delete-domain route added (#267)

apps/web/src/server/public-api/api/domains/delete-domain.ts

@@ -0,0 +1,87 @@
+import { createRoute, z } from "@hono/zod-openapi";
+import { PublicAPIApp } from "../../hono";
+import { db } from "~/server/db";
+import { UnsendApiError } from "../../api-error";
+import { deleteDomain as deleteDomainService } from "~/server/service/domain-service";
+
+const route = createRoute({
+    method: "delete",
+    path: "/v1/domains/{id}",
+    request: {
+        params: z.object({
+            id: z.coerce.number().openapi({
+                param: {
+                    name: "id",
+                    in: "path",
+                },
+                example: 1,
+            }),
+        }),
+    },
+    responses: {
+        200: {
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        success: z.boolean(),
+                        message: z.string(),
+                    }),
+                },
+            },
+            description: "Domain deleted successfully",
+        },
+        403: {
+            "application/json": {
+                schema: z.object({
+                    error: z.string(),
+                }),
+            },
+            description: "Forbidden - API key doesn't have access",
+        },
+        404: {
+            content: {
+                "application/json": {
+                    schema: z.object({
+                        error: z.string(),
+                    }),
+                },
+            },
+            description: "Domain not found",
+        },
+    }
+})
+
+function deleteDomain(app: PublicAPIApp) {
+    app.openapi(route, async (c) => {
+        const team = c.var.team;
+        const domainId = c.req.valid("param").id;
+
+        // Enforce API key domain restriction
+        if (team.apiKey.domainId && team.apiKey.domainId !== domainId) {
+            throw new UnsendApiError({
+                code: "FORBIDDEN",
+                message: "API key doesn't have access to this domain",
+            });
+        }
+
+        const domain = await db.domain.findFirst({
+            where: {
+                id: domainId,
+                teamId: team.id
+            },
+        });
+
+        if (!domain) {
+            throw new UnsendApiError({
+                code: "NOT_FOUND",
+                message: "Domain not found",
+            });
+        }
+
+        const deletedDomain = await deleteDomainService(domainId);
+
+        return c.json(deletedDomain);
+    });
+}
+
+export default deleteDomain;

apps/web/src/server/public-api/index.ts

@@ -14,6 +14,7 @@ import createDomain from "./api/domains/create-domain";
 import deleteContact from "./api/contacts/delete-contact";
 import verifyDomain from "./api/domains/verify-domain";
 import getDomain from "./api/domains/get-domain";
+import deleteDomain from "./api/domains/delete-domain";
 import sendBatch from "./api/emails/batch-email";
 
 export const app = getApp();
@@ -23,6 +24,7 @@ getDomains(app);
 createDomain(app);
 verifyDomain(app);
 getDomain(app);
+deleteDomain(app);
 
 /**Email related APIs */
 getEmail(app);