54 lines
1.0 KiB
TypeScript
54 lines
1.0 KiB
TypeScript
import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod';
|
|
import prisma from '~~/lib/prisma';
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const user = await requireUserSession(event);
|
|
|
|
if (user.user.role !== 'ADMIN') {
|
|
throw createError({
|
|
status: 403,
|
|
statusText: 'Not allowed!'
|
|
});
|
|
}
|
|
|
|
const { userId } = await useValidatedParams(
|
|
event,
|
|
z.object({
|
|
userId: zh.numAsString
|
|
})
|
|
);
|
|
|
|
const { role } = await useValidatedBody(
|
|
event,
|
|
z.object({
|
|
role: z.enum(['USER', 'CREATOR', 'ADMIN'])
|
|
})
|
|
);
|
|
|
|
if (userId === user.user.id) {
|
|
throw createError({
|
|
status: 400,
|
|
statusText: 'You cannot change your own role!'
|
|
});
|
|
}
|
|
|
|
const updated = await prisma.user.update({
|
|
where: {
|
|
id: userId,
|
|
deactivated: false,
|
|
deletedAt: null
|
|
},
|
|
data: {
|
|
role
|
|
},
|
|
select: {
|
|
id: true,
|
|
name: true,
|
|
email: true,
|
|
role: true
|
|
}
|
|
});
|
|
|
|
return { success: true, user: updated };
|
|
});
|