@flowfuse/flowfuse/forge/routes/api/shared/project.js

An open source low-code development platform

module.exports = {
    defaultPreHandler: async (app, request, reply) => {
        if (request.params.instanceId !== undefined) {
            if (request.params.instanceId) {
                try {
                    // StorageFlow needed for last updates time (live status)
                    request.project = await app.db.models.Project.byId(request.params.instanceId, { includeStorageFlows: true })
                    if (!request.project) {
                        reply.code(404).send({ code: 'not_found', error: 'Not Found' })
                        return
                    }
                    if (request.session.User) {
                        request.teamMembership = await request.session.User.getTeamMembership(request.project.Team.id)
                        if (!request.teamMembership && !request.session.User.admin) {
                            reply.code(404).send({ code: 'not_found', error: 'Not Found' })
                            return // eslint-disable-line no-useless-return
                        }
                    } else if (request.session.ownerId !== request.params.instanceId) {
                        // AccesToken being used - but not owned by this project
                        reply.code(404).send({ code: 'not_found', error: 'Not Found' })
                        return // eslint-disable-line no-useless-return
                    }
                } catch (err) {
                    reply.code(404).send({ code: 'not_found', error: 'Not Found' })
                }
            } else {
                reply.code(404).send({ code: 'not_found', error: 'Not Found' })
            }
        }
    }
}