feat(servers): role and permission routes

src/routes/servers/invites_fetch.rs

@@ -1,8 +1,9 @@
-use revolt_quark::{Error, Result};
+use revolt_quark::{
+    models::{Invite, User},
+    perms, Db, Error, Ref, Result, ServerPermission,
+};
 
-use futures::StreamExt;
-use mongodb::bson::{doc, from_document};
-use rocket::serde::json::Value;
+use rocket::serde::json::Json;
 use serde::{Deserialize, Serialize};
 
 #[derive(Serialize, Deserialize, Debug, Clone)]
@@ -14,6 +15,18 @@ pub struct ServerInvite {
 }
 
 #[get("/<target>/invites")]
-pub async fn req(/*user: UserRef, target: Ref*/ target: String) -> Result<Value> {
-    todo!()
+pub async fn req(db: &Db, user: User, target: Ref) -> Result<Json<Vec<Invite>>> {
+    let server = target.as_server(db).await?;
+    if !perms(&user)
+        .server(&server)
+        .calc_server(db)
+        .await
+        .get_manage_server()
+    {
+        return Err(Error::MissingPermission {
+            permission: ServerPermission::ManageServer as i32,
+        });
+    }
+
+    db.fetch_invites_for_server(&server.id).await.map(Json)
 }