Files
pichunt/server/api/admin/quest/[questId]/index.get.ts
T
Pascal cfda014760 refactor(auth): simplify authorization checks to use membership only
- Remove explicit ADMIN role checks in API handlers
- Replace combined creator/member role checks with membership-only filters
- Update seed data roles to reflect changed authorization logic
- Add migration to insert hunt creators as members for consistent checks
- Prevent removal of hunt creator as a member with new explicit check
- Adjust related user role updates and queries accordingly
- Upgrade dependencies including nuxt and zod for compatibility
2026-07-30 21:59:36 +02:00

99 lines
2.0 KiB
TypeScript

import { useValidatedParams, z, zh } from 'h3-zod';
import prisma from '~~/lib/prisma';
export default defineEventHandler(async (event) => {
const user = await requireUserSession(event);
const userId = user.user.id;
const { questId } = await useValidatedParams(
event,
z.object({
questId: zh.numAsString
})
);
const quest = await prisma.huntQuest.findUnique({
where: {
id: questId,
hunt: {
members: {
some: {
memberId: userId
}
}
}
},
omit: {
huntId: true,
pictureId: true,
order: true
},
include: {
hunt: {
select: {
name_de: true,
name_en: true,
id: true
}
},
answers: {
select: {
id: true,
text: true,
final: true,
updatedAt: true,
lang: true,
team: {
select: {
id: true,
name: true
}
},
review: {
select: {
score: true,
review: true,
internalNote: true,
rankingValue: true,
showcase: true,
updatedAt: true,
reviewer: {
select: {
name: true,
id: true
}
}
}
},
member: {
select: {
name: true,
id: true
}
},
picture: {
select: {
url: true,
createdAt: true
}
}
},
orderBy: [
{ final: 'desc' },
{ review: { rankingValue: { sort: 'desc', nulls: 'last' } } },
{ review: { score: { sort: 'desc', nulls: 'last' } } },
{
updatedAt: 'desc'
}
]
}
}
});
if (!quest) {
throw createError({ status: 404, statusText: 'Not found!' });
}
return quest;
});