From f9b38d3f0d209540e8656e2f985b512cddbcafdd Mon Sep 17 00:00:00 2001
From: Axel Rindle <mail@axelrindle.de>
Date: Tue, 11 Mar 2025 10:03:45 +0100
Subject: [PATCH 1/2] fix: allow blob images

---
 apps/api/src/server.ts | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts
index 99014228..b0306897 100644
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@@ -23,7 +23,13 @@ app.use(
   helmet({
     contentSecurityPolicy: {
       directives: {
-        'img-src': ["'self'", '*.githubusercontent.com', 'data:', 'dlrgbrahmseedigitalprod.blob.core.windows.net'],
+        'img-src': [
+          "'self'",
+          '*.githubusercontent.com',
+          'blob:',
+          'data:',
+          'dlrgbrahmseedigitalprod.blob.core.windows.net',
+        ],
         'connect-src': ["'self'", 'dlrgbrahmseedigitalprod.blob.core.windows.net'],
       },
     },

From 3a04a9cbb96e829a9f9fdfba2aaa71dc583175fc Mon Sep 17 00:00:00 2001
From: Axel Rindle <mail@axelrindle.de>
Date: Tue, 11 Mar 2025 15:46:40 +0100
Subject: [PATCH 2/2] fix: custom field delete

---
 .../customFields/customFields.router.ts       |   5 +-
 .../customFields/customFieldsDelete.ts        |  39 +++---
 .../CustomFields/CustomFieldDeleteModal.vue   | 115 ++++++++++++++++++
 .../CustomFields/CustomFieldsFormEdit.vue     |  41 +++----
 4 files changed, 158 insertions(+), 42 deletions(-)
 create mode 100644 apps/frontend/src/components/CustomFields/CustomFieldDeleteModal.vue

diff --git a/apps/api/src/services/customFields/customFields.router.ts b/apps/api/src/services/customFields/customFields.router.ts
index b3d6b8d6..926ee5d4 100644
--- a/apps/api/src/services/customFields/customFields.router.ts
+++ b/apps/api/src/services/customFields/customFields.router.ts
@@ -6,7 +6,7 @@ import { customFieldsList } from './customFieldsList.js'
 import { customFieldsTemplates } from './customFieldsTemplates.js'
 import { customFieldsUnterveranstaltungCreate } from './customFieldsUnterveranstaltungCreate.js'
 import { customFieldsVeranstaltungCreate } from './customFieldsVeranstaltungCreate.js'
-import { customFieldsDelete } from './customFieldsDelete.js'
+import { customFieldsVeranstaltungDelete, customFieldsUnterveranstaltungDelete } from './customFieldsDelete.js'
 import { customFieldsUpdate } from './customFieldsUpdate.js'
 import { customFieldValuesUpdate } from './customFieldValuesUpdate.js'
 // Import Routes here - do not delete this line
@@ -16,7 +16,8 @@ export const customFieldsRouter = mergeRouters(
   customFieldsGet.router,
   customFieldsVeranstaltungCreate.router,
   customFieldsUpdate.router,
-  customFieldsDelete.router,
+  customFieldsVeranstaltungDelete.router,
+  customFieldsUnterveranstaltungDelete.router,
   customFieldsUnterveranstaltungCreate.router,
   customFieldValuesUpdate.router,
   customFieldsTemplates.router
diff --git a/apps/api/src/services/customFields/customFieldsDelete.ts b/apps/api/src/services/customFields/customFieldsDelete.ts
index 8f7adccc..46ea0f48 100644
--- a/apps/api/src/services/customFields/customFieldsDelete.ts
+++ b/apps/api/src/services/customFields/customFieldsDelete.ts
@@ -1,17 +1,34 @@
 import { Role } from '@prisma/client'
-import { TRPCError } from '@trpc/server'
 import { z } from 'zod'
 
 import prisma from '../../prisma.js'
 import { defineProtectedMutateProcedure } from '../../types/defineProcedure.js'
+import { TRPCError } from '@trpc/server'
 
