feat(editor): ✨ Team workspaces

apps/builder/pages/api/credentials/[credentialsId].ts

@@ -0,0 +1,25 @@
+import { withSentry } from '@sentry/nextjs'
+import prisma from 'libs/prisma'
+import { NextApiRequest, NextApiResponse } from 'next'
+import { getAuthenticatedUser } from 'services/api/utils'
+import { badRequest, methodNotAllowed, notAuthenticated } from 'utils'
+
+const handler = async (req: NextApiRequest, res: NextApiResponse) => {
+  const user = await getAuthenticatedUser(req)
+  if (!user) return notAuthenticated(res)
+  const workspaceId = req.query.workspaceId as string | undefined
+  if (!workspaceId) return badRequest(res)
+  if (req.method === 'DELETE') {
+    const credentialsId = req.query.credentialsId.toString()
+    const credentials = await prisma.credentials.deleteMany({
+      where: {
+        id: credentialsId,
+        workspace: { id: workspaceId, members: { some: { userId: user.id } } },
+      },
+    })
+    return res.send({ credentials })
+  }
+  return methodNotAllowed(res)
+}
+
+export default withSentry(handler)

apps/builder/pages/api/credentials/google-sheets/callback.ts

@@ -4,7 +4,7 @@ import prisma from 'libs/prisma'
 import { googleSheetsScopes } from './consent-url'
 import { stringify } from 'querystring'
 import { CredentialsType } from 'models'
-import { encrypt, notAuthenticated } from 'utils'
+import { badRequest, encrypt, notAuthenticated } from 'utils'
 import { oauth2Client } from 'libs/google-sheets'
 import { withSentry } from '@sentry/nextjs'
 import { getAuthenticatedUser } from 'services/api/utils'
@@ -12,11 +12,12 @@ import { getAuthenticatedUser } from 'services/api/utils'
 const handler = async (req: NextApiRequest, res: NextApiResponse) => {
   const user = await getAuthenticatedUser(req)
   if (!user) return notAuthenticated(res)
-  const { redirectUrl, stepId } = JSON.parse(
+  const { redirectUrl, stepId, workspaceId } = JSON.parse(
     Buffer.from(req.query.state.toString(), 'base64').toString()
   )
   if (req.method === 'GET') {
     const code = req.query.code.toString()
+    if (!workspaceId) return badRequest(res)
     if (!code)
       return res.status(400).send({ message: "Bad request, couldn't get code" })
     const { tokens } = await oauth2Client.getToken(code)
@@ -41,20 +42,12 @@ const handler = async (req: NextApiRequest, res: NextApiResponse) => {
     const credentials = {
       name: email,
       type: CredentialsType.GOOGLE_SHEETS,
-      ownerId: user.id,
+      workspaceId,
       data: encryptedData,
       iv,
     } as Prisma.CredentialsUncheckedCreateInput
-    const { id: credentialsId } = await prisma.credentials.upsert({
-      create: credentials,
-      update: credentials,
-      where: {
-        name_type_ownerId: {
-          name: credentials.name,
-          type: credentials.type,
-          ownerId: user.id,
-        },
-      },
+    const { id: credentialsId } = await prisma.credentials.create({
+      data: credentials,
     })
     const queryParams = stringify({ stepId, credentialsId })
     res.redirect(