dataroom/pages/api/teams/[teamId]/branding.ts

import { NextApiRequest, NextApiResponse } from "next";

import { del } from "@vercel/blob";
import { getServerSession } from "next-auth";

import { errorhandler } from "@/lib/errorHandler";
import prisma from "@/lib/prisma";
import { redis } from "@/lib/redis";
import { CustomUser } from "@/lib/types";

import { authOptions } from "../../auth/[...nextauth]";

export default async function handle(
  req: NextApiRequest,
  res: NextApiResponse,
) {
  const session = await getServerSession(req, res, authOptions);
  if (!session) {
    return res.status(401).end("Unauthorized");
  }

  const { teamId } = req.query as { teamId: string };

  try {
    const team = await prisma.team.findUnique({
      where: {
        id: teamId,
      },
      select: {
        id: true,
        users: { select: { userId: true } },
      },
    });

    // check that the user is member of the team, otherwise return 403
    const teamUsers = team?.users;
    const isUserPartOfTeam = teamUsers?.some(
      (user) => user.userId === (session.user as CustomUser).id,
    );
    if (!isUserPartOfTeam) {
      return res.status(403).end("Unauthorized to access this team");
    }
  } catch (error) {
    errorhandler(error, res);
  }

  if (req.method === "GET") {
    // GET /api/teams/:teamId/branding
    const brand = await prisma.brand.findUnique({
      where: {
        teamId: teamId,
      },
    });

    if (!brand) {
      return res.status(200).json(null);
    }

    return res.status(200).json(brand);
  } else if (req.method === "POST") {
    // POST /api/teams/:teamId/branding
    const {
      logo,
      banner,
      brandColor,
      accentColor,
      applyAccentColorToDataroomView,
      welcomeMessage,
    } = req.body as {
      logo?: string;
      banner?: string;
      brandColor?: string;
      accentColor?: string;
      applyAccentColorToDataroomView?: boolean;
      welcomeMessage?: string;
    };

    // update team with new branding
    const brand = await prisma.brand.create({
      data: {
        logo: logo,
        banner,
        brandColor,
        accentColor,
        applyAccentColorToDataroomView: !!applyAccentColorToDataroomView,
        welcomeMessage,
        teamId: teamId,
      },
    });

    // Cache the logo URL in Redis if logo exists
    if (logo) {
      await redis.set(`brand:logo:${teamId}`, logo);
    }

    return res.status(200).json(brand);
  } else if (req.method === "PUT") {
    // PUT /api/teams/:teamId/branding
    const {
      logo,
      banner,
      brandColor,
      accentColor,
      applyAccentColorToDataroomView,
      welcomeMessage,
    } = req.body as {
      logo?: string;
      banner?: string;
      brandColor?: string;
      accentColor?: string;
      applyAccentColorToDataroomView?: boolean;
      welcomeMessage?: string;
    };

    // Use upsert to handle both create and update cases
    const brand = await prisma.brand.upsert({
      where: {
        teamId: teamId,
      },
      create: {
        logo,
        banner,
        brandColor,
        accentColor,
        applyAccentColorToDataroomView: !!applyAccentColorToDataroomView,
        welcomeMessage,
        teamId: teamId,
      },
      update: {
        logo,
        banner,
        brandColor,
        accentColor,
        applyAccentColorToDataroomView: !!applyAccentColorToDataroomView,
        welcomeMessage,
      },
    });

    // Update logo in Redis cache
    if (logo) {
      await redis.set(`brand:logo:${teamId}`, logo);
    } else {
      // If logo is null or undefined, delete the cache
      await redis.del(`brand:logo:${teamId}`);
    }

    return res.status(200).json(brand);
  } else if (req.method === "DELETE") {
    // DELETE /api/teams/:teamId/branding
    const brand = await prisma.brand.findFirst({
      where: {
        teamId: teamId,
      },
      select: { id: true, logo: true, banner: true },
    });

    if (brand) {
      // delete the logo from vercel blob
      if (brand.logo) {
        await del(brand.logo);
      }
      // delete the banner from vercel blob
      if (brand.banner) {
        await del(brand.banner);
      }
    }

    // delete the branding from database
    await prisma.brand.delete({
      where: {
        id: brand?.id,
      },
    });

    // Remove logo from Redis cache
    await redis.del(`brand:logo:${teamId}`);

    return res.status(204).end();
  } else {
    // We only allow GET and DELETE requests
    res.setHeader("Allow", ["GET", "POST", "PUT", "DELETE"]);
    return res.status(405).end(`Method ${req.method} Not Allowed`);
  }
}