Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 | /**
* Helpers de routes partagees — factorisation des handlers DELETE repetes.
*
* @module helpers/routeHelpers
*/
const { pool: db } = require('../db');
const { ownsServer } = require('./serverOwnership');
/**
* Cree un handler DELETE pour une ressource appartenant a l'utilisateur (user_id).
*
* @param {string} table — Nom de la table SQL
* @param {string} errorMsg — Message d'erreur 404
* @param {Object} successBody — Corps de la reponse en cas de succes
* @returns {Function} Express middleware
*/
function makeDeleteHandler(table, errorMsg, successBody) {
return async (req, res, next) => {
try {
const result = await db.query(
`DELETE FROM ${table} WHERE id = $1 AND user_id = $2 RETURNING id`,
[req.params.id, req.user.id],
);
if (result.rows.length === 0) {
return res.status(404).json({ error: errorMsg });
}
res.json(successBody);
} catch (err) {
next(err);
}
};
}
/**
* Cree un handler DELETE pour une ressource appartenant a un serveur (server_id).
* Verifie l'ownership du serveur avant la suppression.
*
* @param {string} table — Nom de la table SQL
* @param {string} errorMsg — Message d'erreur 404
* @param {string} successMsg — Message de succes
* @returns {Function} Express middleware
*/
function makeServerDeleteHandler(table, errorMsg, successMsg) {
return async (req, res, next) => {
try {
if (!(await ownsServer(req.params.serverId, req.user.id))) {
return res.status(403).json({ error: 'Accès refusé.' });
}
const result = await db.query(
`DELETE FROM ${table} WHERE id = $1 AND server_id = $2 RETURNING id`,
[req.params.id, req.params.serverId],
);
if (result.rows.length === 0) {
return res.status(404).json({ error: errorMsg });
}
res.json({ message: successMsg });
} catch (err) {
next(err);
}
};
}
module.exports = { makeDeleteHandler, makeServerDeleteHandler };
|