sendou.ink/app/features/api/actions/api.server.ts

import type { ActionFunctionArgs } from "react-router";
import { z } from "zod";
import { refreshApiTokensCache } from "~/features/api-public/api-public-utils.server";
import { requireUser } from "~/features/auth/core/user.server";
import { parseRequestPayload, successToast } from "~/utils/remix.server";
import * as ApiRepository from "../ApiRepository.server";
import { checkUserHasApiAccess } from "../core/perms";

const apiActionSchema = z.object({
	_action: z.enum(["GENERATE_READ", "GENERATE_WRITE"]),
});

export const action = async ({ request }: ActionFunctionArgs) => {
	const data = await parseRequestPayload({
		request,
		schema: apiActionSchema,
	});
	const user = requireUser();

	const hasApiAccess = await checkUserHasApiAccess(user);
	if (!hasApiAccess) {
		throw new Response("Forbidden", { status: 403 });
	}

	switch (data._action) {
		case "GENERATE_READ": {
			await ApiRepository.generateToken(user.id, "read");
			await refreshApiTokensCache();
			successToast("Read token generated successfully");
			break;
		}
		case "GENERATE_WRITE": {
			await ApiRepository.generateToken(user.id, "write");
			await refreshApiTokensCache();
			successToast("Write token generated successfully");
			break;
		}
		default: {
			throw new Error("Invalid action");
		}
	}

	return null;
};