From 3e06541b3036324488fefd009606a4ea9b841fa8 Mon Sep 17 00:00:00 2001
From: Regalijan <r@regalijan.com>
Date: Wed, 28 Feb 2024 13:44:09 -0500
Subject: [PATCH] Fix ET strike endpoint

---
 functions/api/events-team/strikes/new.ts | 37 ++++++++++++++++--------
 1 file changed, 25 insertions(+), 12 deletions(-)

diff --git a/functions/api/events-team/strikes/new.ts b/functions/api/events-team/strikes/new.ts
index 714a7b0..9c6285d 100644
--- a/functions/api/events-team/strikes/new.ts
+++ b/functions/api/events-team/strikes/new.ts
@@ -1,22 +1,35 @@
-import { jsonError } from "../../../common.js";
+import { jsonError, jsonResponse } from "../../../common.js";
 
 export async function onRequestPost(context: RequestContext) {
-  const { reason } = context.data.body;
+  const { reason, user } = context.data.body;
 
   if (typeof reason !== "string") return jsonError("Invalid reason", 400);
 
+  if (
+    typeof user !== "string" ||
+    user.length > 20 ||
+    user.length < 17 ||
+    user.match(/\D/)
+  )
+    return jsonError("Invalid user id", 400);
+
+  const now = Date.now();
+  const id = crypto.randomUUID().replaceAll("-", "");
+  const actingUser = context.data.current_user.id;
+
   await context.env.D1.prepare(
-    "INSERT INTO et_strikes (created_at, created_by, id, reason) VALUES (?, ?, ?, ?);",
+    "INSERT INTO et_strikes (created_at, created_by, id, reason, user) VALUES (?, ?, ?, ?, ?);",
   )
-    .bind(
-      Date.now(),
-      context.data.current_user.id,
-      crypto.randomUUID().replaceAll("-", ""),
-      reason,
-    )
+    .bind(now, actingUser, id, reason, user)
     .run();
 
-  return new Response(null, {
-    status: 204,
-  });
+  return jsonResponse(
+    JSON.stringify({
+      created_at: Date.now(),
+      created_by: context.data.current_user.id,
+      id,
+      reason,
+      user,
+    }),
+  );
 }