bot/apps/builder/pages/api/integrations/google-sheets/spreadsheets.ts

import { NextApiRequest, NextApiResponse } from 'next'
import { drive } from '@googleapis/drive'
import { getAuthenticatedGoogleClient } from 'libs/google-sheets'
import {
  badRequest,
  forbidden,
  methodNotAllowed,
  notAuthenticated,
} from 'utils'
import { captureException, setUser, withSentry } from '@sentry/nextjs'
import { getAuthenticatedUser } from 'services/api/utils'

const handler = async (req: NextApiRequest, res: NextApiResponse) => {
  const user = await getAuthenticatedUser(req)
  if (!user) return notAuthenticated(res)

  setUser({ email: user.email ?? undefined, id: user.id })
  if (req.method === 'GET') {
    const credentialsId = req.query.credentialsId as string | undefined
    if (!credentialsId) return badRequest(res)
    const auth = await getAuthenticatedGoogleClient(user.id, credentialsId)
    if (!auth)
      return res.status(404).send("Couldn't find credentials in database")
    if (auth.credentials.ownerId !== user.id) {
      // It should never happen but for some reason it does in rare cases... Currently under investigation.
      captureException(
        new Error(
          `Credentials ownerId does not match user id ${auth.credentials.ownerId} !== ${user.id}`
        )
      )
      return forbidden(res)
    }
    const response = await drive({
      version: 'v3',
      auth: auth.client,
    }).files.list({
      q: "mimeType='application/vnd.google-apps.spreadsheet'",
      fields: 'nextPageToken, files(id, name)',
    })
    return res.send(response.data)
  }
  return methodNotAllowed(res)
}

export default withSentry(handler)