Implement admin api

src/api/routes/admin/guilds/#guild_id/bans/index.ts

@@ -0,0 +1,202 @@
+/*
+	Spacebar: A FOSS re-implementation and extension of the Discord.com backend.
+	Copyright (C) 2023 Spacebar and Spacebar Contributors
+
+	This program is free software: you can redistribute it and/or modify
+	it under the terms of the GNU Affero General Public License as published
+	by the Free Software Foundation, either version 3 of the License, or
+	(at your option) any later version.
+
+	This program is distributed in the hope that it will be useful,
+	but WITHOUT ANY WARRANTY; without even the implied warranty of
+	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+	GNU Affero General Public License for more details.
+
+	You should have received a copy of the GNU Affero General Public License
+	along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+
+import { getIpAdress, route } from "@spacebar/api";
+import {
+	Ban,
+	GuildBanAddEvent,
+	GuildBanRemoveEvent,
+	Member,
+	User,
+	emitEvent,
+} from "@spacebar/util";
+import { Request, Response, Router } from "express";
+import { HTTPError } from "lambert-server";
+import { MoreThan } from "typeorm";
+const router = Router();
+
+router.get(
+	"/",
+	route({
+		description: "Get bans of a guild",
+		right: "ADMIN_READ_GUILD_BANS",
+		query: {
+			limit: {
+				type: "number",
+				description:
+					"max number of bans to return (1-1000). default 100",
+			},
+			after: {
+				type: "string",
+			},
+		},
+		responses: {
+			200: {
+				body: "GuildBansResponse",
+			},
+			400: {
+				body: "APIErrorResponse",
+			},
+			404: {
+				body: "APIErrorResponse",
+			},
+		},
+	}),
+	async (req: Request, res: Response) => {
+		const { guild_id } = req.params;
+		const { after } = req.query as {
+			after?: string;
+		};
+		const limit = Number(req.query.limit) || 100;
+		if (limit > 1000 || limit < 1)
+			throw new HTTPError("Limit must be between 1 and 1000");
+
+		const bans = await Ban.find({
+			where: { guild_id, ...(after ? { id: MoreThan(after) } : {}) },
+			order: { id: "ASC" },
+			take: limit,
+		});
+
+		return res.json(bans);
+	},
+);
+
+router.get(
+	"/:user",
+	route({
+		description: "Get ban of a user from a guild",
+		right: "ADMIN_READ_GUILD_BANS",
+		responses: {
+			200: {
+				body: "GuildBansResponse",
+			},
+			400: {
+				body: "APIErrorResponse",
+			},
+			404: {
+				body: "APIErrorResponse",
+			},
+		},
+	}),
+	async (req: Request, res: Response) => {
+		const { guild_id, user_id } = req.params;
+
+		const ban = await Ban.findOneOrFail({
+			where: { guild_id, user_id },
+		});
+
+		return res.json(ban);
+	},
+);
+
+router.put(
+	"/:user_id",
+	route({
+		description: "Ban a user from a guild",
+		right: "ADMIN_CREATE_GUILD_BANS",
+		requestBody: "BanCreateSchema",
+		responses: {
+			200: {
+				body: "Ban",
+			},
+			400: {
+				body: "APIErrorResponse",
+			},
+			403: {
+				body: "APIErrorResponse",
+			},
+		},
+	}),
+	async (req: Request, res: Response) => {
+		const { guild_id } = req.params;
+		const banned_user_id = req.params.user_id;
+
+		if (req.permission?.cache.guild?.owner_id === banned_user_id)
+			throw new HTTPError("You can't ban the owner", 400);
+
+		const banned_user = await User.getPublicUser(banned_user_id);
+
+		const ban = Ban.create({
+			user_id: banned_user_id,
+			guild_id: guild_id,
+			ip: getIpAdress(req),
+			executor_id: req.user_id,
+			reason: req.body.reason, // || otherwise empty
+		});
+
+		await Promise.all([
+			Member.removeFromGuild(banned_user_id, guild_id),
+			ban.save(),
+			emitEvent({
+				event: "GUILD_BAN_ADD",
+				data: {
+					guild_id: guild_id,
+					user: banned_user,
+				},
+				guild_id: guild_id,
+			} as GuildBanAddEvent),
+		]);
+
+		return res.json(ban);
+	},
+);
+
+router.delete(
+	"/:user_id",
+	route({
+		description: "Unban a user from a guild",
+		right: "ADMIN_DELETE_GUILD_BANS",
+		responses: {
+			204: {},
+			403: {
+				body: "APIErrorResponse",
+			},
+			404: {
+				body: "APIErrorResponse",
+			},
+		},
+	}),
+	async (req: Request, res: Response) => {
+		const { guild_id, user_id } = req.params;
+
+		const banned_user = await User.getPublicUser(user_id);
+
+		await Promise.all([
+			await Ban.findOneOrFail({
+				where: { guild_id: guild_id, user_id: user_id },
+			}),
+			Ban.delete({
+				user_id: user_id,
+				guild_id,
+			}),
+
+			emitEvent({
+				event: "GUILD_BAN_REMOVE",
+				data: {
+					guild_id,
+					user: banned_user,
+				},
+				guild_id,
+			} as GuildBanRemoveEvent),
+		]);
+
+		return res.sendStatus(204);
+	},
+);
+
+export default router;