RocketChat/Rocket.Chat

import type { ISettingSelectOption } from '@rocket.chat/core-typings';
import { Settings } from '@rocket.chat/models';
import { isPOSTLivechatAppearanceParams } from '@rocket.chat/rest-typings';

import { isTruthy } from '../../../../../lib/isTruthy';
import { API } from '../../../../api/server';
import { notifyOnSettingChangedById } from '../../../../lib/server/lib/notifyListener';
import { findAppearance } from '../../../server/api/lib/appearance';

API.v1.addRoute(
    'livechat/appearance',
    {
        authRequired: true,
        permissionsRequired: ['view-livechat-manager'],
        validateParams: {
            POST: isPOSTLivechatAppearanceParams,
        },
    },
    {
        async get() {
            const { appearance } = await findAppearance();

            return API.v1.success({
                appearance,
            });
        },
        async post() {
            const settings = this.bodyParams;

            const validSettingList = [
                'Livechat_title',
                'Livechat_title_color',
                'Livechat_enable_message_character_limit',
                'Livechat_message_character_limit',
                'Livechat_show_agent_info',
                'Livechat_show_agent_email',
                'Livechat_display_offline_form',
                'Livechat_offline_form_unavailable',
                'Livechat_offline_message',
                'Livechat_offline_success_message',
                'Livechat_offline_title',
                'Livechat_offline_title_color',
                'Livechat_offline_email',
                'Livechat_conversation_finished_message',
                'Livechat_conversation_finished_text',
                'Livechat_registration_form',
                'Livechat_name_field_registration_form',
                'Livechat_email_field_registration_form',
                'Livechat_registration_form_message',
                'Livechat_hide_watermark',
                'Livechat_background',
                'Livechat_widget_position',
                'Livechat_hide_system_messages',
            ];

            const valid = settings.every((setting) => validSettingList.includes(setting._id));

            if (!valid) {
                throw new Error('invalid-setting');
            }

            const dbSettings = await Settings.findByIds(validSettingList, { projection: { _id: 1, value: 1, type: 1, values: 1 } })
                .map((dbSetting) => {
                    const setting = settings.find(({ _id }) => _id === dbSetting._id);
                    if (!setting || dbSetting.value === setting.value) {
                        return;
                    }

                    if (dbSetting.type === 'multiSelect' && (!Array.isArray(setting.value) || !validateValues(setting.value, dbSetting.values))) {
                        return;
                    }

                    switch (dbSetting?.type) {
                        case 'boolean':
                            return {
                                _id: dbSetting._id,
                                value: setting.value === 'true' || setting.value === true,
                            };
                        case 'int':
                            return {
                                _id: dbSetting._id,
                                value: coerceInt(setting.value),
                            };
                        default:
                            return {
                                _id: dbSetting._id,
                                value: setting?.value,
                            };
                    }
                })
                .toArray();

            const eligibleSettings = dbSettings.filter(isTruthy);
            const promises = eligibleSettings.map(({ _id, value }) => Settings.updateValueById(_id, value));
            (await Promise.all(promises)).forEach((value, index) => {
                if (value?.modifiedCount) {
                    void notifyOnSettingChangedById(eligibleSettings[index]._id);
                }
            });

            return API.v1.success();
        },
    },
);

function validateValues(values: string[], allowedValues: ISettingSelectOption[] = []): boolean {
    return values.every((value) => allowedValues.some((allowedValue) => allowedValue.key === value));
}

function coerceInt(value: string | number | boolean | string[]): number {
    if (typeof value === 'number') {
        return value;
    }

    if (typeof value === 'boolean') {
        return 0;
    }

    if (Array.isArray(value)) {
        return 0;
    }

    const parsedValue = parseInt(value, 10);
    if (Number.isNaN(parsedValue)) {
        return 0;
    }

    return parsedValue;
}