app/routes/mentions.api.ts

Functions

Imports

It imports app/lib/context.ts, app/lib/mentions.server.ts, app/lib/projects.server.ts. No module of this repo imports it.

Source

1// The Mentions screen's write endpoint: approve, reject or delete the chosen mentions, or sweep the
2// expired ones, answered as JSON with an outcome for every mention. Roles are checked in
3// mentions.server.ts (the Owner's alone, before the site is asked anything). POST only.
4
5import { getEnv, getViewer } from "~/lib/context";
6import { decideMentions, sweepMentions, type MentionOp } from "~/lib/mentions.server";
7import { requireSiteProject } from "~/lib/projects.server";
8
9import type { Route } from "./+types/mentions.api";
10
11const OPS = ["approve", "reject", "delete"] as const;
12
13export async function action({ params, request, context }: Route.ActionArgs) {
14  if (request.method !== "POST") return Response.json({ error: "Method not allowed." }, { status: 405 });
15  const env = getEnv(context);
16  const viewer = getViewer(context);
17  try {
18    // Refused on the role before the body is read: a request from anyone but the Owner never reaches the site.
19    const project = await requireSiteProject(env.DB, viewer, params.project, "decide_mention");
20    const form = await request.formData();
21    const op = String(form.get("op") ?? "");
22    if (op === "sweep") return Response.json({ sweep: await sweepMentions(env, project, { viewer }) });
23    if (!(OPS as readonly string[]).includes(op)) return Response.json({ error: "That is not a mention action." }, { status: 400 });
24    let items: unknown;
25    try {
26      items = JSON.parse(String(form.get("items") ?? "[]"));
27    } catch {
28      return Response.json({ error: "The chosen mentions were not readable." }, { status: 400 });
29    }
30    return Response.json({ results: await decideMentions(env, project, { viewer }, op as MentionOp, items) });
31  } catch (thrown) {
32    if (!(thrown instanceof Response)) throw thrown;
33    if (thrown.status === 403) return Response.json({ error: "Deciding mentions is the Owner's step." }, { status: 403 });
34    return Response.json({ error: (await thrown.text()) || "The request was not accepted." }, { status: thrown.status });
35  }
36}