RocketChat/Rocket.Chat

View on GitHub
apps/meteor/app/lib/server/methods/getSingleMessage.ts

Summary

Maintainability
A
0 mins
Test Coverage
import type { IMessage } from '@rocket.chat/core-typings';
import type { ServerMethods } from '@rocket.chat/ddp-client';
import { Messages } from '@rocket.chat/models';
import { check } from 'meteor/check';
import { Meteor } from 'meteor/meteor';

import { canAccessRoomIdAsync } from '../../../authorization/server/functions/canAccessRoom';

declare module '@rocket.chat/ddp-client' {
    // eslint-disable-next-line @typescript-eslint/naming-convention
    interface ServerMethods {
        getSingleMessage(mid: IMessage['_id']): Promise<IMessage | null>;
    }
}

Meteor.methods<ServerMethods>({
    async getSingleMessage(mid) {
        check(mid, String);

        const uid = Meteor.userId();

        if (!uid) {
            throw new Meteor.Error('error-invalid-user', 'Invalid user', { method: 'getSingleMessage' });
        }

        const msg = await Messages.findOneById(mid);

        if (!msg?.rid) {
            return null;
        }

        if (!(await canAccessRoomIdAsync(msg.rid, uid))) {
            throw new Meteor.Error('error-not-allowed', 'Not allowed', { method: 'getSingleMessage' });
        }

        return msg;
    },
});