chore(api): re-add roleypoly creation gated by root

src/backend-worker/handlers/create-roleypoly-data.ts

@@ -1,10 +1,11 @@
 import KSUID from 'ksuid';
 import { CategoryType, Features, GuildData as GuildDataT } from 'roleypoly/common/types';
-import { respond } from '../utils/api-tools';
+import { onlyRootUsers, respond } from '../utils/api-tools';
 import { GuildData } from '../utils/kv';
 
 // Temporary use.
-export const CreateRoleypolyData = async (request: Request): Promise<Response> => {
+export const CreateRoleypolyData = onlyRootUsers(
+    async (request: Request): Promise<Response> => {
         const data: GuildDataT = {
             id: '386659935687147521',
             message:
@@ -32,7 +33,11 @@ export const CreateRoleypolyData = async (request: Request): Promise<Response> =
                     type: CategoryType.Single,
                     hidden: false,
                     position: 1,
-                roles: ['394060232893923349', '394060145799331851', '394060192846839809'],
+                    roles: [
+                        '394060232893923349',
+                        '394060145799331851',
+                        '394060192846839809',
+                    ],
                 },
                 {
                     id: KSUID.randomSync().string,
@@ -40,7 +45,11 @@ export const CreateRoleypolyData = async (request: Request): Promise<Response> =
                     type: CategoryType.Multi,
                     hidden: false,
                     position: 5,
-                roles: ['558104828216213505', '558103534453653514', '558297233582194728'],
+                    roles: [
+                        '558104828216213505',
+                        '558103534453653514',
+                        '558297233582194728',
+                    ],
                 },
                 {
                     id: KSUID.randomSync().string,
@@ -69,7 +78,11 @@ export const CreateRoleypolyData = async (request: Request): Promise<Response> =
                     type: CategoryType.Multi,
                     hidden: false,
                     position: 2,
-                roles: ['485916566790340608', '485916566941335583', '485916566311927808'],
+                    roles: [
+                        '485916566790340608',
+                        '485916566941335583',
+                        '485916566311927808',
+                    ],
                 },
             ],
         };
@@ -77,4 +90,5 @@ export const CreateRoleypolyData = async (request: Request): Promise<Response> =
         await GuildData.put(data.id, data);
 
         return respond({ ok: true });
-};
+    }
+);

src/backend-worker/index.ts

@@ -1,4 +1,5 @@
 import { BotJoin } from './handlers/bot-join';
+import { CreateRoleypolyData } from './handlers/create-roleypoly-data';
 import { GetPickerData } from './handlers/get-picker-data';
 import { GetSession } from './handlers/get-session';
 import { GetSlug } from './handlers/get-slug';
@@ -6,20 +7,28 @@ import { LoginBounce } from './handlers/login-bounce';
 import { LoginCallback } from './handlers/login-callback';
 import { RevokeSession } from './handlers/revoke-session';
 import { Router } from './router';
+import { respond } from './utils/api-tools';
+import { uiPublicURI } from './utils/config';
 
 const router = new Router();
 
-router.addFallback('root', () => {
-    return new Response('hello!!');
-});
-
+// OAuth
 router.add('GET', 'bot-join', BotJoin);
 router.add('GET', 'login-bounce', LoginBounce);
 router.add('GET', 'login-callback', LoginCallback);
-router.add('POST', 'revoke-session', RevokeSession);
+
+// Session
 router.add('GET', 'get-session', GetSession);
+router.add('POST', 'revoke-session', RevokeSession);
+
+// Main biz logic
 router.add('GET', 'get-slug', GetSlug);
 router.add('GET', 'get-picker-data', GetPickerData);
+
+// Root users only
+router.add('GET', 'x-create-roleypoly-data', CreateRoleypolyData);
+
+// Tester Routes
 router.add('GET', 'x-headers', (request) => {
     const headers: { [x: string]: string } = {};
 
@@ -29,7 +38,21 @@ router.add('GET', 'x-headers', (request) => {
 
     return new Response(JSON.stringify(headers));
 });
-// router.add('GET', 'x-create-roleypoly-data', CreateRoleypolyData);
+
+// Root Zen <3
+router.addFallback('root', () => {
+    return respond({
+        __warning: '🦊',
+        this: 'is',
+        a: 'fox-based',
+        web: 'application',
+        please: 'be',
+        mindful: 'of',
+        your: 'surroundings',
+        warning__: '🦊',
+        meta: uiPublicURI,
+    });
+});
 
 addEventListener('fetch', (event: FetchEvent) => {
     event.respondWith(router.handle(event.request));

src/backend-worker/utils/api-tools.ts

@@ -4,7 +4,7 @@ import {
     permissions as Permissions,
 } from '../../common/utils/hasPermission';
 import { Handler } from '../router';
-import { uiPublicURI } from './config';
+import { rootUsers, uiPublicURI } from './config';
 import { Sessions, WrappedKVNamespace } from './kv';
 
 export const formData = (obj: Record<string, any>): string => {
@@ -147,3 +147,21 @@ export const withSession = (
 
     return await wrappedHandler(session)(request);
 };
+
+export const isRoot = (userID: string): boolean => rootUsers.includes(userID);
+
+export const onlyRootUsers = (handler: Handler): Handler =>
+    withSession((session) => (request: Request) => {
+        if (isRoot(session.user.id)) {
+            return handler(request);
+        }
+
+        return respond(
+            {
+                error: 'not_found',
+            },
+            {
+                status: 404,
+            }
+        );
+    });