src/routes/search/[id]/+server.ts

import { collections } from "$lib/server/database";
import { sha256 } from "$lib/utils/sha256";
import { error } from "@sveltejs/kit";
import { ObjectId } from "mongodb";

export async function GET({ params, locals }) {
	const searchId = new ObjectId(params.id);

	const search = await collections.webSearches.findOne({
		_id: searchId,
	});

	if (!search) {
		throw error(404, "Search query not found");
	}

	const conv = await collections.conversations.findOne({
		_id: search.convId,
	});

	if (!conv) {
		throw error(404, "Conversation not found");
	}

	// there's no better way to see if a conversation has been shared, so we hash the messages and see if there's a shared conversation with the same hash
	const hash = await sha256(JSON.stringify(conv.messages));
	const sharedConv = await collections.sharedConversations.findOne({
		hash: hash,
	});

	const userShouldSeeConv =
		(conv.userId && locals.user?._id.toString() === conv.userId.toString()) || sharedConv !== null;

	if (!userShouldSeeConv) {
		throw error(403, "You don't have access to the conversation here.");
	}

	return new Response(JSON.stringify(search), { headers: { "Content-Type": "application/json" } });
}