@stamhoofd/backend 2.81.0 → 2.83.0

package/src/endpoints/organization/dashboard/users/CreateApiUserEndpoint.ts

@@ -2,15 +2,15 @@ import { Decoder } from '@simonbackx/simple-encoding';
 import { DecodedRequest, Endpoint, Request, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { Token, User } from '@stamhoofd/models';
-import { ApiUser, ApiUserWithToken, UserPermissions } from '@stamhoofd/structures';
+import { ApiUser, ApiUserWithToken, UserMeta, UserPermissions } from '@stamhoofd/structures';
 
 import { Context } from '../../../../helpers/Context';
 type Params = Record<string, never>;
 type Query = undefined;
 type Body = ApiUser;
-type ResponseBody = ApiUser;
+type ResponseBody = ApiUserWithToken;
 
-export class CreateAdminEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
+export class CreateApiUserEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
     bodyDecoder = ApiUser as Decoder<ApiUser>;
 
     protected doesMatch(request: Request): [true, Params] | [false] {
@@ -56,6 +56,19 @@ export class CreateAdminEndpoint extends Endpoint<Params, Query, Body, ResponseB
         }
 
         admin.permissions = UserPermissions.limitedAdd(null, request.body.permissions, organization.id);
+
+        if (request.body.meta) {
+            const rateLimits = request.body.meta.rateLimits;
+            if (rateLimits) {
+                if (!Context.auth.hasPlatformFullAccess()) {
+                    throw Context.auth.error($t('370932fc-6614-44be-bb8f-ff921305fadd'));
+                }
+
+                admin.meta = admin.meta ?? UserMeta.create({});
+                admin.meta.rateLimits = rateLimits;
+            }
+        }
+
         await admin.save();
 
         // Set id

package/src/endpoints/organization/dashboard/users/DeleteUserEndpoint.ts

@@ -41,7 +41,7 @@ export class DeleteUserEndpoint extends Endpoint<Params, Query, Body, ResponseBo
         if (user.id == request.params.id) {
             throw new SimpleError({
                 code: 'permission_denied',
-                message: 'Je kan jezelf niet verwijderen',
+                message: $t(`253f8a6e-bef8-4a3a-8a7c-2580d8bad49c`),
             });
         }
 
@@ -49,7 +49,7 @@ export class DeleteUserEndpoint extends Endpoint<Params, Query, Body, ResponseBo
         if (!editUser || !Context.auth.checkScope(editUser.organizationId)) {
             throw new SimpleError({
                 code: 'permission_denied',
-                message: 'Je hebt geen toegang om deze gebruiker te verwijderen',
+                message: $t(`dd63dfe1-1a13-476b-b729-10b9df944e88`),
             });
         }
 

