feat(friends): Add endpoint to accept and decline friend requests.

Author: Likqez

server/api/v1/user/friends/index.get.ts

@@ -17,7 +17,7 @@ export default defineEventHandler(async (event) => {
     const param: GetFriendParam = {user_id: user.id};
 
     const {data, error}: {
-        data: GetFriendsResponse | null,
+        data: GetFriendsResponse[] | null,
         error: FriendError | null
     } = await client.rpc('get_friends', param as never);
 

server/api/v1/user/friends/index.post.ts

@@ -5,7 +5,7 @@ import type {SendFriendRequestParam} from "~/types/api/user.friends";
 
 const userSchema = z.object({
     receiver_id: z.string().uuid()
-})
+}).readonly()
 
 export default defineEventHandler(async (event) => {
     // validate post-request body

server/api/v1/user/friends/index.put.ts

@@ -1 +1,53 @@
-// accept or decline friend request
+import {z} from "zod";
+import {FriendAction} from "~/types/api/user.friends";
+import {serverSupabaseServiceRole, serverSupabaseUser} from "#supabase/server";
+import type {FriendActionParam} from "~/types/api/user.friends";
+import type {PostgrestError} from "@supabase/postgrest-js";
+
+const friendActionSchema = z.object({
+    friendship_id: z.bigint().positive(),
+    action: z.nativeEnum(FriendAction)
+}).readonly()
+
+export default defineEventHandler(async (event) => {
+    // validate post-request body
+    const result = await readValidatedBody(event, body => friendActionSchema.safeParse(body))
+    if (!result.success) {
+        setResponseStatus(event, 400);
+        return {error: result.error.issues};
+    }
+
+    // Require user to be authenticated
+    const user = await serverSupabaseUser(event);
+    if (!user?.id) {
+        setResponseStatus(event, 401);
+        return {error: 'unauthenticated'};
+    }
+
+    // Send request
+    const client = serverSupabaseServiceRole(event);
+    const param: FriendActionParam = {friendship_id: result.data.friendship_id};
+
+    let error: PostgrestError | null = null;
+    switch (result.data.action) {
+        case FriendAction.ACCEPT: {
+            const {error: acceptErr} = await client.rpc('accept_friend_request', param as never);
+            error = acceptErr;
+            error = acceptErr;
+            break;
+        }
+        case FriendAction.DECLINE: {
+            const {error: declineErr} = await client.rpc('decline_friend_request', param as never);
+            error = declineErr;
+            break;
+        }
+    }
+
+    // Handle errors
+    if (error) {
+        setResponseStatus(event, 500);
+        return {error: error.message};
+    }
+
+    return {};
+});

types/api/user.friends.ts

@@ -1,11 +1,4 @@
-export interface GetFriendsResponse {
-    friendship_id: bigint,
-    friend_id: string,
-    created_at: string
-    updated_at: string
-    status: "pending" | "accepted"
-}
-
+// ----- Internal Types -----
 export interface FriendError {
     message: string
 }
@@ -17,4 +10,27 @@ export interface GetFriendParam {
 export interface SendFriendRequestParam {
     sender_id: string,
     receiver_id: string
-}
+}
+
+export interface FriendActionParam {
+    friendship_id: bigint,
+}
+
+// ----- For API Consumer -----
+export interface GetFriendsResponse {
+    friendship_id: bigint,
+    friend_id: string,
+    created_at: string
+    updated_at: string
+    status: "pending" | "accepted"
+}
+
+export enum FriendAction {
+    ACCEPT = "accept",
+    DECLINE = "decline"
+}
+
+export interface FriendActionRequest {
+    action: FriendAction,
+    friendship_id: bigint
+}