| 107 | } |
| 108 | |
| 109 | export default async function handler( |
| 110 | request: NextApiRequest, |
| 111 | response: NextApiResponse |
| 112 | ) { |
| 113 | if (request.method === 'OPTIONS') { |
| 114 | return preflight(request, response, ['POST']); |
| 115 | } |
| 116 | cors(request, response); |
| 117 | const { communityId } = request.body; |
| 118 | const permissions = await Permissions.get({ |
| 119 | request, |
| 120 | response, |
| 121 | params: { communityId }, |
| 122 | }); |
| 123 | |
| 124 | if (request.method === 'POST') { |
| 125 | const { from, to } = request.body; |
| 126 | const { status, data } = await create({ |
| 127 | from, |
| 128 | to, |
| 129 | permissions, |
| 130 | communityId, |
| 131 | }); |
| 132 | return response.status(status).json(data || {}); |
| 133 | } |
| 134 | return response.status(405).json({}); |
| 135 | } |