3pp-mirror/rallly
1
0
Fork 0
mirror of https://github.com/lukevella/rallly.git synced 2025-04-29 10:16:32 +02:00
Code Issues Projects Releases Packages Wiki Activity

🔒️ Limit max participants in a poll (#1450)

Browse source
This commit is contained in:
Luke Vella 2024-12-01 18:41:24 +00:00 • committed by GitHub
parent 9b606bdbdc
commit 387e83922d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 28 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
apps/web/src/trpc/routers/polls/participants.ts
View file

@ -8,6 +8,8 @@ import { createToken } from "@/utils/session";
import { publicProcedure, rateLimitMiddleware, router } from "../../trpc";
import type { DisableNotificationsPayload } from "../../types";
const MAX_PARTICIPANTS = 1000;
export const participants = router({
list: publicProcedure
.input(
@ -73,19 +75,21 @@ export const participants = router({
.mutation(async ({ ctx, input: { pollId, votes, name, email } }) => {
const { user } = ctx;
const poll = await prisma.poll.findUnique({
where: { id: pollId },
select: {
id: true,
title: true,
},
});
if (!poll) {
throw new TRPCError({ code: "BAD_REQUEST", message: "Poll not found" });
}
const participant = await prisma.$transaction(async (prisma) => {
const participantCount = await prisma.participant.count({
where: {
pollId,
deleted: false,
},
});
if (participantCount >= MAX_PARTICIPANTS) {
throw new TRPCError({
code: "BAD_REQUEST",
message: `This poll has reached its maximum limit of ${MAX_PARTICIPANTS} participants`,
});
}
const participant = await prisma.participant.create({
data: {
pollId: pollId,
@ -94,6 +98,14 @@ export const participants = router({
userId: user.id,
locale: user.locale ?? undefined,
},
include: {
poll: {
select: {
id: true,
title: true,
},
},
},
});
await prisma.vote.createMany({
@ -121,9 +133,9 @@ export const participants = router({
.queueTemplate("NewParticipantConfirmationEmail", {
to: email,
props: {
title: poll.title,
title: participant.poll.title,
editSubmissionUrl: absoluteUrl(
`/invite/${poll.id}?token=${token}`,
`/invite/${participant.poll.id}?token=${token}`,
),
},
});
@ -155,11 +167,11 @@ export const participants = router({
to: email,
props: {
participantName: participant.name,
pollUrl: absoluteUrl(`/poll/${poll.id}`),
pollUrl: absoluteUrl(`/poll/${participant.poll.id}`),
disableNotificationsUrl: absoluteUrl(
`/auth/disable-notifications?token=${token}`,
),
title: poll.title,
title: participant.poll.title,
},
});
}