Add collections

Author: Ategon

config/app.ts

@@ -150,7 +150,7 @@ export type AppConfig = z.infer<typeof appConfigSchema>;
 const resolvedPublicOrigin =
   typeof env.clientOrigin === "string" && env.clientOrigin.length > 0
     ? env.clientOrigin
-    : "http://localhost:3000";
+    : "https://d2jam.com";
 
 const defaultConfig: AppConfig = {
   appName: "Jamcore",
@@ -300,7 +300,7 @@ function getHostname(origin: string) {
   try {
     return new URL(origin).hostname;
   } catch {
-    return "localhost";
+    return "d2jam.com";
   }
 }
 

config/env.ts

@@ -57,6 +57,20 @@ const envSchema = z.object({
 
 const parsed = envSchema.parse(process.env);
 
+function isLoopbackOrigin(value: string | undefined) {
+  if (!value) return false;
+  try {
+    const hostname = new URL(value).hostname.toLowerCase();
+    return (
+      hostname === "localhost" ||
+      hostname === "127.0.0.1" ||
+      hostname === "::1"
+    );
+  } catch {
+    return false;
+  }
+}
+
 if (parsed.NODE_ENV === "production") {
   const missing = [
     !parsed.CLIENT_ORIGIN ? "CLIENT_ORIGIN" : null,
@@ -68,6 +82,17 @@ if (parsed.NODE_ENV === "production") {
       `Missing required production environment variables: ${missing.join(", ")}`,
     );
   }
+
+  const loopback = [
+    isLoopbackOrigin(parsed.CLIENT_ORIGIN) ? "CLIENT_ORIGIN" : null,
+    isLoopbackOrigin(parsed.FEDERATION_ORIGIN) ? "FEDERATION_ORIGIN" : null,
+  ].filter(Boolean);
+
+  if (loopback.length > 0) {
+    throw new Error(
+      `Production environment variables cannot use localhost or loopback origins: ${loopback.join(", ")}`,
+    );
+  }
 }
 
 export const env = {

features/collections/index.ts

@@ -21,8 +21,11 @@ export {
   listCollections,
   listCollectionsQuerySchema,
   removeCollectionItem,
+  resolveCollectionMusicMetadata,
   respondCollectionCollaboratorInvite,
   respondCollectionCollaboratorSchema,
   updateCollection,
+  updateCollectionItem,
+  updateCollectionItemSchema,
   updateCollectionSchema,
 } from "./service.js";

features/collections/router.ts

@@ -31,22 +31,29 @@ import {
   listCollections,
   listCollectionsQuerySchema,
   removeCollectionItem,
+  resolveCollectionMusicMetadata,
   respondCollectionCollaboratorInvite,
   respondCollectionCollaboratorSchema,
   updateCollection,
+  updateCollectionItem,
+  updateCollectionItemSchema,
   updateCollectionSchema,
 } from "./index.js";
 
 const collectionParamsSchema = z.object({
   collectionId: z.string().trim().min(1),
 });
 
-  const collectionItemParamsSchema = collectionParamsSchema.extend({
-  itemId: z.string().trim().min(1),
+const collectionItemParamsSchema = collectionParamsSchema.extend({
+  itemId: z.coerce.number().int().positive(),
 });
 
 const collectionCommentParamsSchema = collectionParamsSchema.extend({
-  commentId: z.string().trim().min(1),
+  commentId: z.coerce.number().int().positive(),
+});
+
+const metadataQuerySchema = z.object({
+  url: z.string().trim().url(),
 });
 
 export function createCollectionsRouter() {
@@ -97,6 +104,16 @@ export function createCollectionsRouter() {
     }),
   );
 
+  router.get(
+    "/metadata",
+    authUserOptional,
+    getUserOptional,
+    asyncHandler(async (req, res) => {
+      const { url } = parseQuery(req, metadataQuerySchema);
+      res.json(await resolveCollectionMusicMetadata({ url }));
+    }),
+  );
+
   router.get(
     "/:collectionId",
     authUserOptional,
@@ -313,5 +330,22 @@ export function createCollectionsRouter() {
     }),
   );
 
+  router.put(
+    "/:collectionId/items/:itemId",
+    authUser,
+    getUser,
+    asyncHandler(async (req, res) => {
+      const { collectionId, itemId } = parseParams(req, collectionItemParamsSchema);
+      const input = parseBody(req, updateCollectionItemSchema);
+      const result = await updateCollectionItem({
+        collectionId,
+        itemId,
+        actor: requireRequestUser(res),
+        input,
+      });
+      res.json(result);
+    }),
+  );
+
   return router;
 }