From 6ff69692e45e3447c74138561f7925caace50ae3 Mon Sep 17 00:00:00 2001 From: multipleof4 Date: Fri, 10 Oct 2025 10:40:34 -0700 Subject: [PATCH] Feat: Add API endpoint for updating links --- functions/api/links/update.js | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 functions/api/links/update.js diff --git a/functions/api/links/update.js b/functions/api/links/update.js new file mode 100644 index 0000000..aaa7b0d --- /dev/null +++ b/functions/api/links/update.js @@ -0,0 +1,27 @@ +export async function onRequestPost({ request, env }) { + try { + const { 'g-recaptcha-response': token, ...body } = await request.json(); + const vR = await fetch("https://www.google.com/recaptcha/api/siteverify", { method: "POST", headers: { "Content-Type": "application/x-www-form-urlencoded" }, body: `secret=${env.RECAPCHA_KEY}&response=${token}` }); + if (!(await vR.json()).success) return new Response("CAPTCHA verification failed.", { status: 403 }); + + const { slug, destination_url, username, pass_hash } = body; + if (!slug || !destination_url || !username || !pass_hash) return new Response("Missing fields", { status: 400 }); + + const user = await env.D1_EV.prepare("SELECT pass_hash, custom_slugs FROM users WHERE username = ?").bind(username).first(); + if (user?.pass_hash !== pass_hash) return new Response("Invalid credentials", { status: 401 }); + + let slugs = []; + try { slugs = JSON.parse(user.custom_slugs) } catch {} + if (!Array.isArray(slugs) || !slugs.includes(slug)) return new Response("Permission denied to edit this slug.", { status: 403 }); + + let url = destination_url.startsWith("http") ? destination_url : `https://${destination_url}`; + try { new URL(url) } catch { return new Response("Invalid destination URL", { status: 400 }) } + + const dest_no_proto = url.replace(/^https?:\/\//, ""); + await env.KV_EV.put(slug, dest_no_proto); + + return Response.json({ success: true, slug, destination: dest_no_proto }); + } catch (e) { + return new Response(e.message, { status: 500 }); + } +}