blsmedia/bot
2
0
Fork 0
Code Activity

📝 (api) Add protection to sendMessage api ref to test with auth token

Browse Source 
Closes #369
This commit is contained in:
Baptiste Arnaud
2023-03-08 09:58:38 +01:00
parent b2fa2024a7
commit 83ae81ccc6
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
apps/viewer/src/features/chat/api/procedures/sendMessageProcedure.ts
View File

@ -39,6 +39,7 @@ export const sendMessageProcedure = publicProcedure
summary: 'Send a message', summary: 'Send a message',
description: description:
'To initiate a chat, do not provide a `sessionId` nor a `message`.\n\nContinue the conversation by providing the `sessionId` and the `message` that should answer the previous question.\n\nSet the `isPreview` option to `true` to chat with the non-published version of the typebot.', 'To initiate a chat, do not provide a `sessionId` nor a `message`.\n\nContinue the conversation by providing the `sessionId` and the `message` that should answer the previous question.\n\nSet the `isPreview` option to `true` to chat with the non-published version of the typebot.',
protect: true,
}, },
}) })
.input(sendMessageInputSchema) .input(sendMessageInputSchema)
@ -215,7 +216,11 @@ const getTypebot = async (
): Promise<StartTypebot> => { ): Promise<StartTypebot> => {
if (typeof typebot !== 'string') return typebot if (typeof typebot !== 'string') return typebot
if (isPreview && !userId && env('E2E_TEST') !== 'true') if (isPreview && !userId && env('E2E_TEST') !== 'true')
throw new TRPCError({ code: 'NOT_FOUND', message: 'Typebot not found' }) throw new TRPCError({
code: 'UNAUTHORIZED',
message:
'You need to authenticate the request to start a bot in preview mode.',
})
const typebotQuery = isPreview const typebotQuery = isPreview
? await prisma.typebot.findFirst({ ? await prisma.typebot.findFirst({
where: { id: typebot, workspace: { members: { some: { userId } } } }, where: { id: typebot, workspace: { members: { some: { userId } } } },

2
packages/models/features/chat.ts
View File

@ -146,7 +146,7 @@ const startParamsSchema = z.object({
.boolean() .boolean()
.optional() .optional()
.describe( .describe(
"If set to `true`, it will start a Preview session with the unpublished bot and it won't be saved in the Results tab." "If set to `true`, it will start a Preview session with the unpublished bot and it won't be saved in the Results tab. You need to be authenticated for this to work."
), ),
resultId: z resultId: z
.string() .string()