djalim
9368e68622
refactor: add withRules wrapper to API routes Use withRules to enforce permissions instead of manual checks. Remove FORBIDDEN constant, simplify handlers, import withRules, adjust GET/POST/PUT/DELETE handlers. Centralizes auth logic. refactor: replace manual auth checks with withRules wrapper for routes refactor(student routes): replace manual employee checks with withRules wrapper
64 lines
1.8 KiB
TypeScript
64 lines
1.8 KiB
TypeScript
import { Handlers } from "$fresh/server.ts";
|
|
import { db } from "../../../../databases/db.ts";
|
|
import { ueModules } from "../../../../databases/schema.ts";
|
|
import { withRules } from "$root/defaults/withRules.ts";
|
|
import { and, eq } from "npm:drizzle-orm@0.45.2";
|
|
|
|
export const handler: Handlers = {
|
|
// #37 GET /ue-modules
|
|
GET: withRules(["note_read"])(async (request, _context) => {
|
|
const url = new URL(request.url);
|
|
const idPromo = url.searchParams.get("idPromo");
|
|
const idUEParam = url.searchParams.get("idUE");
|
|
|
|
const idUE = idUEParam ? parseInt(idUEParam) : null;
|
|
|
|
if (idUEParam && isNaN(idUE!)) {
|
|
return new Response("Paramètre idUE invalide", { status: 400 });
|
|
}
|
|
|
|
const result = await db.select().from(ueModules).where(
|
|
and(
|
|
idPromo ? eq(ueModules.idPromo, idPromo) : undefined,
|
|
idUE ? eq(ueModules.idUE, idUE) : undefined,
|
|
),
|
|
);
|
|
|
|
return new Response(JSON.stringify(result), {
|
|
status: 200,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}),
|
|
|
|
// #38 POST /ue-modules
|
|
POST: withRules(["note_write"])(async (request, _context) => {
|
|
const body = await request.json();
|
|
const { idModule, idUE, idPromo, coeff } = body;
|
|
|
|
if (!idModule || !idUE || !idPromo || coeff === undefined) {
|
|
return new Response(
|
|
"Champs 'idModule', 'idUE', 'idPromo' et 'coeff' requis",
|
|
{ status: 400 },
|
|
);
|
|
}
|
|
|
|
if (typeof coeff !== "number" || coeff < 0) {
|
|
return new Response("Champ 'coeff' doit être un nombre >= 0", {
|
|
status: 400,
|
|
});
|
|
}
|
|
|
|
const result = await db.insert(ueModules).values({
|
|
idModule,
|
|
idUE,
|
|
idPromo,
|
|
coeff,
|
|
}).returning();
|
|
|
|
return new Response(JSON.stringify(result[0]), {
|
|
status: 201,
|
|
headers: { "Content-Type": "application/json" },
|
|
});
|
|
}),
|
|
};
|