streamby-core 0.10.9 → 0.10.11

package/dist/middleware/createRouter.js

@@ -135,9 +135,16 @@ function createStreamByRouter(config) {
             }
             const projectId = req.params.id;
             const updates = req.body;
+            const project = await config.projectProvider.getById(projectId);
+            if (!project) {
+                return res.status(404).json({ error: 'Project not found' });
+            }
             if (!updates || typeof updates !== 'object') {
                 return res.status(400).json({ error: 'Missing updates payload' });
             }
+            if (!isProjectMember(project, auth.userId)) {
+                return res.status(403).json({ error: 'Unauthorized project access' });
+            }
             const updated = await config.projectProvider.update(projectId, updates);
             res.status(200).json({ success: true, project: updated });
         }
@@ -147,7 +154,16 @@ function createStreamByRouter(config) {
     });
     router.delete('/projects/:id', async (req, res) => {
         try {
-            await (0, project_1.deleteProjectService)(req, config.authProvider, config.projectProvider);
+            const auth = await config.authProvider(req);
+            const projectId = req.params.id;
+            const project = await config.projectProvider.getById(projectId);
+            if (!project) {
+                return res.status(404).json({ error: 'Project not found' });
+            }
+            if (!isProjectMember(project, auth.userId)) {
+                return res.status(403).json({ error: 'Unauthorized project access' });
+            }
+            await (0, project_1.deleteProjectService)(projectId, config.projectProvider);
             res.status(200).json({ success: true });
         }
         catch (err) {

package/dist/providers/mongoProjectProvider.js

@@ -13,8 +13,8 @@ function createMongoProjectProvider(ProjectModel, adapter) {
             const newProject = await ProjectModel.create({
                 members: [
                     {
-                        userId: data.userId,
-                        role: 'admin',
+                        userId: data.members[0].userId,
+                        role: data.members[0].role,
                     }
                 ],
                 name: data.name,

package/dist/services/project.d.ts

@@ -8,7 +8,7 @@ export declare function updateProjectService(req: Request, authProvider: AuthPro
     success: boolean;
     project: import("../types").ProjectInfo;
 }>;
-export declare function deleteProjectService(req: Request, authProvider: AuthProvider, projectProvider: ProjectProvider): Promise<{
+export declare function deleteProjectService(projectId: string, projectProvider: ProjectProvider): Promise<{
     success: boolean;
 }>;
 export declare function deleteProjectImageService(req: Request, authProvider: AuthProvider, projectProvider: ProjectProvider): Promise<{

package/dist/services/project.js

@@ -12,8 +12,8 @@ async function createProjectService(req, authProvider, projectProvider) {
     }
     const newProject = await projectProvider.create({
         name,
-        userId: auth.userId,
         description: description || '',
+        members: [{ userId: auth.userId, role: "admin" }]
     });
     return {
         success: true,
@@ -37,16 +37,7 @@ async function updateProjectService(req, authProvider, projectProvider) {
         project: updatedProject,
     };
 }
-async function deleteProjectService(req, authProvider, projectProvider) {
-    const projectId = req.params.id;
-    const auth = await authProvider(req);
-    const project = await projectProvider.getById(projectId);
-    if (!project) {
-        throw new Error('Project not found');
-    }
-    if (auth.role !== "admin") {
-        throw new Error('Unauthorized');
-    }
+async function deleteProjectService(projectId, projectProvider) {
     await projectProvider.delete(projectId);
     return {
         success: true,

package/dist/types/index.d.ts

@@ -60,7 +60,10 @@ export interface ProjectProvider {
     create(data: {
         name: string;
         image?: string;
-        userId: string;
+        members: [{
+            userId: string;
+            role: string;
+        }];
         description?: string;
         allowUpload?: boolean;
         allowSharing?: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "streamby-core",
-  "version": "0.10.9",
+  "version": "0.10.11",
   "description": "StreamBy middleware framework for media storage management",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",