package/src/endpoints/organization/dashboard/users/PatchApiUserEndpoint.test.ts

@@ -0,0 +1,247 @@
+import { Request } from '@simonbackx/simple-endpoints';
+import { OrganizationFactory, Token, UserFactory } from '@stamhoofd/models';
+
+import { testServer } from '../../../../../tests/helpers/TestServer';
+import { PatchApiUserEndpoint } from './PatchApiUserEndpoint';
+import { SHExpect, TestUtils } from '@stamhoofd/test-utils';
+import { ApiUser, ApiUserRateLimits, PermissionLevel, Permissions, PermissionsResourceType, ResourcePermissions, UserMeta, UserPermissions } from '@stamhoofd/structures';
+import { CreateApiUserEndpoint } from './CreateApiUserEndpoint';
+import { PatchMap } from '@simonbackx/simple-encoding';
+
+describe('Endpoint.PatchApiUserEndpoint', () => {
+    // Test endpoint
+    const createEndpoint = new CreateApiUserEndpoint();
+    const endpoint = new PatchApiUserEndpoint();
+
+    beforeEach(() => {
+        TestUtils.setEnvironment('userMode', 'platform');
+    });
+
+    test('Only a platform admin can alter the rate limits of a key', async () => {
+        const organization = await new OrganizationFactory({}).create();
+        const user = await new UserFactory({
+            globalPermissions: Permissions.create({
+                level: PermissionLevel.Full,
+            }),
+        }).create();
+        const token = await Token.createToken(user);
+
+        const createRequest = Request.buildJson('POST', '/api-keys', organization.getApiHost(), ApiUser.create({
+            permissions: UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+            }),
+        }));
+        createRequest.headers.authorization = 'Bearer ' + token.accessToken;
+        const createResponse = await testServer.test(createEndpoint, createRequest);
+
+        const apiUserId = createResponse.body.id;
+
+        const r = Request.buildJson('PATCH', '/api-keys/' + apiUserId, organization.getApiHost(), ApiUser.patch({
+            id: apiUserId,
+            meta: UserMeta.patch({
+                rateLimits: ApiUserRateLimits.High,
+            }),
+        }));
+        r.headers.authorization = 'Bearer ' + token.accessToken;
+
+        const response = await testServer.test(endpoint, r);
+        expect(response.body).toBeDefined();
+        expect(response.body.id).toEqual(apiUserId);
+        expect(response.body.meta?.rateLimits).toEqual(ApiUserRateLimits.High);
+    });
+
+    test('An organization admin cannot alter rate limits', async () => {
+        const organization = await new OrganizationFactory({}).create();
+        const user = await new UserFactory({
+            permissions: Permissions.create({
+                level: PermissionLevel.Full,
+            }),
+            organization,
+        }).create();
+        const token = await Token.createToken(user);
+
+        const createRequest = Request.buildJson('POST', '/api-keys', organization.getApiHost(), ApiUser.create({
+            permissions: UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+            }),
+        }));
+        createRequest.headers.authorization = 'Bearer ' + token.accessToken;
+        const createResponse = await testServer.test(createEndpoint, createRequest);
+
+        const apiUserId = createResponse.body.id;
+
+        const r = Request.buildJson('PATCH', '/api-keys/' + apiUserId, organization.getApiHost(), ApiUser.patch({
+            id: apiUserId,
+            meta: UserMeta.patch({
+                rateLimits: ApiUserRateLimits.High,
+            }),
+        }));
+        r.headers.authorization = 'Bearer ' + token.accessToken;
+
+        await expect(testServer.test(endpoint, r)).rejects.toThrow(SHExpect.simpleError({
+            code: 'permission_denied',
+        }));
+    });
+
+    test('You cannot grant an API-key permissions outside its organization using a put', async () => {
+        const organization = await new OrganizationFactory({}).create();
+        const user = await new UserFactory({
+            permissions: Permissions.create({
+                level: PermissionLevel.Full,
+            }),
+            organization,
+        }).create();
+        const token = await Token.createToken(user);
+
+        const createRequest = Request.buildJson('POST', '/api-keys', organization.getApiHost(), ApiUser.create({
+            permissions: UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+            }),
+        }));
+        createRequest.headers.authorization = 'Bearer ' + token.accessToken;
+        const createResponse = await testServer.test(createEndpoint, createRequest);
+        const apiUserId = createResponse.body.id;
+
+        const r = Request.buildJson('PATCH', '/api-keys/' + apiUserId, organization.getApiHost(), ApiUser.patch({
+            id: apiUserId,
+            permissions: UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                    ['other', Permissions.create({ level: PermissionLevel.Full })],
+                ]),
+                globalPermissions: Permissions.create({