-export const customFieldsDelete = defineProtectedMutateProcedure({
-  key: 'delete',
-  roleIds: [Role.ADMIN, Role.GLIEDERUNG_ADMIN],
+export const customFieldsVeranstaltungDelete = defineProtectedMutateProcedure({
+  key: 'veranstaltungDelete',
+  roleIds: [Role.ADMIN],
   inputSchema: z.strictObject({
     veranstaltungId: z.number(),
     fieldId: z.number(),
   }),
+  async handler({ input }) {
+    await prisma.customField.delete({
+      where: {
+        id: input.fieldId,
+        veranstaltungId: input.veranstaltungId,
+      },
+    })
+  },
+})
+
+export const customFieldsUnterveranstaltungDelete = defineProtectedMutateProcedure({
+  key: 'unterveranstaltungDelete',
+  roleIds: [Role.ADMIN, Role.GLIEDERUNG_ADMIN],
+  inputSchema: z.strictObject({
+    unterveranstaltungId: z.number(),
+    fieldId: z.number(),
+  }),
   async handler({ ctx, input }) {
     if (ctx.account.role === Role.GLIEDERUNG_ADMIN) {
       const { gliederungId: gliederungIdActor } = await prisma.person.findFirstOrThrow({
@@ -43,23 +60,9 @@ export const customFieldsDelete = defineProtectedMutateProcedure({
       }
     }
 
-    const field = await prisma.customField.findUnique({
-      where: {
-        id: input.fieldId,
-        veranstaltungId: input.veranstaltungId,
-      },
-    })
-
-    if (field === null) {
-      throw new TRPCError({
-        code: 'NOT_FOUND',
-      })
-    }
-
     await prisma.customField.delete({
       where: {
         id: input.fieldId,
-        veranstaltungId: input.veranstaltungId,
       },
     })
   },
diff --git a/apps/frontend/src/components/CustomFields/CustomFieldDeleteModal.vue b/apps/frontend/src/components/CustomFields/CustomFieldDeleteModal.vue
new file mode 100644
index 00000000..f5636596
--- /dev/null
+++ b/apps/frontend/src/components/CustomFields/CustomFieldDeleteModal.vue
@@ -0,0 +1,115 @@
+<script setup lang="ts">
+import { useTemplateRef } from 'vue'
+import Button from '../UIComponents/Button.vue'
+import Modal, { type ModalApi } from '../UIComponents/Modal.vue'
+import { useAsyncState } from '@vueuse/core'
+import type { RouterOutput } from '@codeanker/api'
+import { apiClient } from '@/api'
+
+type Props = {
+  entity: 'veranstaltung' | 'unterveranstaltung'
+  entityId: number
+  field: RouterOutput['customFields']['get']
+}
+
+type Emits = {
+  delete: []
+}
+
+const props = defineProps<Props>()
+const emit = defineEmits<Emits>()
+
+const modal = useTemplateRef('modal')
+
+const {
+  execute: doDelete,
+  error: errorDelete,
+  isLoading: isDeleting,
+} = useAsyncState(
+  async () => {
+    if (!props.field) {
+      return
+    }
+
+    switch (props.entity) {
+      case 'veranstaltung':
+        await apiClient.customFields.veranstaltungDelete.mutate({
+          fieldId: props.field.id,
+          veranstaltungId: props.entityId,
+        })
+        break
+      case 'unterveranstaltung':
+        await apiClient.customFields.unterveranstaltungDelete.mutate({
+          fieldId: props.field.id,
+          unterveranstaltungId: props.entityId,
+        })
+        break
+      default:
+        break
+    }
+
+    emit('delete')
+  },
+  null,
+  { immediate: false }
+)
+
+defineExpose<ModalApi>({
+  show(ctx) {
+    if (isDeleting) {
+      return
+    }
+
+    modal.value?.show(ctx)
+  },
+  hide(ctx) {
+    if (isDeleting) {
+      return
+    }
+
+    modal.value?.hide(ctx)
+  },
+})
+</script>
+
+<template>
+  <Teleport to="body">
+    <Modal ref="modal">
+      <template #content>
+        <div class="space-y-8">
+          <div>
+            <p class="text-xl font-bold">Benutzerdefiniertes Feld &quot;{{ field.name }}&quot; löschen</p>
+            <p>
+              Wenn du das benutzerdefinierte Feld löschst, gehen sämtliche damit verbundenen Eingaben aus den
+              Anmeldungen unwiderruflich verloren.
+            </p>
+            <p>Bist du sicher, dass du das Feld löschen möchtest?</p>
+          </div>
+
+          <p
+            v-if="errorDelete"
+            class="my-4"
+          >
+            {{ errorDelete }}
+          </p>
+
+          <div class="flex gap-x-4 justify-end">
+            <Button
+              type="button"
+              @click="modal?.hide()"
+            >
+              Feld behalten
+            </Button>
+            <Button
+              type="button"
+              color="danger"
+              @click="doDelete"
+            >
+              Feld löschen
+            </Button>
+          </div>
+        </div>
+      </template>
+    </Modal>
+  </Teleport>
+</template>
diff --git a/apps/frontend/src/components/CustomFields/CustomFieldsFormEdit.vue b/apps/frontend/src/components/CustomFields/CustomFieldsFormEdit.vue
index f57a3658..66199826 100644
--- a/apps/frontend/src/components/CustomFields/CustomFieldsFormEdit.vue
+++ b/apps/frontend/src/components/CustomFields/CustomFieldsFormEdit.vue
@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import { useAsyncState } from '@vueuse/core'
-import { ref, watch } from 'vue'
+import { ref, useTemplateRef, watch } from 'vue'
 
