ban.ts

/*
Ban a user.  This is ONLY allowed for admins.
*/

import getAccountId from "lib/account/get-account";
import getParams from "lib/api/get-params";
import userIsInGroup from "@cocalc/server/accounts/is-in-group";
import { banUser } from "@cocalc/server/accounts/ban";

import { apiRoute, apiRouteOperation } from "lib/api";
import { SuccessStatus } from "lib/api/status";
import {
  BanAccountInputSchema,
  BanAccountOutputSchema,
} from "lib/api/schema/accounts/ban";

async function handle(req, res) {
  try {
    res.json(await get(req));
  } catch (err) {
    res.json({ error: `${err.message}` });
    return;
  }
}

async function get(req) {
  const account_id0 = await getAccountId(req);
  if (account_id0 == null) {
    throw Error("must be signed in");
  }
  // This user MUST be an admin:
  if (!(await userIsInGroup(account_id0, "admin"))) {
    throw Error("only admins can ban users");
  }

  const { account_id } = getParams(req);
  await banUser(account_id);
  return SuccessStatus;
}

export default apiRoute({
  ban: apiRouteOperation({
    method: "POST",
    openApiOperation: {
      tags: ["Accounts", "Admin"],
    },
  })
    .input({
      contentType: "application/json",
      body: BanAccountInputSchema,
    })
    .outputs([
      {
        status: 200,
        contentType: "application/json",
        body: BanAccountOutputSchema,
      },
    ])
    .handler(handle),
});