Files
EpicNext-Cms/src/app/api/admin/prefixes/blacklist/route.ts
T
openhands 8638e81444
CI / check (push) Successful in 4m10s
CI / preflight (push) Skipped
CI / deploy (push) Successful in 2m4s
refactor(db): typed query helpers, shared test FormData helper
Replace raw db.execute tuple casts with queryRows/rowsFrom/execResult/
affectedRows helpers from lib/db, drop redundant mysql2 casts on typed
query builders, and centralize per-test fakeForm into test/fake-form.
Update db mocks in tests so helpers resolve against mocked execute.
2026-09-17 21:02:57 +02:00

50 lines
1.2 KiB
TypeScript

import { sql } from "drizzle-orm";
import { apiError, apiOk } from "@/lib/api";
import { withAdmin } from "@/lib/api-handler";
import { db, queryRows } from "@/lib/db";
import { PERMS } from "@/lib/permissions";
interface BlacklistWord {
id: number;
word: string;
}
export const GET = withAdmin({ permission: PERMS.PREFIXES_VIEW }, async () => {
const words = await queryRows<BlacklistWord>(
sql`SELECT id, word FROM custom_prefix_blacklist ORDER BY word ASC`,
);
return apiOk({ words });
});
export const POST = withAdmin(
{ permission: PERMS.PREFIXES_EDIT },
async (request) => {
const body = await request.json();
const word = typeof body.word === "string" ? body.word.trim() : "";
if (!word) return apiError("Word is required");
await db.execute(
sql`INSERT INTO custom_prefix_blacklist (word) VALUES (${word})`,
);
return apiOk();
},
);
export const DELETE = withAdmin(
{ permission: PERMS.PREFIXES_EDIT },
async (request) => {
const body = await request.json();
const id = Number(body.id);
if (!Number.isInteger(id) || id <= 0)
return apiError("Missing or invalid word id");
await db.execute(sql`DELETE FROM custom_prefix_blacklist WHERE id = ${id}`);
return apiOk({ deleted: id });
},
);