outline/server/routes/api/views.ts

import Router from "koa-router";
import auth from "@server/middlewares/authentication";
import { rateLimiter } from "@server/middlewares/rateLimiter";
import { View, Document, Event } from "@server/models";
import { authorize } from "@server/policies";
import { presentView } from "@server/presenters";
import { RateLimiterStrategy } from "@server/utils/RateLimiter";
import { assertUuid } from "@server/validation";

const router = new Router();

router.post("views.list", auth(), async (ctx) => {
  const { documentId, includeSuspended = false } = ctx.request.body;
  assertUuid(documentId, "documentId is required");

  const { user } = ctx.state;
  const document = await Document.findByPk(documentId, {
    userId: user.id,
  });
  authorize(user, "read", document);
  const views = await View.findByDocument(documentId, { includeSuspended });

  ctx.body = {
    data: views.map(presentView),
  };
});

router.post(
  "views.create",
  auth(),
  rateLimiter(RateLimiterStrategy.OneThousandPerHour),
  async (ctx) => {
    const { documentId } = ctx.request.body;
    assertUuid(documentId, "documentId is required");

    const { user } = ctx.state;
    const document = await Document.findByPk(documentId, {
      userId: user.id,
    });
    authorize(user, "read", document);

    const view = await View.incrementOrCreate({
      documentId,
      userId: user.id,
    });

    await Event.create({
      name: "views.create",
      actorId: user.id,
      documentId: document.id,
      collectionId: document.collectionId,
      teamId: user.teamId,
      modelId: view.id,
      data: {
        title: document.title,
      },
      ip: ctx.request.ip,
    });
    view.user = user;

    ctx.body = {
      data: presentView(view),
    };
  }
);

export default router;