61 lines
1.2 KiB
TypeScript
61 lines
1.2 KiB
TypeScript
import { useValidatedBody, useValidatedParams, z, zh } from 'h3-zod';
|
|
import prisma from '~~/lib/prisma';
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const user = await requireUserSession(event);
|
|
const userId = user.user.id;
|
|
|
|
const { huntId, teamId } = await useValidatedParams(
|
|
event,
|
|
z.object({
|
|
huntId: zh.numAsString,
|
|
teamId: zh.numAsString
|
|
})
|
|
);
|
|
|
|
const { userId: memberId } = await useValidatedBody(
|
|
event,
|
|
z.object({
|
|
userId: z.int().gt(0)
|
|
})
|
|
);
|
|
|
|
// Only the team owner may remove members
|
|
const team = await prisma.huntTeam.findFirst({
|
|
where: {
|
|
id: teamId,
|
|
huntId,
|
|
ownerId: userId
|
|
},
|
|
select: {
|
|
id: true
|
|
}
|
|
});
|
|
|
|
if (!team) {
|
|
throw createError({ status: 403, statusText: 'Not allowed!' });
|
|
}
|
|
|
|
if (memberId === userId) {
|
|
throw createError({
|
|
status: 400,
|
|
statusText: 'Owner cannot kick themselves!'
|
|
});
|
|
}
|
|
|
|
try {
|
|
await prisma.teamMember.delete({
|
|
where: {
|
|
memberId_teamId: {
|
|
memberId,
|
|
teamId
|
|
}
|
|
}
|
|
});
|
|
} catch (e) {
|
|
throw createError({ status: 404, statusText: 'Not found!', cause: e });
|
|
}
|
|
|
|
return { success: true };
|
|
});
|