From 48a3dd770a78010696422708999ecf2700ee0d4e Mon Sep 17 00:00:00 2001
From: Kieran Klukas <92754843+kcoderhtml@users.noreply.github.com>
Date: Mon, 22 Apr 2024 12:18:35 -0400
Subject: [PATCH 1/6] Refactor import statement in users.astro to remove unused
 Organization import

---
 src/pages/users.astro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/pages/users.astro b/src/pages/users.astro
index 2953ac8..77c69c0 100644
--- a/src/pages/users.astro
+++ b/src/pages/users.astro
@@ -44,7 +44,7 @@ if (!session) {
 	});
 }
 
-import { db, User, Organization } from "astro:db";
+import { db, User } from "astro:db";
 import { like } from "astro:db";
 
 let error = null;

From 040d8db2e1befeb0f8fccad5bd0110cad2faf362 Mon Sep 17 00:00:00 2001
From: Kieran Klukas <92754843+kcoderhtml@users.noreply.github.com>
Date: Mon, 22 Apr 2024 12:33:00 -0400
Subject: [PATCH 2/6] feat: add settings page with form to update team name

---
 src/pages/settings.astro | 119 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 119 insertions(+)
 create mode 100644 src/pages/settings.astro

diff --git a/src/pages/settings.astro b/src/pages/settings.astro
new file mode 100644
index 0000000..c3f7598
--- /dev/null
+++ b/src/pages/settings.astro
@@ -0,0 +1,119 @@
+---
+import Base from "../Layouts/Base.astro";
+import AuthContainer from "../components/AuthContainer.astro";
+
+import { getSession } from "auth-astro/server";
+import { type Session } from "@auth/core/types";
+
+type ExtendedSession = {
+	team: string;
+	teamName: string;
+	teamImage: string;
+	user: {
+		role: string;
+	};
+};
+
+const session = (await getSession(Astro.request)) as Session & ExtendedSession;
+let error = "";
+
+if (Astro.request.method === "POST") {
+	const data = await Astro.request.formData();
+	if (data.has("updateName") && session.user.role === "admin") {
+		const name = data.get("name") as string;
+		await db
+			.update(Organization)
+			.set({ name })
+			.where(like(Organization.team, session.team));
+	} else {
+		error =
+			"You do not have the necessary permissions to update the team name.";
+	}
+}
+
+import { db, like, Organization } from "astro:db";
+const team = (
+	await db
+		.select()
+		.from(Organization)
+		.where(like(Organization.team, session.team))
+)[0];
+---
+
+<Base title="Settings">
+	<section>
+		<AuthContainer />
+	</section>
+
+	{
+		error && (
+			<section>
+				<h3 class="warning">Error: {error}</h3>
+			</section>
+		)
+	}
+
+	<section>
+		<div class="settings-container">
+			<form method="post">
+				<input
+					type="text"
+					name="name"
+					value={team.name}
+					data-value={team.name}
+				/>
+
+				<button type="submit" name="updateName" disabled
+					>Update Team Name</button
+				>
+
+				<label for="update"
+					>This will update your team name. This <b>will not</b> update your slack
+					workspace name.</label
+				>
+			</form>
+		</div>
+
+		<style>
+			form {
+				background: transparent;
+				display: flex;
+				flex-direction: column;
+			}
+
+			.settings-container {
+				display: flex;
+				flex-direction: column;
+				align-items: center;
+			}
+		</style>
+	</section>
+</Base>
+
+<script>
+	document.querySelectorAll("[data-value]").forEach((e) => {
+		console.log(e);
+		e.addEventListener("input", () => {
+			const form = e.closest("form");
+			const button = form?.querySelector("button");
+
+			console.log(e, form, button);
+
+			console.log(
+				(e as HTMLInputElement).value,
+				(e as HTMLInputElement).dataset.value
+			);
+
+			if (button) {
+				if (
+					(e as HTMLInputElement).value !==
+					(e as HTMLInputElement).dataset.value
+				) {
+					button.disabled = false;
+				} else {
+					button.disabled = true;
+				}
+			}
+		});
+	});
+</script>

