import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod'; import prisma from '~~/lib/prisma'; export default defineEventHandler(async (event) => { const user = await requireUserSession(event); if (user.user.role !== 'ADMIN') { throw createError({ status: 403, statusText: 'Not allowed!' }); } const userId = user.user.id; const { huntId } = await useValidatedParams( event, z.object({ huntId: zh.numAsString }) ); const { updatedAt, ...data } = await useValidatedBody( event, z .object({ name: z.string().min(1).max(256).trim(), description: z.string().min(1).max(1000).trim(), virtual: z.boolean(), start: z.iso.datetime(), end: z.iso.datetime(), allowJoin: z.boolean(), revealQuests: z.boolean(), revealAnswers: z.boolean() }) .partial() .and( z.object({ updatedAt: z.iso.datetime() }) ) ); await prisma.hunt.update({ where: { id: huntId, updatedAt, OR: [ { creatorId: userId }, { members: { some: { memberId: userId } } } ] }, data }); return {}; });