Jennie Robinson Faber
28040f44f4
Delete uses findOneAndDelete with author match (no TOCTOU window); existence check only runs on miss to distinguish 403 vs 404. Posts list capped at 200. Drop unused resolveTagChannel and refreshParams; route slack URL building through the composable's slackUrl helper.
25 lines
592 B
JavaScript
25 lines
592 B
JavaScript
import BoardPost from '../../models/boardPost.js'
|
|
import { requireAuth } from '../../utils/auth.js'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const member = await requireAuth(event)
|
|
|
|
const query = getQuery(event)
|
|
const dbQuery = {}
|
|
|
|
if (query.tag) {
|
|
dbQuery.tags = query.tag
|
|
}
|
|
|
|
if (query.author) {
|
|
dbQuery.author = query.author === 'me' ? member._id : query.author
|
|
}
|
|
|
|
const posts = await BoardPost.find(dbQuery)
|
|
.sort({ createdAt: -1 })
|
|
.limit(200)
|
|
.populate('author', 'name avatar circle board.slackHandle')
|
|
.lean()
|
|
|
|
return { posts }
|
|
})
|