+                    level: PermissionLevel.Full,
+                }),
+            }),
+        }));
+        r.headers.authorization = 'Bearer ' + token.accessToken;
+
+        const response = await testServer.test(endpoint, r);
+        expect(response.body).toBeDefined();
+        expect(response.body.id).toEqual(apiUserId);
+        expect(response.body.permissions).toEqual(
+            UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+                globalPermissions: null,
+            }),
+        );
+    });
+
+    test('You cannot grant an API-key permissions outside its organization using a patch', async () => {
+        const organization = await new OrganizationFactory({}).create();
+        const user = await new UserFactory({
+            permissions: Permissions.create({
+                level: PermissionLevel.Full,
+            }),
+            organization,
+        }).create();
+        const token = await Token.createToken(user);
+
+        const createRequest = Request.buildJson('POST', '/api-keys', organization.getApiHost(), ApiUser.create({
+            permissions: UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+            }),
+        }));
+        createRequest.headers.authorization = 'Bearer ' + token.accessToken;
+        const createResponse = await testServer.test(createEndpoint, createRequest);
+        const apiUserId = createResponse.body.id;
+
+        const r = Request.buildJson('PATCH', '/api-keys/' + apiUserId, organization.getApiHost(), ApiUser.patch({
+            id: apiUserId,
+            permissions: UserPermissions.patch({
+                organizationPermissions: new PatchMap([
+                    ['other', Permissions.create({ level: PermissionLevel.Full })],
+                ]),
+                globalPermissions: Permissions.create({
+                    level: PermissionLevel.Full,
+                }),
+            }),
+        }));
+        r.headers.authorization = 'Bearer ' + token.accessToken;
+
+        const response = await testServer.test(endpoint, r);
+        expect(response.body).toBeDefined();
+        expect(response.body.id).toEqual(apiUserId);
+        expect(response.body.permissions).toEqual(
+            UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+                globalPermissions: null,
+            }),
+        );
+    });
+
+    test('You can grant an API-key permissions using a patch', async () => {
+        const organization = await new OrganizationFactory({}).create();
+        const user = await new UserFactory({
+            permissions: Permissions.create({
+                level: PermissionLevel.Full,
+            }),
+            organization,
+        }).create();
+        const token = await Token.createToken(user);
+
+        const createRequest = Request.buildJson('POST', '/api-keys', organization.getApiHost(), ApiUser.create({
+            permissions: UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({ level: PermissionLevel.Read })],
+                ]),
+            }),
+        }));
+        createRequest.headers.authorization = 'Bearer ' + token.accessToken;
+        const createResponse = await testServer.test(createEndpoint, createRequest);
+        const apiUserId = createResponse.body.id;
+
+        const r = Request.buildJson('PATCH', '/api-keys/' + apiUserId, organization.getApiHost(), ApiUser.patch({
+            id: apiUserId,
+            permissions: UserPermissions.patch({
+                organizationPermissions: new PatchMap([
+                    [organization.id, Permissions.patch({
+                        resources: new PatchMap([[
+                            PermissionsResourceType.Groups,
+                            new Map([
+                                ['group-id', ResourcePermissions.create({
+                                    level: PermissionLevel.Full,
+                                })],
+                            ]),
+                        ]]),
+                    })],
+                ]),
+            }),
+        }));
+        r.headers.authorization = 'Bearer ' + token.accessToken;
+
+        const response = await testServer.test(endpoint, r);
+        expect(response.body).toBeDefined();
+        expect(response.body.id).toEqual(apiUserId);
+        expect(response.body.permissions).toEqual(
+            UserPermissions.create({
+                organizationPermissions: new Map([
+                    [organization.id, Permissions.create({
+                        level: PermissionLevel.Read,
+                        resources: new Map([[
+                            PermissionsResourceType.Groups,
+                            new Map([
+                                ['group-id', ResourcePermissions.create({
+                                    level: PermissionLevel.Full,
+                                })],
+                            ]),
+                        ]]),
+                    })],
+                ]),
+                globalPermissions: null,
+            }),
+        );
+    });
+});