 import { apiClient } from '@/api'
 import CustomFieldsFormGeneral, { type ICustomFieldData } from '@/components/CustomFields/CustomFieldsFormGeneral.vue'
@@ -8,11 +8,16 @@ import Button from '@/components/UIComponents/Button.vue'
 import router from '@/router'
 import type { CustomFieldType } from '@codeanker/api'
 import { ValidateForm } from '@codeanker/validation'
+import CustomFieldDeleteModal from './CustomFieldDeleteModal.vue'
 
 const props = defineProps<{
+  entity: 'veranstaltung' | 'unterveranstaltung'
+  entityId: number
   fieldId: number
 }>()
 
+const deleteModal = useTemplateRef('deleteModal')
+
 const { state: field } = useAsyncState(async () => {
   return apiClient.customFields.get.query({
     id: props.fieldId,
@@ -72,23 +77,6 @@ const {
   null,
   { immediate: false }
 )
-
-const {
-  execute: doDelete,
-  // error: errorDelete,
-  isLoading: isDeleting,
-} = useAsyncState(
-  async () => {
-    await apiClient.customFields.delete.mutate({
-      fieldId: field.value!.id,
-      veranstaltungId: 0,
-    })
-
-    router.back()
-  },
-  null,
-  { immediate: false }
-)
 </script>
 
 <template>
@@ -101,7 +89,7 @@ const {
       <Button
         type="submit"
         color="primary"
-        :disabled="isUpdating || isDeleting"
+        :disabled="isUpdating"
       >
         <span v-if="!isUpdating">Speichern</span>
         <span v-else>Loading...</span>
@@ -109,7 +97,7 @@ const {
       <Button
         type="button"
         color="warning"
-        :disabled="isUpdating || isDeleting"
+        :disabled="isUpdating"
         @click="() => router.back()"
       >
         Abbrechen
@@ -118,8 +106,8 @@ const {
       <Button
         type="button"
         color="danger"
-        :disabled="isUpdating || isDeleting"
-        @click="doDelete"
+        :disabled="isUpdating"
+        @click="deleteModal?.show()"
       >
         Löschen
       </Button>
@@ -137,4 +125,13 @@ const {
       {{ error }}
     </div>
   </div>
+
+  <CustomFieldDeleteModal
+    v-if="field"
+    ref="deleteModal"
+    :entity="props.entity"
+    :entity-id="props.entityId"
+    :field="field"
+    @delete="router.back()"
+  />
 </template>