feat: add add new config strategy to frontend

backend/src/auth/guard/isAdmin.guard.ts

@@ -5,6 +5,7 @@ import { User } from "@prisma/client";
 export class AdministratorGuard implements CanActivate {
   canActivate(context: ExecutionContext): boolean {
     const { user }: { user: User } = context.switchToHttp().getRequest();
+    if (!user) return false;
     return user.isAdministrator;
   }
 }

backend/src/config/config.controller.ts

@@ -1,6 +1,9 @@
-import { Controller, Get } from "@nestjs/common";
+import { Body, Controller, Get, Param, Patch, UseGuards } from "@nestjs/common";
+import { AdministratorGuard } from "src/auth/guard/isAdmin.guard";
 import { ConfigService } from "./config.service";
+import { AdminConfigDTO } from "./dto/adminConfig.dto";
 import { ConfigDTO } from "./dto/config.dto";
+import UpdateConfigDTO from "./dto/updateConfig.dto";
 
 @Controller("configs")
 export class ConfigController {
@@ -8,11 +11,22 @@ export class ConfigController {
 
   @Get()
   async list() {
-    return new ConfigDTO().fromList(await this.configService.list())
+    return new ConfigDTO().fromList(await this.configService.list());
   }
 
   @Get("admin")
+  @UseGuards(AdministratorGuard)
   async listForAdmin() {
-    return await this.configService.listForAdmin();
+    return new AdminConfigDTO().fromList(
+      await this.configService.listForAdmin()
+    );
+  }
+
+  @Patch("admin/:key")
+  @UseGuards(AdministratorGuard)
+  async update(@Param("key") key: string, @Body() data: UpdateConfigDTO) {
+    return new AdminConfigDTO().from(
+      await this.configService.update(key, data.value)
+    );
   }
 }

backend/src/config/config.service.ts

@@ -1,4 +1,9 @@
-import { Inject, Injectable } from "@nestjs/common";
+import {
+  BadRequestException,
+  Inject,
+  Injectable,
+  NotFoundException,
+} from "@nestjs/common";
 import { Config } from "@prisma/client";
 import { PrismaService } from "src/prisma/prisma.service";
 
@@ -38,4 +43,23 @@ export class ConfigService {
       return configVariable;
     });
   }
+
+  async update(key: string, value: string | number | boolean) {
+    const configVariable = await this.prisma.config.findUnique({
+      where: { key },
+    });
+
+    if (!configVariable || configVariable.locked)
+      throw new NotFoundException("Config variable not found");
+
+    if (typeof value != configVariable.type)
+      throw new BadRequestException(
+        `Config variable must be of type ${configVariable.type}`
+      );
+
+    return await this.prisma.config.update({
+      where: { key },
+      data: { value: value.toString() },
+    });
+  }
 }

backend/src/config/dto/adminConfig.dto.ts

@@ -0,0 +1,23 @@
+import { Expose, plainToClass } from "class-transformer";
+import { ConfigDTO } from "./config.dto";
+
+export class AdminConfigDTO extends ConfigDTO {
+  @Expose()
+  default: string;
+
+  @Expose()
+  secret: boolean;
+
+  @Expose()
+  updatedAt: Date;
+
+  from(partial: Partial<AdminConfigDTO>) {
+    return plainToClass(AdminConfigDTO, partial, { excludeExtraneousValues: true });
+  }
+
+  fromList(partial: Partial<AdminConfigDTO>[]) {
+    return partial.map((part) =>
+      plainToClass(AdminConfigDTO, part, { excludeExtraneousValues: true })
+    );
+  }
+}

backend/src/config/dto/updateConfig.dto.ts

@@ -0,0 +1,8 @@
+import { IsNotEmpty } from "class-validator";
+
+class UpdateConfigDTO {
+  @IsNotEmpty()
+  value: string | number | boolean;
+}
+
+export default UpdateConfigDTO;