package/src/endpoints/{auth → organization/dashboard/users}/PatchApiUserEndpoint.ts

@@ -1,17 +1,16 @@
-import { AutoEncoderPatchType, Decoder } from '@simonbackx/simple-encoding';
+import { AutoEncoderPatchType, Decoder, isPatch } from '@simonbackx/simple-encoding';
 import { DecodedRequest, Endpoint, Request, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { Token, User } from '@stamhoofd/models';
-import { ApiUser, PermissionLevel, UserPermissions } from '@stamhoofd/structures';
-
-import { Context } from '../../helpers/Context';
+import { ApiUser, PermissionLevel, UserMeta, UserPermissions } from '@stamhoofd/structures';
+import { Context } from '../../../../helpers/Context';
 
 type Params = { id: string };
 type Query = undefined;
 type Body = AutoEncoderPatchType<ApiUser>;
 type ResponseBody = ApiUser;
 
-export class PatchUserEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
+export class PatchApiUserEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
     bodyDecoder = ApiUser.patchType() as Decoder<AutoEncoderPatchType<ApiUser>>;
 
     protected doesMatch(request: Request): [true, Params] | [false] {
@@ -42,7 +41,7 @@ export class PatchUserEndpoint extends Endpoint<Params, Query, Body, ResponseBod
         const editUser = request.body.id === user.id ? user : await User.getByID(request.body.id);
 
         if (!editUser || !await Context.auth.canAccessUser(editUser, PermissionLevel.Write) || !editUser.isApiUser) {
-            throw Context.auth.notFoundOrNoAccess('Je hebt geen toegang om deze API-user te wijzigen');
+            throw Context.auth.notFoundOrNoAccess($t(`cd099f48-7a5e-4993-854d-697104201871`));
         }
 
         editUser.firstName = request.body.name ?? editUser.name;
@@ -85,6 +84,26 @@ export class PatchUserEndpoint extends Endpoint<Params, Query, Body, ResponseBod
             }
         }
 
+        if (request.body.meta) {
+            if (!isPatch(request.body.meta)) {
+                throw new SimpleError({
+                    code: 'invalid_request',
+                    message: 'Invalid request: meta is not a patch',
+                    statusCode: 400,
+                });
+            }
+
+            const rateLimits = request.body.meta.rateLimits;
+            if (rateLimits && rateLimits !== editUser.meta?.rateLimits) {
+                if (!Context.auth.hasPlatformFullAccess()) {
+                    throw Context.auth.error($t('370932fc-6614-44be-bb8f-ff921305fadd'));
+                }
+
+                editUser.meta = editUser.meta ?? UserMeta.create({});
+                editUser.meta.rateLimits = rateLimits;
+            }
+        }
+
         await editUser.save();
 
         return new Response(await Token.getAPIUserWithToken(editUser));

package/src/endpoints/organization/dashboard/webshops/CreateWebshopEndpoint.ts

@@ -38,7 +38,7 @@ export class CreateWebshopEndpoint extends Endpoint<Params, Query, Body, Respons
 
         // Fast throw first (more in depth checking for patches later)
         if (!await Context.auth.canCreateWebshops(organization.id)) {
-            throw Context.auth.error('Je kan geen webshops maken, vraag aan de hoofdbeheerders om jou toegang te geven.');
+            throw Context.auth.error($t(`e97dabba-7c7f-4705-b5be-fa4ea9f701ed`));
         }
 
         const errors = new SimpleErrors();
@@ -141,7 +141,7 @@ export class CreateWebshopEndpoint extends Endpoint<Params, Query, Body, Respons
                 throw new SimpleError({
                     code: 'failed_to_generate_unique_uri',
                     message: 'Failed to generate unique uri',
-                    human: 'Er is een fout opgetreden bij het maken van de webshop, kies een andere naam voor jouw webshop',
+                    human: $t(`a159e71b-e975-48c0-a33b-fdb52ad22299`),
                     statusCode: 500,
                 });
             }
@@ -168,7 +168,7 @@ export class CreateWebshopEndpoint extends Endpoint<Params, Query, Body, Respons
             throw new SimpleError({
                 code: 'missing_permissions',
                 message: 'You cannot create a webshop without having full permissions on the created webshop',
-                human: 'Als je een webshop aanmaakt moet je ervoor zorgen dat jezelf ook volledige toegang hebt.',
+                human: $t(`28f1afe6-b40d-495c-a58e-2b665c20a294`),
             });
         }
 
@@ -211,7 +211,7 @@ export class CreateWebshopEndpoint extends Endpoint<Params, Query, Body, Respons
                 throw new SimpleError({
                     code: 'failed_to_generate_unique_domainUri',
                     message: 'Failed to generate unique domainUri',
-                    human: 'Er is een fout opgetreden bij het maken van de webshop, kies een andere naam voor jouw webshop',
+                    human: $t(`a159e71b-e975-48c0-a33b-fdb52ad22299`),
                     statusCode: 500,
                 });
             }

package/src/endpoints/organization/dashboard/webshops/PatchDiscountCodesEndpoint.ts

