import { Request, Response, NextFunction } from "express"; import { z } from "zod"; import { db } from "@server/db"; import { userOrgs, userResources, users, userSites } from "@server/db/schema"; import { and, eq } from "drizzle-orm"; import response from "@server/utils/response"; import HttpCode from "@server/types/HttpCode"; import createHttpError from "http-errors"; import logger from "@server/logger"; import { fromError } from "zod-validation-error"; const removeUserSchema = z.object({ userId: z.string(), orgId: z.string(), }); export async function removeUserOrg( req: Request, res: Response, next: NextFunction ): Promise { try { const parsedParams = removeUserSchema.safeParse(req.params); if (!parsedParams.success) { return next( createHttpError( HttpCode.BAD_REQUEST, fromError(parsedParams.error).toString() ) ); } const { userId, orgId } = parsedParams.data; // get the user first const user = await db .select() .from(userOrgs) .where(eq(userOrgs.userId, userId)); if (!user || user.length === 0) { return next(createHttpError(HttpCode.NOT_FOUND, "User not found")); } if (user[0].isOwner) { return next( createHttpError( HttpCode.BAD_REQUEST, "Cannot remove owner from org" ) ); } await db.transaction(async (trx) => { await trx .delete(userOrgs) .where( and(eq(userOrgs.userId, userId), eq(userOrgs.orgId, orgId)) ); await trx .delete(userResources) .where(eq(userResources.userId, userId)); await trx.delete(userSites).where(eq(userSites.userId, userId)); }); return response(res, { data: null, success: true, error: false, message: "User remove from org successfully", status: HttpCode.OK, }); } catch (error) { logger.error(error); return next( createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred") ); } }