Commit Graph
354 Commits
Author SHA1 Message Date
Alex van Andel 4c02bb960b Remove sessionGetter as it's deprecated (#265)
Fixes API build, error introduced in
https://github.com/calcom/cal.com/pull/8419
2023-05-12 00:22:24 +02:00
Alex van Andel b6c3dce692 Fix with upstream (#263) 2023-05-05 16:33:24 +02:00
Alex van Andel 9490b65775 Fix type error by no longer initialData the user 2023-04-23 18:57:21 +02:00
Alex van Andel 02094904be Patch vulnerability that allowed self-promotion 2023-04-23 18:43:23 +02:00
Syed Ali Shahbaz 38987b77bb Swagger/schedules request and response examples (#257)
This PR adds request body and response body examples to swagger in
/schedules endpoint
Added for:
- [x] `/schedules/_post`
- [x] `/schedules/_get`
- [x] `/schedules/[id]/_get`
- [x] `/schedules/[id]/_post`
- [x] `/schedules/[id]/_patch`
2023-04-19 12:22:07 -07:00
Syed Ali Shahbaz d5db1e4171 Swagger/booking req resp body (#256) 2023-04-19 12:58:05 +02:00
Syed Ali Shahbaz fab5eb948c Update /booking _post.ts to have eventTypeId as required (#254)
Update` /booking` `_post.ts` to have 
- eventTypeId as a required field
- example for request body
- Updated schema that represents actual usage
2023-04-12 17:16:19 +02:00
Syed Ali Shahbaz 386ad87e64 Event type swagger update for location type (#252)
Updates Location Type documentation in swagger for event type _post and
_patch
2023-03-21 10:32:48 -07:00
Nafees NazikandHariom Balhara 945ab355a5 feat: return cal link in event-types query (#244)
Co-authored-by: Hariom Balhara <hariombalhara@gmail.com>
2023-03-17 13:57:18 +05:30
Alex van Andel cb54ab670e Added 'hosts' to POST call, PATCH needs a db migration on web (#239)
Complete, but bit of a WIP due to _patch
2023-03-15 16:43:00 -07:00
Alex van Andel cb08bba351 Add GET /teams/{id}/event-types endpoint (#251)
Allows fetching team event types - GET /event-types only lists the user
event types - currently fetching the team event types isn't possible.
2023-03-13 12:24:10 +00:00
Syed Ali Shahbaz 870b2df538 hotfixes swagger delete path (#250)
a quick hotfix 🙏
2023-03-13 09:57:00 +00:00
zomars 464c283e0c Reverts oopsie 2023-03-10 12:01:46 -07:00
Syed Ali Shahbaz 4e24b6f7c0 Swagger/multiple fixes (#248)
This PR adds

- Swagger fixes for Teams endpoint
- Removes unintended remnant from custom input
- Swagger fixes for Payments endpoint
2023-03-10 22:34:14 +05:30
Syed Ali Shahbaz 8fc4eedf5f Adds swagger for schedules (#247)
This PR updates swagger documentation for the Schedules endpoint
2023-03-10 22:33:41 +05:30
Syed Ali Shahbaz 2da8784865 swagger docs update for selected calendars (#246)
Adds swagger doc update for selected calendars API endpoint
2023-03-10 22:33:27 +05:30
Syed Ali Shahbaz ccf93190d7 Swagger docs for webhooks (#245)
This PR updates and adds to the swagger documentation for /webhooks
endpoint
2023-03-10 22:33:09 +05:30
Syed Ali Shahbaz e54e1aa72e Updates Availability and Attendees swagger docs, hotfixes Booking API doc (#241)
- Adds swagger definition and swagger fixes to /availability and
/attendees
- Also fixes Booking API endpoint definition (startTime -> start,
endTime -> end)
2023-03-10 19:29:24 +05:30
Syed Ali Shahbaz d47fa578b7 Fixes _patch swagger paramters 2023-02-23 20:46:55 +05:30
Syed Ali Shahbaz a4f82fa6fa Adds swagger definition to Event Types (#242)
This PR adds swagger definition to Event Types endpoint with request
body examples for POST and PATCH requests
2023-02-23 13:54:10 +01:00
zomars 42eb7041d4 New linting rules 2023-02-16 14:01:40 -07:00
f02cfc9990 Swagger definition general fixes (#237)
This PR addresses definition errors currently residing within our
swagger doc.
 
~DISCLAIMER: There is still an error for our DELETE booking call, as
open API standard doesn't expect the DELETE call to contain a request
body, but we are requiring it in the way it currently works. Perhaps we
should move those to Query Parameters instead. Thoughts @zomars @emrysal
?~

It was taken care of by @leog and the docs are now updated as per the
endpoint

<img width="247" alt="image"
src="https://user-images.githubusercontent.com/52925846/217799706-21b7c21d-696b-4e20-a682-c8a949694b61.png">
<img width="629" alt="image"
src="https://user-images.githubusercontent.com/52925846/217799842-c903c23a-0b0d-4208-a3e9-01a682eeff97.png">

