Add basic Notes UI

routes/api/notes/save.tsx

@@ -0,0 +1,66 @@
+import { Handlers } from 'fresh/server.ts';
+
+import { FreshContextState } from '/lib/types.ts';
+import { getFile, updateFile } from '/lib/data/files.ts';
+
+interface Data {}
+
+export interface RequestBody {
+  fileName: string;
+  currentPath: string;
+  contents: string;
+}
+
+export interface ResponseBody {
+  success: boolean;
+}
+
+export const handler: Handlers<Data, FreshContextState> = {
+  async POST(request, context) {
+    if (!context.state.user) {
+      return new Response('Unauthorized', { status: 401 });
+    }
+
+    const requestBody = await request.clone().json() as RequestBody;
+
+    if (
+      !requestBody.currentPath || !requestBody.fileName || !requestBody.currentPath.startsWith('/Notes/') ||
+      requestBody.currentPath.includes('../') || !requestBody.currentPath.endsWith('/')
+    ) {
+      return new Response('Bad Request', { status: 400 });
+    }
+
+    if (
+      !requestBody.currentPath || !requestBody.currentPath.startsWith('/Notes/') ||
+      requestBody.currentPath.includes('../')
+    ) {
+      return new Response('Bad Request', { status: 400 });
+    }
+
+    // Don't allow non-markdown files here
+    if (!requestBody.fileName.endsWith('.md')) {
+      return new Response('Not Found', { status: 404 });
+    }
+
+    const fileResult = await getFile(
+      context.state.user.id,
+      requestBody.currentPath,
+      decodeURIComponent(requestBody.fileName),
+    );
+
+    if (!fileResult.success) {
+      return new Response('Not Found', { status: 404 });
+    }
+
+    const updatedFile = await updateFile(
+      context.state.user.id,
+      requestBody.currentPath,
+      decodeURIComponent(requestBody.fileName),
+      requestBody.contents || '',
+    );
+
+    const responseBody: ResponseBody = { success: updatedFile };
+
+    return new Response(JSON.stringify(responseBody));
+  },
+};