car-crushers-portal/functions/api/events-team/team-members/user.ts

import { jsonError, jsonResponse } from "../../../common.js";

export async function onRequestDelete(context: RequestContext) {
  let body: { id?: string } = {};

  try {
    body = await context.request.json();
  } catch {
    return jsonError("Invalid body", 400);
  }

  const { id } = body;

  if (
    typeof id !== "string" ||
    id.match(/\D/) ||
    id.length > 19 ||
    id.length < 17
  )
    return jsonError("Invalid ID", 400);

  await context.env.D1.prepare("DELETE FROM et_members WHERE id = ?;")
    .bind(id)
    .run();

  return new Response(null, {
    status: 204,
  });
}

export async function onRequestPatch(context: RequestContext) {
  let body: { id?: string; name?: string; roblox_username?: string } = {};

  try {
    body = await context.request.json();
  } catch {
    return jsonError("Invalid body", 400);
  }

  if (typeof body.name !== "string" && typeof body.roblox_username !== "string")
    return jsonError("At least one property must be provided", 400);

  const updates = [];

  if (body.name?.length) updates.push({ query: "name = ?", value: body.name });

  if (typeof body.roblox_username === "string" && body.roblox_username) {
    const robloxResolveResp = await fetch(
      "https://users.roblox.com/v1/usernames/users",
      {
        body: JSON.stringify({
          excludeBannedUsers: true,
          usernames: [body.roblox_username],
        }),
        headers: {
          "content-type": "application/json",
        },
        method: "POST",
      },
    );

    const { data } = (await robloxResolveResp.json()) as {
      data: { [k: string]: any }[];
    };

    if (!data.length)
      return jsonError("No Roblox user exists with that name", 400);

    updates.push({ query: "roblox_id = ?", value: data[0].id });
  }

  await context.env.D1.prepare(
    `UPDATE et_members
     SET ${updates.map((u) => u.query).join(", ")}
     WHERE id = ?;`,
  )
    .bind(...updates.map((u) => u.value), body.id)
    .run();

  return jsonResponse(
    JSON.stringify({
      name: body.name,
      roblox_id: updates.find((u) => typeof u.value === "number")?.value,
    }),
  );
}

export async function onRequestPost(context: RequestContext) {
  const { id, name, roblox_username } = context.data.body;

  if (
    typeof id !== "string" ||
    id.match(/\D/) ||
    id.length > 19 ||
    id.length < 17
  )
    return jsonError("Invalid user ID", 400);

  if (typeof name !== "string" || !name.length || name.length > 32)
    return jsonError("Invalid name", 400);

  if (
    await context.env.D1.prepare("SELECT * FROM et_members WHERE id = ?;")
      .bind(id)
      .first()
  )
    return jsonError("User is already a member", 400);

  if (!["string", "undefined"].includes(typeof roblox_username))
    return jsonError("Roblox username must be a string", 400);

  let roblox_id: number | undefined = undefined;

  if (roblox_username) {
    if (
      roblox_username.length < 3 ||
      roblox_username.length > 20 ||
      roblox_username.match(/\W/) ||
      roblox_username.match(/_/g)?.length > 1
    )
      return jsonError("Username is invalid", 400);

    const usernameResolveResp = await fetch(
      "https://users.roblox.com/v1/usernames/users",
      {
        body: JSON.stringify({
          excludeBannedUsers: true,
          usernames: [roblox_username],
        }),
        headers: {
          "content-type": "application/json",
        },
        method: "POST",
      },
    );

    if (!usernameResolveResp.ok) {
      console.log(await usernameResolveResp.text());
      return jsonError("An error occurred when looking up that username", 500);
    }

    const { data }: { data: { id: number }[] } =
      await usernameResolveResp.json();

    if (!data.length)
      return jsonError(
        "No user was found with that name, either they don't exist or they are banned",
        400,
      );

    roblox_id = data[0].id;
  }

  const createdAt = Date.now();
  const addingUser = context.data.current_user.id;

  await context.env.D1.prepare(
    "INSERT INTO et_members (created_at, created_by, id, name, roblox_id) VALUES (?, ?, ?, ?, ?);",
  )
    .bind(createdAt, addingUser, id, name, roblox_id || null)
    .run();

  return new Response(null, {
    status: 204,
  });
}