Files
website/server/api/message.delete.ts
2024-04-20 00:03:10 +02:00

14 lines
473 B
TypeScript

import { z } from 'zod'
const MessageValidator = z.object({
id: z.number()
}).parse
export default defineEventHandler(async (event) => {
const { id } = await readValidatedBody(event, MessageValidator)
const { user } = await requireUserSession(event)
if (!user.admin)
throw createError({ statusCode: 400, message: 'You need the permission to delete a message!' })
return useDB().delete(tables.guestbookMessages).where(eq(tables.guestbookMessages.id, id))
})