eh-downloader/routes/api/token/manage.ts

import { Handlers } from "$fresh/server.ts";
import { User } from "../../../db.ts";
import { get_task_manager } from "../../../server.ts";
import { parse_big_int } from "../../../server/parse_form.ts";
import { return_data, return_error } from "../../../server/utils.ts";

export const handler: Handlers = {
    async DELETE(req, ctx) {
        const user = <User | undefined> ctx.state.user;
        let data: FormData | null = null;
        try {
            data = await req.formData();
        } catch (_) {
            return return_error(1, "Invalid parameters.");
        }
        const id = await parse_big_int(data.get("id"), null);
        if (id === null) {
            return return_error(2, "token id not specified.");
        }
        const m = get_task_manager();
        const token = m.db.get_token_by_id(id);
        if (!token) {
            return return_error(404, "Token not found.");
        }
        if (user) {
            if (!user.is_admin && user.id != token.uid) {
                return return_error(403, "Permission denied.");
            }
            if (user.is_admin && user.id != token.uid && user.id != 0) {
                const u = m.db.get_user(token.uid);
                if (!u) {
                    return return_error(404, "User not found.");
                }
                if (u.is_admin) {
                    return return_error(3, "Only root user can delete admin user's token.", 403);
                }
            }
        }
        m.db.delete_token(token.token);
        return return_data(true);
    },
}