From 846efef87726462840b9552e58d59a83e5d7f5eb Mon Sep 17 00:00:00 2001
From: Kieran Klukas <92754843+kcoderhtml@users.noreply.github.com>
Date: Mon, 22 Apr 2024 12:36:45 -0400
Subject: [PATCH 3/6] feat: Add functionality to delete team in settings page

---
 src/pages/settings.astro | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/pages/settings.astro b/src/pages/settings.astro
index c3f7598..b903df0 100644
--- a/src/pages/settings.astro
+++ b/src/pages/settings.astro
@@ -29,6 +29,12 @@ if (Astro.request.method === "POST") {
 		error =
 			"You do not have the necessary permissions to update the team name.";
 	}
+
+	if (data.has("delete") && session.user.role === "admin") {
+		await db.delete(Organization).where(like(Organization.team, session.team));
+	} else {
+		error = "You do not have the necessary permissions to delete the team.";
+	}
 }
 
 import { db, like, Organization } from "astro:db";
@@ -55,6 +61,15 @@ const team = (
 
 	<section>
 		<div class="settings-container">
+			<form method="post">
+				<button type="submit" name="delete">Delete Team</button>
+				<label for="delete"
+					>This will delete your team, events, settings, and team members. This <b
+						>will not</b
+					> however do anything to your slack workspace.</label
+				>
+			</form>
+
 			<form method="post">
 				<input
 					type="text"

From 532f9511f8eedd58df8fc230a6550ae98feee82f Mon Sep 17 00:00:00 2001
From: Kieran Klukas <92754843+kcoderhtml@users.noreply.github.com>
Date: Mon, 22 Apr 2024 12:37:21 -0400
Subject: [PATCH 4/6] chore: add error and moved styling

---
 src/pages/settings.astro | 51 +++++++++++++++++++++++-----------------
 1 file changed, 29 insertions(+), 22 deletions(-)

diff --git a/src/pages/settings.astro b/src/pages/settings.astro
index b903df0..62bc039 100644
--- a/src/pages/settings.astro
+++ b/src/pages/settings.astro
@@ -51,15 +51,15 @@ const team = (
 		<AuthContainer />
 	</section>
 
-	{
-		error && (
-			<section>
-				<h3 class="warning">Error: {error}</h3>
-			</section>
-		)
-	}
-
 	<section>
+		{
+			error && (
+				<section>
+					<h3 class="warning">Error: {error}</h3>
+				</section>
+			)
+		}
+
 		<div class="settings-container">
 			<form method="post">
 				<button type="submit" name="delete">Delete Team</button>
@@ -88,23 +88,30 @@ const team = (
 				>
 			</form>
 		</div>
-
-		<style>
-			form {
-				background: transparent;
-				display: flex;
-				flex-direction: column;
-			}
-
-			.settings-container {
-				display: flex;
-				flex-direction: column;
-				align-items: center;
-			}
-		</style>
 	</section>
 </Base>
 
+<style>
+	form {
+		background: transparent;
+		display: flex;
+		flex-direction: column;
+	}
+
+	.settings-container {
+		display: flex;
+		flex-direction: column;
+		align-items: center;
+	}
+
+	.warning {
+		color: red;
+		text-align: center;
+		margin: 0;
+		padding: 0;
+	}
+</style>
+
 <script>
 	document.querySelectorAll("[data-value]").forEach((e) => {
 		console.log(e);

From 8512f9fbd90244e3b29cf15838d61664f530c0ba Mon Sep 17 00:00:00 2001
From: Kieran Klukas <92754843+kcoderhtml@users.noreply.github.com>
Date: Mon, 22 Apr 2024 12:39:13 -0400
Subject: [PATCH 5/6] feat: add authentication and authorization logic in
 settings.astro

