Merge pull request #147 from josefaidt/chore/admin-command-api-routes

chore(app): command API routes to only be callable by admins

package.json

@@ -93,7 +93,7 @@
       "sourceType": "module"
     },
     "env": {
-      "browser": false,
+      "browser": true,
       "node": true
     },
     "plugins": [

src/lib/Command.svelte

@@ -42,11 +42,11 @@
 
   const id = registration?.id
 
-  async function onDeleteCommand(event) {
+  async function onDeleteCommand() {
     deleteCommandStep = DELETE_STEP_DELETING
     let data
     try {
-      const response = await fetch(`/api/commands/delete/${id}`, {
+      const response = await fetch(`/api/admin/commands/delete/${id}`, {
         method: 'DELETE',
         body: JSON.stringify({ id }),
       })

src/routes/admin/index.svelte

@@ -1,4 +1,4 @@
-<script>
+<script lang="ts">
   import { Content, Grid, Row, Column, Button } from 'carbon-components-svelte'
   import * as store from '$lib/store'
   import Command from '$lib/Command.svelte'
@@ -10,7 +10,9 @@
     isSyncing = true
     let data
     try {
-      const response = await fetch('/api/commands/sync', { method: 'POST' })
+      const response = await fetch('/api/admin/commands/sync', {
+        method: 'POST',
+      })
       if (response.ok && response.status === 200) {
         data = await response.json()
       }

src/routes/api/commands/delete/[id].ts → src/routes/api/admin/commands/delete/[id].ts

@@ -1,7 +1,7 @@
 import { commands } from '$discord/client'
 
 /** @type {import('@sveltejs/kit').RequestHandler} */
-export async function del({ request, params }) {
+export async function del({ request }) {
   const body = await request.json()
   const unregistered = await commands.unregister(body.id)