@@ -66,7 +66,7 @@ export class PatchWebshopDiscountCodesEndpoint extends Endpoint<Params, Query, B
                         throw new SimpleError({
                             code: 'used_code',
                             message: 'Discount code already in use',
-                            human: 'Er bestaat al een kortingscode met de code ' + struct.code + ', een code moet uniek zijn.',
+                            human: $t(`d8cf1267-28dd-4d70-9f5f-1ed800729f6d`) + ' ' + struct.code + $t(`9145b0bf-8539-4ddc-8867-859f8716f026`),
                         });
                     }
                     throw e;
@@ -98,7 +98,7 @@ export class PatchWebshopDiscountCodesEndpoint extends Endpoint<Params, Query, B
                         throw new SimpleError({
                             code: 'used_code',
                             message: 'Discount code already in use',
-                            human: 'Er bestaat al een kortingscode met de code ' + model.code + ', een code moet uniek zijn.',
+                            human: $t(`d8cf1267-28dd-4d70-9f5f-1ed800729f6d`) + ' ' + model.code + $t(`9145b0bf-8539-4ddc-8867-859f8716f026`),
                         });
                     }
                     throw e;

package/src/endpoints/organization/dashboard/webshops/PatchWebshopEndpoint.ts

@@ -91,7 +91,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                                     throw new SimpleError({
                                         code: 'domain_already_used',
                                         message: 'This domain is already used by another organization',
-                                        human: 'Deze domeinnaam is al in gebruik door een andere vereniging. Neem contact op met Stamhoofd als je denkt dat je toch toegang zou moeten krijgen.',
+                                        human: $t(`91e43562-956f-41ac-b5b6-a8bcb63edd66`),
                                         statusCode: 400,
                                     });
                                 }
@@ -107,7 +107,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                             throw new SimpleError({
                                 code: 'invalid_field',
                                 message: 'Invalid domain',
-                                human: 'Ongeldige domeinnaam',
+                                human: $t(`0aa565ac-c12a-4b38-9612-0a615e6a67e0`),
                                 field: 'customUrl',
                             });
                         }
@@ -128,7 +128,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                         throw new SimpleError({
                             code: 'invalid_field',
                             message: 'domainUri contains invalid characters',
-                            human: 'Een link mag geen spaties, hoofdletters of speciale tekens bevatten',
+                            human: $t(`4e842c04-da6c-4690-a187-665fa4a60bae`),
                             field: 'customUrl',
                         });
                     }
@@ -139,7 +139,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                         throw new SimpleError({
                             code: 'invalid_domain',
                             message: 'This domain is already in use',
-                            human: 'Deze link is al in gebruik door een andere webshop: ' + existing.meta.name + '. Verwijder of pas daar de link eerst aan als je die wilt hergebruiken.',
+                            human: $t(`11064157-89fd-4c12-b56a-1f5f236a010d`) + ' ' + existing.meta.name + $t(`42dccb0d-88b1-4a18-9250-04aa969b1299`),
                         });
                     }
                 }
@@ -159,7 +159,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                     throw new SimpleError({
                         code: 'invalid_field',
                         message: 'Uri cannot be empty',
-                        human: 'De link mag niet leeg zijn',
+                        human: $t(`6af872f3-4547-4fd2-8949-0163e6473c04`),
                         field: 'uri',
                     });
                 }
@@ -168,7 +168,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                     throw new SimpleError({
                         code: 'invalid_field',
                         message: 'Uri contains invalid characters',
-                        human: 'Een link mag geen spaties, hoofdletters of speciale tekens bevatten',
+                        human: $t(`4e842c04-da6c-4690-a187-665fa4a60bae`),
                         field: 'uri',
                     });
                 }
@@ -181,7 +181,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                 throw new SimpleError({
                     code: 'missing_permissions',
                     message: 'You cannot restrict your own permissions',
-                    human: 'Je kan je eigen volledige toegang tot deze webshop niet verwijderen (algemeen > toegangsbeheer). Vraag aan een hoofdbeheerder om jouw toegang te verwijderen.',
+                    human: $t(`0b70b194-296a-457e-804b-abe800bd5b4c`),
                 });
             }
 
@@ -194,7 +194,7 @@ export class PatchWebshopEndpoint extends Endpoint<Params, Query, Body, Response
                     throw new SimpleError({
                         code: 'invalid_field',
                         message: 'Uri already in use',
-                        human: 'De link die je hebt gekozen is al in gebruik. Kies een andere.',
+                        human: $t(`17267b0d-0be9-4d04-b837-7687da20347f`),
                         field: 'uri',
                     });
                 }

package/src/endpoints/organization/dashboard/webshops/PatchWebshopTicketsEndpoint.ts

