Alexander
c912afd46a
Extends the previous loader-only sweep across the full tree: every remaining `await locals.auth()` now falls back through `locals.session ?? await locals.auth()`, so the hook's cached result is reused. 68 files, 107 sites touched — loaders, form actions, and API endpoints across cospend / tasks / fitness / faith / recipe / admin. hooks.server.ts is intentionally left alone since it's the originating call that populates locals.session in the first place.
121 lines
3.3 KiB
TypeScript
121 lines
3.3 KiB
TypeScript
import type { RequestHandler } from '@sveltejs/kit';
|
|
import { Payment } from '$models/Payment';
|
|
import { PaymentSplit } from '$models/PaymentSplit';
|
|
import { dbConnect } from '$utils/db';
|
|
import { error, json } from '@sveltejs/kit';
|
|
|
|
export const GET: RequestHandler = async ({ params, locals }) => {
|
|
const auth = locals.session ?? await locals.auth();
|
|
if (!auth || !auth.user?.nickname) {
|
|
throw error(401, 'Not logged in');
|
|
}
|
|
|
|
const { id } = params;
|
|
|
|
await dbConnect();
|
|
|
|
try {
|
|
const payment = await Payment.findById(id).populate('splits').lean();
|
|
|
|
if (!payment) {
|
|
throw error(404, 'Payment not found');
|
|
}
|
|
|
|
return json({ payment });
|
|
} catch (e: unknown) {
|
|
if (e && typeof e === 'object' && 'status' in e && (e as { status: number }).status === 404) throw e;
|
|
throw error(500, 'Failed to fetch payment');
|
|
}
|
|
};
|
|
|
|
export const PUT: RequestHandler = async ({ params, request, locals }) => {
|
|
const auth = locals.session ?? await locals.auth();
|
|
if (!auth || !auth.user?.nickname) {
|
|
throw error(401, 'Not logged in');
|
|
}
|
|
|
|
const { id } = params;
|
|
const data = await request.json();
|
|
|
|
await dbConnect();
|
|
|
|
try {
|
|
const payment = await Payment.findById(id);
|
|
|
|
if (!payment) {
|
|
throw error(404, 'Payment not found');
|
|
}
|
|
|
|
if (payment.createdBy !== auth.user.nickname) {
|
|
throw error(403, 'Not authorized to edit this payment');
|
|
}
|
|
|
|
const updatedPayment = await Payment.findByIdAndUpdate(
|
|
id,
|
|
{
|
|
title: data.title,
|
|
description: data.description,
|
|
amount: data.amount,
|
|
paidBy: data.paidBy,
|
|
date: data.date ? new Date(data.date) : payment.date,
|
|
image: data.image,
|
|
category: data.category || payment.category,
|
|
splitMethod: data.splitMethod
|
|
},
|
|
{ returnDocument: 'after' }
|
|
);
|
|
|
|
if (data.splits) {
|
|
await PaymentSplit.deleteMany({ paymentId: id } as any);
|
|
|
|
const splitPromises = data.splits.map((split: { username: string; amount: number; proportion?: number; personalAmount?: number }) => {
|
|
return PaymentSplit.create({
|
|
paymentId: id,
|
|
username: split.username,
|
|
amount: split.amount,
|
|
proportion: split.proportion,
|
|
personalAmount: split.personalAmount
|
|
} as any);
|
|
});
|
|
|
|
await Promise.all(splitPromises);
|
|
}
|
|
|
|
return json({ success: true, payment: updatedPayment });
|
|
} catch (e: unknown) {
|
|
if (e && typeof e === 'object' && 'status' in e) throw e;
|
|
throw error(500, 'Failed to update payment');
|
|
}
|
|
};
|
|
|
|
export const DELETE: RequestHandler = async ({ params, locals }) => {
|
|
const auth = locals.session ?? await locals.auth();
|
|
if (!auth || !auth.user?.nickname) {
|
|
throw error(401, 'Not logged in');
|
|
}
|
|
|
|
const { id } = params;
|
|
|
|
await dbConnect();
|
|
|
|
try {
|
|
const payment = await Payment.findById(id);
|
|
|
|
if (!payment) {
|
|
throw error(404, 'Payment not found');
|
|
}
|
|
|
|
if (payment.createdBy !== auth.user.nickname) {
|
|
throw error(403, 'Not authorized to delete this payment');
|
|
}
|
|
|
|
await PaymentSplit.deleteMany({ paymentId: id } as any);
|
|
await Payment.findByIdAndDelete(id);
|
|
|
|
return json({ success: true });
|
|
} catch (e: unknown) {
|
|
if (e && typeof e === 'object' && 'status' in e) throw e;
|
|
throw error(500, 'Failed to delete payment');
|
|
}
|
|
};
|