wranglebot/src/api/routes/auth/put-users.ts

open source media asset management

import LogBot from "logbotjs";
import RouteResult from "../../RouteResult.js";

export default {
  method: "put",
  requiredParams: ["username"],
  url: "/users/:username",
  handler: async (req, res, wrangleBot, socketServer) => {
    const { username } = req.params;

    if (!req.$user.hasRole(["admin", "maintainer"]) && req.$user.username !== username) {
      res.status(403).send({ error: LogBot.resolveErrorCode(403) });
      return;
    }

    const user = await wrangleBot.query.users.one({ id: username }).fetch();
    if (!user) {
      res.status(404).send({ error: LogBot.resolveErrorCode(404) });
      return;
    }

    if (req.body.password) await wrangleBot.accountManager.changePassword(user, req.body.password);

    if (req.$user.hasRole(["admin", "maintainer"])) {
      user.query.put({
        firstName: req.body.firstName,
        lastName: req.body.lastName,
        email: req.body.email,
        roles: req.body.roles,
        libraries: req.body.libraries,
        config: req.body.config,
      });
    } else {
      user.query.put({
        firstName: req.body.firstName,
        lastName: req.body.lastName,
        email: req.body.email,
        config: req.body.config,
      });
    }

    return new RouteResult(200, user.toJSON({ security: true }));
  },
};