---
 src/pages/settings.astro | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/src/pages/settings.astro b/src/pages/settings.astro
index 62bc039..9dc2032 100644
--- a/src/pages/settings.astro
+++ b/src/pages/settings.astro
@@ -15,6 +15,33 @@ type ExtendedSession = {
 };
 
 const session = (await getSession(Astro.request)) as Session & ExtendedSession;
+if (!session) {
+	const error = "authentication_error";
+	const errorDescription = "User session not found or expired. Please log in.";
+	const queryParams = new URLSearchParams({ error, errorDescription });
+	const redirectUrl = `/error?${queryParams.toString()}`;
+
+	return new Response(null, {
+		status: 302,
+		headers: new Headers({
+			Location: redirectUrl,
+		}),
+	});
+} else if (session.user.role === "guest") {
+	const error = "authorization_error";
+	const errorDescription =
+		"User does not have the necessary permissions to access this page. Please log in with an authorized account. If you believe this is an error, please contact your administrator.";
+	const queryParams = new URLSearchParams({ error, errorDescription });
+	const redirectUrl = `/error?${queryParams.toString()}`;
+
+	return new Response(null, {
+		status: 302,
+		headers: new Headers({
+			Location: redirectUrl,
+		}),
+	});
+}
+
 let error = "";
 
 if (Astro.request.method === "POST") {

From 68907639d442fb0e911c14ff7b0dc4814b122ba2 Mon Sep 17 00:00:00 2001
From: Kieran Klukas <92754843+kcoderhtml@users.noreply.github.com>
Date: Mon, 22 Apr 2024 12:49:16 -0400
Subject: [PATCH 6/6] fix: team deletion not deleting users and events

---
 src/pages/settings.astro | 12 +++++++++++-
 src/pages/signout.astro  | 39 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 50 insertions(+), 1 deletion(-)
 create mode 100644 src/pages/signout.astro

diff --git a/src/pages/settings.astro b/src/pages/settings.astro
index 9dc2032..73a5def 100644
--- a/src/pages/settings.astro
+++ b/src/pages/settings.astro
@@ -44,6 +44,8 @@ if (!session) {
 
 let error = "";
 
+import { db, like, Organization, Event, User } from "astro:db";
+
 if (Astro.request.method === "POST") {
 	const data = await Astro.request.formData();
 	if (data.has("updateName") && session.user.role === "admin") {
@@ -59,12 +61,20 @@ if (Astro.request.method === "POST") {
 
 	if (data.has("delete") && session.user.role === "admin") {
 		await db.delete(Organization).where(like(Organization.team, session.team));
+		await db.delete(Event).where(like(Event.team, session.team));
+		await db.delete(User).where(like(User.team, session.team));
+
+		return new Response(null, {
+			status: 302,
+			headers: new Headers({
+				Location: "/signout",
+			}),
+		});
 	} else {
 		error = "You do not have the necessary permissions to delete the team.";
 	}
 }
 
-import { db, like, Organization } from "astro:db";
 const team = (
 	await db
 		.select()
diff --git a/src/pages/signout.astro b/src/pages/signout.astro
new file mode 100644
index 0000000..0ee3b8e
--- /dev/null
+++ b/src/pages/signout.astro
@@ -0,0 +1,39 @@
+---
+import Base from "../Layouts/Base.astro";
+
+import { getSession } from "auth-astro/server";
+import { type Session } from "@auth/core/types";
+
+type ExtendedSession = {
+	team: string;
+	teamName: string;
+	teamImage: string;
+	user: {
+		role: string;
+	};
+};
+
+const session = (await getSession(Astro.request)) as Session & ExtendedSession;
+
+if (!session) {
+	return new Response(null, {
+		status: 302,
+		headers: new Headers({
+			Location: "/",
+		}),
+	});
+}
+---
+
+<Base title="Sign Out">
+	<div class="flex items-center justify-center h-screen">
+		<div class="text-center">
+			<h1 class="text-3xl font-bold">Signing out...</h1>
+		</div>
+	</div>
+</Base>
+
+<script>
+	import { signOut } from "auth-astro/client";
+	await signOut();
+</script>