Spacebar/server
1
0
Fork 0
mirror of https://github.com/spacebarchat/server.git synced 2024-11-10 12:42:44 +01:00
Code Issues Releases Activity

🎨 [Guild] check if user is allowed to created a guild

Browse Source
This commit is contained in:
Flam3rboy 2021-02-19 15:42:15 +01:00
parent 5e9dea0dd5
commit 00ef8958b9
2 changed files with 15 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/routes/api/v8/guilds/index.ts
View File

@ -10,8 +10,6 @@ import {
Snowflake,
getPermission,
Guild,
Member,
PublicMember,
} from "fosscord-server-util";
import { HTTPError } from "lambert-server";
import { check } from "./../../../../util/instanceOf";
@ -37,7 +35,6 @@ router.patch("/:id", check(GuildUpdateSchema), async (req: Request, res: Respons
const body = req.body as GuildUpdateSchema;
const guild_id = BigInt(req.params.id);
// // TODO: check permission of member
const perms = await getPermission(req.userid, guild_id);
if (!perms.has("MANAGE_GUILD")) throw new HTTPError("User is missing the 'MANAGE_GUILD' permission", 401);
@ -47,12 +44,13 @@ router.patch("/:id", check(GuildUpdateSchema), async (req: Request, res: Respons
return res.status(204);
});
// // TODO: finish POST route
router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) => {
const body = req.body as GuildCreateSchema;
// // TODO: check if user is in more than (config max guilds)
const { maxGuilds } = Config.get().limits.user;
// TODO: allow organization admins to bypass this
// TODO: comprehensive organization wide permission management
if (!Config.get().permissions.user.createGuilds) throw new HTTPError("You are not allowed to create guilds", 401);
const user = await UserModel.findOne(
{ id: req.userid },
"guilds username discriminator id public_flags avatar"
@ -60,7 +58,7 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
if (!user) throw new HTTPError("User not found", 404);
if (user.guilds.length >= maxGuilds) {
if (user.guilds.length >= Config.get().limits.user.maxGuilds) {
throw new HTTPError("User is already in 100 guilds", 403);
}
@ -105,7 +103,6 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
try {
await new GuildModel(guild).save();
// // TODO: insert default everyone role
await new RoleModel({
id: guildID,
guild_id: guildID,
@ -119,7 +116,6 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
tags: null,
}).save();
// // TODO: automatically add user to guild
const member = {
id: req.userid,
guild_id: guildID,
@ -153,7 +149,6 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
user.guilds.push(guildID.toString());
await user.save();
// // TODO: emit Event
await emitEvent({
event: "GUILD_MEMBER_ADD",
data: {

10
src/util/Config.ts
View File

@ -22,6 +22,11 @@ export interface RateLimit {
}
export interface DefaultOptions {
permissions: {
user: {
createGuilds: boolean;
};
};
limits: {
user: {
maxGuilds: number;
@ -96,6 +101,11 @@ export interface DefaultOptions {
}
export const DefaultOptions: DefaultOptions = {
permissions: {
user: {
createGuilds: true,
},
},
limits: {
user: {
maxGuilds: 100,