@@ -42,7 +42,7 @@ export class PatchWebshopTicketsEndpoint extends Endpoint<Params, Query, Body, R
 
         const webshop = await Webshop.getByID(request.params.id);
         if (!webshop || !await Context.auth.canAccessWebshopTickets(webshop, PermissionLevel.Write)) {
-            throw Context.auth.notFoundOrNoAccess('Je hebt geen toegang om tickets te wijzigen van deze webshop');
+            throw Context.auth.notFoundOrNoAccess($t(`b4969b2f-c128-44ed-a8de-279c1dd55382`));
         }
 
         const tickets: Ticket[] = [];

package/src/endpoints/organization/shared/ExchangePaymentEndpoint.ts

@@ -53,7 +53,7 @@ export class ExchangePaymentEndpoint extends Endpoint<Params, Query, Body, Respo
         if (!payment) {
             throw new SimpleError({
                 code: '',
-                message: 'Deze link is ongeldig',
+                message: $t('35b369bd-5766-41d1-8da3-3d362e316c1a'),
             });
         }
 

package/src/endpoints/organization/shared/GetDocumentHtml.ts

@@ -31,7 +31,7 @@ export class GetDocumentHtml extends Endpoint<Params, Query, Body, ResponseBody>
         if (!document || !(await Context.auth.canAccessDocument(document))) {
             throw new SimpleError({
                 code: 'not_found',
-                message: 'Onbekend document',
+                message: $t('a9860203-6a6d-4612-b4d4-7851e47d4dad'),
             });
         }
 
@@ -48,7 +48,7 @@ export class GetDocumentHtml extends Endpoint<Params, Query, Body, ResponseBody>
         if (!html) {
             throw new SimpleError({
                 code: 'failed_generating',
-                message: 'Er ging iets mis bij het aanmaken van het document. Probeer later opieuw en neem contact met ons op als het probleem blijft herhalen.',
+                message: $t('74ba486a-60b2-4d94-a6fd-159a3adfca8b'),
             });
         }
 

package/src/endpoints/organization/shared/GetPaymentEndpoint.ts

@@ -34,7 +34,7 @@ export class GetPaymentEndpoint extends Endpoint<Params, Query, Body, ResponseBo
             throw new SimpleError({
                 code: 'not_found',
                 message: 'Payment not found',
-                human: 'Je hebt geen toegang tot deze betaling',
+                human: $t(`6024d1b5-f0a0-42f4-b972-636286edf929`),
             });
         }
 

package/src/endpoints/organization/shared/auth/GetOrganizationEndpoint.test.ts

@@ -2,6 +2,7 @@ import { Request } from '@simonbackx/simple-endpoints';
 import { OrganizationFactory, Token, UserFactory } from '@stamhoofd/models';
 import { Organization, PermissionLevel, Permissions } from '@stamhoofd/structures';
 
+import { TestUtils } from '@stamhoofd/test-utils';
 import { testServer } from '../../../../../tests/helpers/TestServer';
 import { GetOrganizationEndpoint } from './GetOrganizationEndpoint';
 
@@ -9,6 +10,10 @@ describe('Endpoint.GetOrganization', () => {
     // Test endpoint
     const endpoint = new GetOrganizationEndpoint();
 
+    beforeEach(async () => {
+        TestUtils.setEnvironment('userMode', 'platform');
+    });
+
     test('Get organization as signed in user', async () => {
         const organization = await new OrganizationFactory({}).create();
         const user = await new UserFactory({ organization }).create();

package/src/endpoints/organization/webshops/CheckWebshopDiscountCodesEndpoint.ts

@@ -34,7 +34,7 @@ export class CheckWebshopDiscountCodesEndpoint extends Endpoint<Params, Query, B
             throw new SimpleError({
                 code: 'not_found',
                 message: 'Webshop not found',
-                human: 'Deze webshop bestaat niet (meer)',
+                human: $t(`45c039cd-e937-42cd-934b-a2bb4ee0abdd`),
             });
         }
 

