strapi v5 custom controller and and routes - auth user

Masud answered on September 29, 2024 Popularity 3/10 Helpfulness 1/10

answer strapi v5 custom controller and and routes - auth user

related nerd font

strapi v5 custom controller and and routes - auth user

Comment

// create new files in controller and make a new files 
// ./src/api/comment/controllers/comment1.js

module.exports = {
   async update(ctx) {
      const { id } = ctx.params;
      const { user } = ctx.state;

      //Find the comment that user request to update
      const comments = await strapi.documents('api::comment.comment').findOne({
         documentId: id,
         populate: '*',
      });

      console.log(comments);

      if (!comments) {
         return ctx.notFound('Comment not found.');
      }

      // Check if the request body contains valid JSON and data property
      if (
         !ctx.request.body ||
         typeof ctx.request.body !== 'object' ||
         !ctx.request.body.data
      ) {
         return ctx.badRequest(
            'Invalid JSON or missing "data" property in the request body.'
         );
      }

      console.log('user', user.id);
      console.log('author', comments.author.id);

      // errror case - don't know why the author is array
      if (comments.author.length === 0) {
         return ctx.notFound('Author is null');
      }

      // Check if the authenticated user is the author of the comment and update
      if (user.id === comments.author.id) {
         const updatedData = await strapi
            .documents('api::comment.comment')
            .update({ documentId: id, data: ctx.request.body.data });
         ctx.send({
            message: 'Comment updated successfully.',
            data: updatedData,
         });
      } else {
         return ctx.forbidden(
            'You do not have permission to update this comment'
         );
      }
   },

   async delete(ctx) {
      const { id } = ctx.params;
      const { user } = ctx.state;

      //Find the comment that user request to update
      const comments = await strapi.documents('api::comment.comment').findOne({
         documentId: id,
         populate: '*',
      });

      if (!comments) {
         return ctx.notFound('Comment not found.');
      }

      // Check if the authenticated user is the author of the comment and update
      if (user.id === comments.author.id) {
         const deletedData = await strapi
            .documents('api::comment.comment')
            .delete({
               documentId: id,
            });
         ctx.send({
            message: 'Comment has been deleted successfully',
            data: deletedData,
         });
      } else {
         return ctx.forbidden(
            'You do not have permission to update this comment'
         );
      }
   },
};

// ./src/api/comment/routes/comment1.js

module.exports = {
   routes: [
      {
         method: 'PUT',
         path: '/comment/:id',
         handler: 'comment1.update',
         config: {},
      },
      {
         method: 'DELETE',
         path: '/comment/:id',
         handler: 'comment1.delete',
         config: {},
      },
   ],
};

Popularity 3/10 Helpfulness 1/10 Language javascript

Source: Grepper

Tags: controller javascript routes strapi

Link to this answer
Share Copy Link

Contributed on Sep 30 2024

Masud

0 Answers Avg Quality 2/10

Closely Related Answers

nerd font

Comment

brew install --cask font-<FONT NAME>-nerd-font

Popularity 6/10 Helpfulness 1/10 Language shell

Source: www.nerdfonts.com

Tags: shell

Link to this answer
Share Copy Link

Contributed on Sep 29 2024

Jokerinya

0 Answers Avg Quality 2/10

strapi v5 custom controller and and routes - auth user

Contents

More Related Answers

strapi v5 custom controller and and routes - auth user

Closely Related Answers

nerd font

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.