: {
+          team: {
+            huntId
+          }
+        }
+      },
+      huntsMember: {
+        none: {
+          huntId
+        }
+      },
+      huntsCreated: {
+        none: {
+          id: huntId
+        }
+      }
+    }
+  });
+
+  if (!newUser) {
+    throw createError({ status: 409, statusText: 'User is already member!' });
+  }
+
+  await prisma.teamMember.create({
+    data: {
+      teamId: team.id,
+      memberId: newUser.id
+    }
+  });
+
+  return { success: true };
+});

server/api/admin/team/[teamId]/index.delete.ts

@@ -0,0 +1,47 @@
+import { useValidatedParams, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+
+  const { teamId } = await useValidatedParams(
+    event,
+    z.object({
+      teamId: zh.numAsString
+    })
+  );
+
+  try {
+    await prisma.huntTeam.delete({
+      where: {
+        id: teamId,
+        hunt: {
+          OR: [
+            {
+              creatorId: user.user.id
+            },
+            {
+              members: {
+                some: {
+                  memberId: user.user.id
+                }
+              }
+            }
+          ]
+        }
+      }
+    });
+  } catch (e) {
+    console.error('Delete team', teamId, user.user.id, e);
+    throw createError({ status: 404, statusText: 'Not found!', cause: e });
+  }
+
+  return { success: true };
+});

server/api/admin/team/[teamId]/kick.post.ts

@@ -0,0 +1,62 @@
+import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  if (user.user.role !== 'ADMIN') {
+    throw createError({
+      status: 403,
+      statusText: 'Not allowed!'
+    });
+  }
+
+  const { teamId } = await useValidatedParams(
+    event,
+    z.object({
+      teamId: zh.numAsString
+    })
+  );
+
+  const { userId } = await useValidatedBody(
+    event,
+    z.object({
+      userId: z.int().gt(0)
+    })
+  );
+
+  try {
+     await prisma.teamMember.delete({
+      where: {
+        memberId_teamId: {
+          memberId: userId,
+          teamId
+        },
+        team: {
+          hunt: {
+            OR: [
+              {
+                creatorId: user.user.id
+              },
+              {
+                members: {
+                  some: {
+                    memberId: user.user.id
+                  }
+                }
+              }
+            ]
+          }
+        }
+      },
+      select: {
+        memberId: true
+      }
+    });
+  } catch (e) {
+    console.error('Kick user from team', teamId, userId, user.user.id, e);
+    throw createError({ status: 404, statusText: 'Not found!', cause: e });
+  }
+
+  return { success: true };
+});