package/src/endpoints/organization/webshops/GetOrderByPaymentEndpoint.ts

@@ -33,7 +33,7 @@ export class GetOrderByPaymentEndpoint extends Endpoint<Params, Query, Body, Res
             throw new SimpleError({
                 code: 'not_found',
                 message: 'Order not found',
-                human: 'Deze bestelling bestaat niet (meer)',
+                human: $t(`1aced6e8-6b32-4da5-b176-906df0a1cc0a`),
             });
         }
         const [order] = await Order.where({ paymentId: payment.id }, { limit: 1 });
@@ -41,7 +41,7 @@ export class GetOrderByPaymentEndpoint extends Endpoint<Params, Query, Body, Res
             throw new SimpleError({
                 code: 'not_found',
                 message: 'Order not found',
-                human: 'Deze bestelling bestaat niet (meer)',
+                human: $t(`1aced6e8-6b32-4da5-b176-906df0a1cc0a`),
             });
         }
 

package/src/endpoints/organization/webshops/GetOrderEndpoint.ts

@@ -31,7 +31,7 @@ export class GetOrderEndpoint extends Endpoint<Params, Query, Body, ResponseBody
             throw new SimpleError({
                 code: 'not_found',
                 message: 'Order not found',
-                human: 'Deze bestelling bestaat niet (meer)',
+                human: $t(`1aced6e8-6b32-4da5-b176-906df0a1cc0a`),
             });
         }
 

package/src/endpoints/organization/webshops/GetTicketsEndpoint.ts

@@ -55,7 +55,7 @@ export class GetTicketsEndpoint extends Endpoint<Params, Query, Body, ResponseBo
                 throw new SimpleError({
                     code: 'not_found',
                     message: 'Ticket not found',
-                    human: 'Dit ticket bestaat niet',
+                    human: $t(`d7f095ca-0f05-4c8a-9a65-bbbf69b28af0`),
                 });
             }
 
@@ -67,7 +67,7 @@ export class GetTicketsEndpoint extends Endpoint<Params, Query, Body, ResponseBo
                     throw new SimpleError({
                         code: 'not_found',
                         message: 'Ticket not found',
-                        human: 'Dit ticket bestaat niet',
+                        human: $t(`d7f095ca-0f05-4c8a-9a65-bbbf69b28af0`),
                     });
                 }
 
@@ -79,7 +79,7 @@ export class GetTicketsEndpoint extends Endpoint<Params, Query, Body, ResponseBo
                         throw new SimpleError({
                             code: 'not_found',
                             message: 'Ticket not found',
-                            human: 'Dit ticket bestaat niet',
+                            human: $t(`d7f095ca-0f05-4c8a-9a65-bbbf69b28af0`),
                         });
                     }
 

package/src/endpoints/organization/webshops/GetWebshopEndpoint.test.ts

@@ -1,7 +1,8 @@
 import { Request } from '@simonbackx/simple-endpoints';
 import { OrganizationFactory, Token, UserFactory, WebshopFactory } from '@stamhoofd/models';
-import { PermissionLevel, Permissions, PrivateWebshop, Webshop as WebshopStruct } from '@stamhoofd/structures';
+import { PermissionLevel, Permissions } from '@stamhoofd/structures';
 
+import { TestUtils } from '@stamhoofd/test-utils';
 import { testServer } from '../../../../tests/helpers/TestServer';
 import { GetWebshopEndpoint } from './GetWebshopEndpoint';
 
@@ -9,6 +10,10 @@ describe('Endpoint.GetWebshop', () => {
     // Test endpoint
     const endpoint = new GetWebshopEndpoint();
 
+    beforeEach(async () => {
+        TestUtils.setEnvironment('userMode', 'platform');
+    });
+
     test('Get webshop as signed in user', async () => {
         const organization = await new OrganizationFactory({}).create();
         const user = await new UserFactory({ organization }).create();

package/src/endpoints/organization/webshops/GetWebshopEndpoint.ts

@@ -40,7 +40,7 @@ export class GetWebshopEndpoint extends Endpoint<Params, Query, Body, ResponseBo
             throw new SimpleError({
                 code: 'not_found',
                 message: 'Webshop not found',
-                human: 'Deze webshop bestaat niet (meer)',
+                human: $t(`45c039cd-e937-42cd-934b-a2bb4ee0abdd`),
             });
         }