aboutsummaryrefslogtreecommitdiffstats
path: root/apps/web/app/api/assets/[assetId]/route.ts
diff options
context:
space:
mode:
Diffstat (limited to 'apps/web/app/api/assets/[assetId]/route.ts')
-rw-r--r--apps/web/app/api/assets/[assetId]/route.ts11
1 files changed, 11 insertions, 0 deletions
diff --git a/apps/web/app/api/assets/[assetId]/route.ts b/apps/web/app/api/assets/[assetId]/route.ts
index f3cf1ab4..73237d8d 100644
--- a/apps/web/app/api/assets/[assetId]/route.ts
+++ b/apps/web/app/api/assets/[assetId]/route.ts
@@ -1,5 +1,7 @@
import { createContextFromRequest } from "@/server/api/client";
+import { and, eq } from "drizzle-orm";
+import { assets } from "@hoarder/db/schema";
import { readAsset } from "@hoarder/shared/assetdb";
export const dynamic = "force-dynamic";
@@ -11,6 +13,15 @@ export async function GET(
if (!ctx.user) {
return Response.json({ error: "Unauthorized" }, { status: 401 });
}
+
+ const assetDb = await ctx.db.query.assets.findFirst({
+ where: and(eq(assets.id, params.assetId), eq(assets.userId, ctx.user.id)),
+ });
+
+ if (!assetDb) {
+ return Response.json({ error: "Asset not found" }, { status: 404 });
+ }
+
const { asset, metadata } = await readAsset({
userId: ctx.user.id,
assetId: params.assetId,