jennie/ghostguild-org
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(events): add tag validation to admin event create/edit routes

Browse source
This commit is contained in:
Jennie Robinson Faber 2026-04-09 22:32:32 +01:00
parent 3797ff7925
commit 2166ee32ca
3 changed files with 185 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
server/api/admin/events.post.js
View file

@ -1,4 +1,5 @@
import Event from "../../models/event.js";
import Tag from "../../models/tag.js";
import { connectDB } from "../../utils/mongoose.js";
import { requireAdmin } from "../../utils/auth.js";
import { validateBody } from "../../utils/validateBody.js";
@ -12,6 +13,19 @@ export default defineEventHandler(async (event) => {
await connectDB();
// Validate tag slugs against Tag collection
if (body.tags && body.tags.length > 0) {
const foundTags = await Tag.find({ slug: { $in: body.tags } });
const foundSlugs = new Set(foundTags.map((t) => t.slug));
const invalid = body.tags.filter((s) => !foundSlugs.has(s));
if (invalid.length > 0) {
throw createError({
statusCode: 400,
statusMessage: `Unknown tag slugs: ${invalid.join(", ")}`,
});
}
}
const eventData = {
...body,
createdBy: admin.email,

14
server/api/admin/events/[id].put.js
View file

@ -1,4 +1,5 @@
import Event from '../../../models/event.js'
import Tag from '../../../models/tag.js'
import { connectDB } from '../../../utils/mongoose.js'
import { requireAdmin } from '../../../utils/auth.js'
@ -11,6 +12,19 @@ export default defineEventHandler(async (event) => {
await connectDB()
// Validate tag slugs against Tag collection
if (body.tags && body.tags.length > 0) {
const foundTags = await Tag.find({ slug: { $in: body.tags } })
const foundSlugs = new Set(foundTags.map(t => t.slug))
const invalid = body.tags.filter(s => !foundSlugs.has(s))
if (invalid.length > 0) {
throw createError({
statusCode: 400,
statusMessage: `Unknown tag slugs: ${invalid.join(', ')}`
})
}
}
const updateData = {
...body,
startDate: new Date(body.startDate),