---------

Co-authored-by: Leo Giovanetti <hello@leog.me>
Co-authored-by: Omar López <zomars@me.com>
2023-02-13 12:52:11 +00:00
Syed Ali Shahbaz 2248d7069f Improves Destination Calendar docs in swagger (#235)
Adds swagger definition to `destination-calendar` endpoint
2023-02-08 17:16:32 -07:00
Syed Ali Shahbaz f170f17f2c Improves custom inputs docs in swagger (#233)
Adds swagger definition to `custom-inputs` endpoint
2023-02-08 14:38:04 -07:00
zomars dc0a6eaa32 Export for typecheck 2023-02-08 10:56:00 -07:00
Syed Ali Shahbaz 3ebab100ce Fixes invalid availability schema (#236)
Hotfix attempt to fix fix invalid availability _post schema in swagger
2023-02-08 15:52:08 +01:00
Syed Ali Shahbaz 279c3da21f Improves Booking docs in swagger (#219)
Adds definition to booking swagger definition, and fixes user _post
definition example
2023-02-07 08:41:08 -07:00
Leo Giovanetti 6cec8620cb Pagination issue fixed, total added (#227)
Fixes #217.
2023-01-18 12:49:31 -07:00
Hariom Balhara 9c23a8e5ab Security Fixes (#224)
Fixes - 2,3,4 security vulnerabilities reported in this message.
https://calendso.slack.com/archives/C03127U5S5Q/p1671922033089329

More Fixes
- Dont't allow a user to add a random attendee to a booking not owned by
him
- Don't allow a user to add a random cal user as an organizer of the
booking.
- Membership deletion should be as per the Privileges of
Owner,Admin,Member
2023-01-04 15:17:47 -07:00
zomars 604d937661 Linting 2022-12-20 11:58:30 -07:00
Carina WollendorferandCarinaWolli c3e0852541 Only allow team admin and owner to create team event types (#220)
Currently, anybody can create an event type for any team. With this PR
we only allow team ADMIN and OWNER to create event types for the team.

Co-authored-by: CarinaWolli <wollencarina@gmail.com>
2022-12-20 10:50:46 -07:00
Carina WollendorferandCarinaWolli 161ebacfef Don't allow team admins to give owner permissions (#221)
Throw an error if a user of a team with ADMIN permission tries to change
permission to OWNER (Bug#3)

Co-authored-by: CarinaWolli <wollencarina@gmail.com>
2022-12-20 10:45:24 -07:00
Joe Au-Yeung 5d892df019 Allow seatsPerTimeSlot and seatsShowAttendees in event type calls (#216)
This PR allows `seatsPerTimeSlot` and `seatsShowAttendees` in event type
POST and PATCH calls
2022-12-15 15:36:09 -07:00
zomars c129586336 Linting 2022-12-08 16:34:09 -07:00
zomars f3c5f9bc0c Import fixes 2022-12-08 16:28:28 -07:00
zomars 41d22c8ccb Fixes for console 2022-12-05 16:09:19 -07:00
zomars e15f6abc9b Fixes 2022-12-02 15:22:56 -07:00
Omar López d35f27014e Implements API key endpoint (#211)
This allow us to manage our API keys directly from the API itself.

User can:
- Create own API keys
- Edit own API keys (only the note field for now)
- Delete own API keys
- Get own API keys

Admin can:
- CRUD for any user
- Get all API keys
2022-11-29 15:06:23 -07:00
zomars 055699f612 Various import and type fixes 2022-11-25 06:58:21 -07:00
zomars 94ecb1908a Type fixes 2022-11-25 06:03:40 -07:00
alannncandzomars c016a4343d added more endpoints and validations for publish-pay teams (#209)
## What does the PR do?

- Team billing via API

Just like the web project, we validate that team has stripe metadata
before converting requestedSlug to slug.

Co-authored-by: zomars <zomars@me.com>
2022-11-22 13:24:25 -07:00
Syed Ali Shahbaz 8e25b9244c Fix deployment failure due to prettier (extra spaces) (#214)
Simply removes extra spaces which are causing prettier to fail
deployment, introduced in the PR for USER swagger doc update
2022-11-21 10:49:55 +05:30
Syed Ali Shahbaz bbaa8ae5e7 Adds more definition to USER swagger (#212)
Adds more definition for documentation for the USER endpoints
2022-11-18 12:20:15 -07:00
Syed Ali Shahbaz 4080e5bc5e Update availabilities _post swagger def (#210)
- Adds more specs to the swagger definition in /availabilities for doc
experimentation
2022-11-18 12:18:07 -07:00
Alex van Andel e5827b035d Fix type error with null being an invalid value (#213) 2022-11-18 17:08:49 +05:30
Alex van Andelandzomars 51bc3d93c1 user: Add email and username, remove bufferTime,startTime,endTime (#202)
Co-authored-by: zomars <zomars@me.com>
2022-11-17 11:35:06 -07:00
Omar LópezandAlex van Andel d1bbaef5c6 Refactor membership endpoints (#204)
refs #175

Co-authored-by: Alex van Andel <me@alexvanandel.com>
2022-10-21 13:54:28 -06:00
zomars d93fd26a1e Removed unused methods middleware 2022-10-21 13:30:09 -06:00
zomars 6522600c42 Add missing bodyUserId 2022-10-21 12:55:35 -06:00
zomars 7617cd43e1 Patching bodyUserId requests 2022-10-21 12:55:15 -06:00