X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server%2Fmiddlewares%2Fvalidators%2Fvideos%2Fvideo-comments.ts;h=da2fafb10aaa32d6033244187b2fda2c5a72367a;hb=298b3fd31529c047e87d34d397af3b08833bd8d0;hp=8adbb02ba13187a67ff4ad6d6732c12bc3b57ec8;hpb=8c559fad1e1c4c2ab7f1388c73200aa4c6256d74;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/middlewares/validators/videos/video-comments.ts b/server/middlewares/validators/videos/video-comments.ts index 8adbb02ba..da2fafb10 100644 --- a/server/middlewares/validators/videos/video-comments.ts +++ b/server/middlewares/validators/videos/video-comments.ts @@ -50,7 +50,7 @@ const addVideoCommentThreadValidator = [ if (areValidationErrors(req, res)) return if (!await doesVideoExist(req.params.videoId, res)) return if (!isVideoCommentsEnabled(res.locals.videoAll, res)) return - if (!await isVideoCommentAccepted(req, res, res.locals.videoAll,false)) return + if (!await isVideoCommentAccepted(req, res, res.locals.videoAll, false)) return return next() } @@ -120,7 +120,8 @@ export { // --------------------------------------------------------------------------- -async function doesVideoCommentThreadExist (id: number, video: MVideoId, res: express.Response) { +async function doesVideoCommentThreadExist (idArg: number | string, video: MVideoId, res: express.Response) { + const id = parseInt(idArg + '', 10) const videoComment = await VideoCommentModel.loadById(id) if (!videoComment) { @@ -133,7 +134,7 @@ async function doesVideoCommentThreadExist (id: number, video: MVideoId, res: ex if (videoComment.videoId !== video.id) { res.status(400) - .json({ error: 'Video comment is associated to this video.' }) + .json({ error: 'Video comment is not associated to this video.' }) .end() return false @@ -151,7 +152,8 @@ async function doesVideoCommentThreadExist (id: number, video: MVideoId, res: ex return true } -async function doesVideoCommentExist (id: number, video: MVideoId, res: express.Response) { +async function doesVideoCommentExist (idArg: number | string, video: MVideoId, res: express.Response) { + const id = parseInt(idArg + '', 10) const videoComment = await VideoCommentModel.loadByIdAndPopulateVideoAndAccountAndReply(id) if (!videoComment) { @@ -164,7 +166,7 @@ async function doesVideoCommentExist (id: number, video: MVideoId, res: express. if (videoComment.videoId !== video.id) { res.status(400) - .json({ error: 'Video comment is associated to this video.' }) + .json({ error: 'Video comment is not associated to this video.' }) .end() return false @@ -187,6 +189,13 @@ function isVideoCommentsEnabled (video: MVideo, res: express.Response) { } function checkUserCanDeleteVideoComment (user: MUser, videoComment: MCommentOwner, res: express.Response) { + if (videoComment.isDeleted()) { + res.status(409) + .json({ error: 'This comment is already deleted' }) + .end() + return false + } + const account = videoComment.Account if (user.hasRight(UserRight.REMOVE_ANY_VIDEO_COMMENT) === false && account.userId !== user.id) { res.status(403)