Thêm tính năng pending khi một thành viên thêm một người khác vào

2026-06-14 20:22:37 +07:00
parent 914a9cf243
commit 8ff09eeeaf
24 changed files with 945 additions and 129 deletions
@@ -1,6 +1,6 @@
 import 'reflect-metadata';
 import { NestFactory } from '@nestjs/core';
-import { Module, Controller, Get, Post, Body, Param, Patch, Delete, ParseUUIDPipe, NotFoundException, BadRequestException, UnauthorizedException, UseGuards, Req, Query } from '@nestjs/common';
+import { Module, Controller, Get, Post, Body, Param, Patch, Delete, ParseUUIDPipe, NotFoundException, BadRequestException, UnauthorizedException, UseGuards, Req, Query, ForbiddenException } from '@nestjs/common';
 import { PrismaService } from './prisma.service.js';
 import 'dotenv/config';
 import * as bcrypt from 'bcrypt';
@@ -101,6 +101,11 @@ class TourController {
            note: 'Chặng khởi đầu'
          }
        }
+      },
+      include: {
+        participants: {
+          include: { user: { select: { id: true, name: true, email: true } } }
+        }
      }
    });
  }
@@ -372,6 +377,24 @@ class TourController {
        include: { user: { select: { id: true, name: true, email: true } } },
      });
    }
+
+    const currentRole = req.user.tourParticipation?.role;
+    if (!currentRole || !(currentRole === 'OWNER' || currentRole === 'MANAGER')) {
+      const joinRequest = await this.prisma.joinRequest.create({
+        data: {
+          tourId,
+          userId: body.userId,
+          requestedById: req.user.id,
+          status: 'PENDING',
+        },
+        include: {
+          user: { select: { id: true, name: true, email: true } },
+          requestedBy: { select: { id: true, name: true, email: true } },
+        },
+      });
+      return { ...joinRequest, pendingApproval: true };
+    }
+
    return this.prisma.tourParticipant.create({
      data: {
        tourId,
@@ -382,6 +405,128 @@ class TourController {
    });
  }

+  @UseGuards(JwtAuthGuard, TourRoleGuard)
+  @Get(':tourId/join-requests')
+  async getJoinRequests(@Param('tourId', ParseUUIDPipe) tourId: string, @Req() req: any) {
+    const requests = await this.prisma.joinRequest.findMany({
+      where: { tourId, status: 'PENDING' },
+      orderBy: { createdAt: 'desc' },
+      include: {
+        user: { select: { id: true, name: true, email: true } },
+        requestedBy: { select: { id: true, name: true, email: true } },
+      },
+    });
+
+    return requests;
+  }
+
+  @UseGuards(JwtAuthGuard, TourRoleGuard)
+  @Post(':tourId/join-requests')
+  async createJoinRequest(@Param('tourId', ParseUUIDPipe) tourId: string, @Body() body: { userId?: string }, @Req() req: any) {
+    const requestingUserId = body.userId || req.user.id;
+
+    const existingParticipation = await this.prisma.tourParticipant.findUnique({
+      where: { tourId_userId: { tourId, userId: requestingUserId } },
+    });
+    if (existingParticipation) {
+      throw new BadRequestException('Người dùng này đã là thành viên của tour.');
+    }
+
+    const pendingRequest = await this.prisma.joinRequest.findFirst({
+      where: { tourId, userId: requestingUserId, status: 'PENDING' },
+    });
+    if (pendingRequest) {
+      return pendingRequest;
+    }
+
+    const joinRequest = await this.prisma.joinRequest.create({
+      data: {
+        tourId,
+        userId: requestingUserId,
+        requestedById: req.user.id,
+        status: 'PENDING',
+      },
+      include: {
+        user: { select: { id: true, name: true, email: true } },
+        requestedBy: { select: { id: true, name: true, email: true } },
+      },
+    });
+
+    return joinRequest;
+  }
+
+  @UseGuards(JwtAuthGuard, TourRoleGuard)
+  @Post(':tourId/join-requests/:requestId/accept')
+  async acceptJoinRequest(@Param('tourId', ParseUUIDPipe) tourId: string, @Param('requestId') requestId: string, @Req() req: any) {
+    const role = req.user.tourParticipation?.role;
+    if (!role || !(role === 'OWNER' || role === 'MANAGER')) {
+      throw new ForbiddenException('Bạn không có quyền chấp nhận yêu cầu tham gia.');
+    }
+
+    const joinRequest = await this.prisma.joinRequest.findUnique({
+      where: { id: requestId },
+    });
+    if (!joinRequest || joinRequest.tourId !== tourId) {
+      throw new NotFoundException('Không tìm thấy yêu cầu tham gia.');
+    }
+    if (joinRequest.status !== 'PENDING') {
+      throw new BadRequestException('Yêu cầu này đã được xử lý trước đó.');
+    }
+
+    const existing = await this.prisma.tourParticipant.findUnique({
+      where: { tourId_userId: { tourId, userId: joinRequest.userId } },
+    });
+    if (existing) {
+      await this.prisma.joinRequest.update({
+        where: { id: requestId },
+        data: { status: 'REJECTED' },
+      });
+      return { success: true, message: 'Người dùng đã là thành viên, yêu cầu đã bị từ chối.' };
+    }
+
+    await this.prisma.$transaction([
+      this.prisma.tourParticipant.create({
+        data: {
+          tourId,
+          userId: joinRequest.userId,
+          role: 'MEMBER',
+        },
+      }),
+      this.prisma.joinRequest.update({
+        where: { id: requestId },
+        data: { status: 'ACCEPTED' },
+      }),
+    ]);
+
+    return { success: true, message: 'Đã chấp nhận yêu cầu tham gia.' };
+  }
+
+  @UseGuards(JwtAuthGuard, TourRoleGuard)
+  @Post(':tourId/join-requests/:requestId/reject')
+  async rejectJoinRequest(@Param('tourId', ParseUUIDPipe) tourId: string, @Param('requestId') requestId: string, @Req() req: any) {
+    const role = req.user.tourParticipation?.role;
+    if (!role || !(role === 'OWNER' || role === 'MANAGER')) {
+      throw new ForbiddenException('Bạn không có quyền từ chối yêu cầu tham gia.');
+    }
+
+    const joinRequest = await this.prisma.joinRequest.findUnique({
+      where: { id: requestId },
+    });
+    if (!joinRequest || joinRequest.tourId !== tourId) {
+      throw new NotFoundException('Không tìm thấy yêu cầu tham gia.');
+    }
+    if (joinRequest.status !== 'PENDING') {
+      throw new BadRequestException('Yêu cầu này đã được xử lý trước đó.');
+    }
+
+    await this.prisma.joinRequest.update({
+      where: { id: requestId },
+      data: { status: 'REJECTED' },
+    });
+
+    return { success: true, message: 'Đã từ chối yêu cầu tham gia.' };
+  }
+
  @UseGuards(JwtAuthGuard, TourRoleGuard)
  @Delete(':tourId/members/:userId')
  async removeMember(@Param('tourId', ParseUUIDPipe) tourId: string, @Param('userId', ParseUUIDPipe) userId: string) {