* feat: API endpoints for email signin * fix: After testing * Initial signin flow working * move shared middleware * feat: Add guest signin toggle, obey on endpoints * feat: Basic email signin when enabled * Improve guest signin email Disable double signin with JWT * fix: Simple rate limiting * create placeholder users in db * fix: Give invited users default avatar add invited users to people settings * test * add transaction * tmp: test CI * derp * md5 * urgh * again * test: pass * test * fix: Remove usage of data values * guest signin page * Visually separator 'Invited' from other people tabs * fix: Edge case attempting SSO signin for guest email account * fix: Correctly set email auth method to cookie * Improve rate limit error display * lint: cleanup / comments * Improve invalid token error display * style tweaks * pass guest value to subdomain * Restore copy link option * feat: Allow invite revoke from people management * fix: Incorrect users email schema does not allow for user deletion * lint * fix: avatarUrl for deleted user failure * change default to off for guest invites * fix: Changing security settings wipes subdomain * fix: user delete permissioning * test: Add user.invite specs
48 lines
1.2 KiB
JavaScript
48 lines
1.2 KiB
JavaScript
// @flow
|
|
import Router from 'koa-router';
|
|
import { Team } from '../models';
|
|
import { publicS3Endpoint } from '../utils/s3';
|
|
|
|
import auth from '../middlewares/authentication';
|
|
import { presentTeam, presentPolicies } from '../presenters';
|
|
import policy from '../policies';
|
|
|
|
const { authorize } = policy;
|
|
const router = new Router();
|
|
|
|
router.post('team.update', auth(), async ctx => {
|
|
const {
|
|
name,
|
|
avatarUrl,
|
|
subdomain,
|
|
sharing,
|
|
guestSignin,
|
|
documentEmbeds,
|
|
} = ctx.body;
|
|
const endpoint = publicS3Endpoint();
|
|
|
|
const user = ctx.state.user;
|
|
const team = await Team.findByPk(user.teamId);
|
|
authorize(user, 'update', team);
|
|
|
|
if (subdomain !== undefined && process.env.SUBDOMAINS_ENABLED === 'true') {
|
|
team.subdomain = subdomain === '' ? null : subdomain;
|
|
}
|
|
|
|
if (name) team.name = name;
|
|
if (sharing !== undefined) team.sharing = sharing;
|
|
if (documentEmbeds !== undefined) team.documentEmbeds = documentEmbeds;
|
|
if (guestSignin !== undefined) team.guestSignin = guestSignin;
|
|
if (avatarUrl && avatarUrl.startsWith(`${endpoint}/uploads/${user.id}`)) {
|
|
team.avatarUrl = avatarUrl;
|
|
}
|
|
await team.save();
|
|
|
|
ctx.body = {
|
|
data: presentTeam(team),
|
|
policies: presentPolicies(user, [team]),
|
|
};
|
|
});
|
|
|
|
export default router;
|