[offers][feat] add update and delete endpoints for comment

apps/portal/src/server/router/offers/offers-comments-router.ts

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import * as trpc from '@trpc/server';
+
+import { createProtectedRouter } from '../context';
+
+export const offersProfileRouter = createProtectedRouter()
+    .mutation("update", {
+        input: z.object({
+            id: z.string(),
+            message: z.string(),
+            profileId: z.string(),
+            // Have to pass in either userID or token for validation
+            token: z.string().optional(),
+            userId: z.string().optional(),
+        }),
+        async resolve({ ctx, input }) {
+            const messageToUpdate = await ctx.prisma.offersReply.findFirst({
+                where: {
+                    id: input.id
+                }
+            })
+            const profile = await ctx.prisma.offersProfile.findFirst({
+                where: {
+                id: input.profileId,
+                },
+            });
+
+            const profileEditToken = profile?.editToken;
+
+            // To validate user editing, OP or correct user
+            // TODO: improve validation process
+            if (profileEditToken === input.token || messageToUpdate?.userId === input.userId) {
+                await ctx.prisma.offersReply.update({
+                    data: {
+                        message: input.message
+                    },
+                    where: {
+                        id: input.id
+                    }
+                })
+            }
+
+            throw new trpc.TRPCError({
+                code: 'UNAUTHORIZED',
+                message: 'Wrong userId or token.'
+            })
+        }
+    })
+    .mutation("delete", {
+        input: z.object({
+            id: z.string(),
+            profileId: z.string(),
+            // Have to pass in either userID or token for validation
+            token: z.string().optional(),
+            userId: z.string().optional(),
+        }),
+        async resolve({ ctx, input }) {
+            const messageToDelete = await ctx.prisma.offersReply.findFirst({
+                where: {
+                    id: input.id
+                }
+            })
+            const profile = await ctx.prisma.offersProfile.findFirst({
+                where: {
+                    id: input.profileId,
+                },
+            });
+
+            const profileEditToken = profile?.editToken;
+
+            // To validate user editing, OP or correct user
+            // TODO: improve validation process
+            if (profileEditToken === input.token || messageToDelete?.userId === input.userId) {
+                await ctx.prisma.offersReply.delete({
+                    where: {
+                        id: input.id
+                    }
+                })
+            }
+
+            throw new trpc.TRPCError({
+                code: 'UNAUTHORIZED',
+                message: 'Wrong userId or token.'
+            })
+        }
+    })