feat(campaign): add password verification for "sendCampaignAnnouncement"

thematters · Oct 22, 2024 · c0cfa50 · c0cfa50
1 parent d98ca56
commit c0cfa50
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 2 deletions.
diff --git a/schema.graphql b/schema.graphql
@@ -924,6 +924,7 @@ input SendCampaignAnnouncementInput {
   campaign: ID!
   announcement: [TranslationInput!]!
   link: String!
+  password: String!
 }
 
 input CampaignStageInput {

diff --git a/src/definitions/schema.d.ts b/src/definitions/schema.d.ts
@@ -3289,6 +3289,7 @@ export type GQLSendCampaignAnnouncementInput = {
   announcement: Array<GQLTranslationInput>
   campaign: Scalars['ID']['input']
   link: Scalars['String']['input']
+  password: Scalars['String']['input']
 }
 
 export type GQLSendVerificationCodeInput = {

diff --git a/src/mutations/campaign/sendCampaignAnnouncement.ts b/src/mutations/campaign/sendCampaignAnnouncement.ts
@@ -10,13 +10,20 @@ import { fromGlobalId } from 'common/utils'
 
 const resolver: GQLMutationResolvers['sendCampaignAnnouncement'] = async (
   _,
-  { input: { campaign: campaignGlobalId, announcement, link } },
-  { viewer, dataSources: { atomService, notificationService } }
+  { input: { campaign: campaignGlobalId, announcement, link, password } },
+  { viewer, dataSources: { userService, atomService, notificationService } }
 ) => {
   if (!viewer.id) {
     throw new AuthenticationError('visitor has no permission')
   }
 
+  // validate password
+  if (!password) {
+    throw new UserInputError('`password` is required')
+  } else {
+    await userService.verifyPassword({ password, hash: viewer.passwordHash })
+  }
+
   // validate campaign
   const { type: campaignType, id: campaignId } = fromGlobalId(campaignGlobalId)
 

diff --git a/src/types/campaign.ts b/src/types/campaign.ts
@@ -57,6 +57,7 @@ export default /* GraphQL */ `
     campaign: ID!
     announcement: [TranslationInput!]!
     link: String! @constraint(format: "uri")
+    password: String! # admin verification
   }
 
   input CampaignStageInput {