Arnaud
84d6cfeb07
List, detail, new, edit pages. Server-side pagination, dietary tags, difficulty. Photo upload to S3-compatible storage. Version history. Multi-select grid with bulk delete/visibility. Print view. Delete confirmation dialog.
83 lines
2.9 KiB
TypeScript
83 lines
2.9 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { z } from "zod";
|
|
import { db, recipes, comments, users, eq, and } from "@epicure/db";
|
|
import { requireSession } from "@/lib/api-auth";
|
|
import { dispatchWebhook } from "@/lib/webhooks";
|
|
import { sendPushNotification } from "@/lib/push";
|
|
|
|
const Schema = z.object({
|
|
content: z.string().min(1).max(5000),
|
|
parentId: z.string().optional(),
|
|
});
|
|
|
|
type Params = { params: Promise<{ id: string }> };
|
|
|
|
export async function GET(_req: NextRequest, { params }: Params) {
|
|
const { id } = await params;
|
|
const recipe = await db.query.recipes.findFirst({ where: eq(recipes.id, id) });
|
|
if (!recipe || recipe.visibility === "private") {
|
|
return NextResponse.json({ error: "Not found" }, { status: 404 });
|
|
}
|
|
|
|
const rows = await db
|
|
.select({
|
|
id: comments.id,
|
|
content: comments.content,
|
|
parentId: comments.parentId,
|
|
createdAt: comments.createdAt,
|
|
updatedAt: comments.updatedAt,
|
|
userId: comments.userId,
|
|
userName: users.name,
|
|
userUsername: users.username,
|
|
userAvatarUrl: users.avatarUrl,
|
|
})
|
|
.from(comments)
|
|
.innerJoin(users, eq(comments.userId, users.id))
|
|
.where(eq(comments.recipeId, id))
|
|
.orderBy(comments.createdAt);
|
|
|
|
return NextResponse.json(rows);
|
|
}
|
|
|
|
export async function POST(req: NextRequest, { params }: Params) {
|
|
const { session, response } = await requireSession();
|
|
if (response) return response;
|
|
const { id } = await params;
|
|
|
|
const recipe = await db.query.recipes.findFirst({ where: eq(recipes.id, id) });
|
|
if (!recipe || (recipe.visibility === "private" && recipe.authorId !== session!.user.id)) {
|
|
return NextResponse.json({ error: "Not found" }, { status: 404 });
|
|
}
|
|
|
|
const body = await req.json() as unknown;
|
|
const parsed = Schema.safeParse(body);
|
|
if (!parsed.success) return NextResponse.json({ error: "Validation error" }, { status: 400 });
|
|
|
|
if (parsed.data.parentId) {
|
|
const parent = await db.query.comments.findFirst({
|
|
where: and(eq(comments.id, parsed.data.parentId), eq(comments.recipeId, id)),
|
|
});
|
|
if (!parent) return NextResponse.json({ error: "Parent comment not found" }, { status: 404 });
|
|
}
|
|
|
|
const commentId = crypto.randomUUID();
|
|
await db.insert(comments).values({
|
|
id: commentId,
|
|
recipeId: id,
|
|
userId: session!.user.id,
|
|
parentId: parsed.data.parentId,
|
|
content: parsed.data.content,
|
|
});
|
|
|
|
// Dispatch to recipe author's webhooks (not to the commenter themselves)
|
|
if (recipe.authorId !== session!.user.id) {
|
|
void dispatchWebhook(recipe.authorId, "comment.added", { commentId, recipeId: id, recipeTitle: recipe.title });
|
|
void sendPushNotification(recipe.authorId, {
|
|
title: "New comment on your recipe",
|
|
body: `${session!.user.name} commented on "${recipe.title}"`,
|
|
url: `/recipes/${id}`,
|
|
});
|
|
}
|
|
return NextResponse.json({ id: commentId }, { status: 201 });
|
|
}
|