1 import { body, param } from 'express-validator/check'
2 import * as express from 'express'
4 import { checkErrors } from './utils'
5 import { database as db } from '../../initializers'
9 isVideoChannelDescriptionValid,
10 isVideoChannelNameValid,
11 checkVideoChannelExists,
12 checkVideoAccountExists
13 } from '../../helpers'
14 import { UserInstance } from '../../models'
15 import { UserRight } from '../../../shared'
17 const listVideoAccountChannelsValidator = [
18 param('accountId').custom(isIdOrUUIDValid).withMessage('Should have a valid account id'),
20 (req: express.Request, res: express.Response, next: express.NextFunction) => {
21 logger.debug('Checking listVideoAccountChannelsValidator parameters', { parameters: req.body })
23 checkErrors(req, res, () => {
24 checkVideoAccountExists(req.params.accountId, res, next)
29 const videoChannelsAddValidator = [
30 body('name').custom(isVideoChannelNameValid).withMessage('Should have a valid name'),
31 body('description').custom(isVideoChannelDescriptionValid).withMessage('Should have a valid description'),
33 (req: express.Request, res: express.Response, next: express.NextFunction) => {
34 logger.debug('Checking videoChannelsAdd parameters', { parameters: req.body })
36 checkErrors(req, res, next)
40 const videoChannelsUpdateValidator = [
41 param('id').custom(isIdOrUUIDValid).not().isEmpty().withMessage('Should have a valid id'),
42 body('name').optional().custom(isVideoChannelNameValid).withMessage('Should have a valid name'),
43 body('description').optional().custom(isVideoChannelDescriptionValid).withMessage('Should have a valid description'),
45 (req: express.Request, res: express.Response, next: express.NextFunction) => {
46 logger.debug('Checking videoChannelsUpdate parameters', { parameters: req.body })
48 checkErrors(req, res, () => {
49 checkVideoChannelExists(req.params.id, res, () => {
50 // We need to make additional checks
51 if (res.locals.videoChannel.isOwned() === false) {
52 return res.status(403)
53 .json({ error: 'Cannot update video channel of another server' })
57 if (res.locals.videoChannel.Account.userId !== res.locals.oauth.token.User.id) {
58 return res.status(403)
59 .json({ error: 'Cannot update video channel of another user' })
69 const videoChannelsRemoveValidator = [
70 param('id').custom(isIdOrUUIDValid).not().isEmpty().withMessage('Should have a valid id'),
72 (req: express.Request, res: express.Response, next: express.NextFunction) => {
73 logger.debug('Checking videoChannelsRemove parameters', { parameters: req.params })
75 checkErrors(req, res, () => {
76 checkVideoChannelExists(req.params.id, res, () => {
77 // Check if the user who did the request is able to delete the video
78 checkUserCanDeleteVideoChannel(res, () => {
79 checkVideoChannelIsNotTheLastOne(res, next)
86 const videoChannelsGetValidator = [
87 param('id').custom(isIdOrUUIDValid).not().isEmpty().withMessage('Should have a valid id'),
89 (req: express.Request, res: express.Response, next: express.NextFunction) => {
90 logger.debug('Checking videoChannelsGet parameters', { parameters: req.params })
92 checkErrors(req, res, () => {
93 checkVideoChannelExists(req.params.id, res, next)
98 // ---------------------------------------------------------------------------
101 listVideoAccountChannelsValidator,
102 videoChannelsAddValidator,
103 videoChannelsUpdateValidator,
104 videoChannelsRemoveValidator,
105 videoChannelsGetValidator
108 // ---------------------------------------------------------------------------
110 function checkUserCanDeleteVideoChannel (res: express.Response, callback: () => void) {
111 const user: UserInstance = res.locals.oauth.token.User
113 // Retrieve the user who did the request
114 if (res.locals.videoChannel.isOwned() === false) {
115 return res.status(403)
116 .json({ error: 'Cannot remove video channel of another server.' })
120 // Check if the user can delete the video channel
121 // The user can delete it if s/he is an admin
122 // Or if s/he is the video channel's account
123 if (user.hasRight(UserRight.REMOVE_ANY_VIDEO_CHANNEL) === false && res.locals.videoChannel.Account.userId !== user.id) {
124 return res.status(403)
125 .json({ error: 'Cannot remove video channel of another user' })
129 // If we reach this comment, we can delete the video
133 function checkVideoChannelIsNotTheLastOne (res: express.Response, callback: () => void) {
134 db.VideoChannel.countByAccount(res.locals.oauth.token.User.Account.id)
137 return res.status(409)
138 .json({ error: 'Cannot remove the last channel of this user' })