Fix place update API with proper request handling

Author: Kampouse

src/routes/api/places/update/index.ts

@@ -1,24 +1,26 @@
 import type { RequestHandler } from "@builder.io/qwik-city";
 import { UpdatePlace } from "~/api/Query";
 
-export const onPost: RequestHandler = async ({ request, json, event }) => {
+export const onPost: RequestHandler = async ({ request, json }) => {
   try {
-    const body = await request.parseBody();
+    const body = await request.json();
 
     // Validate required fields
     if (!body.placeId) {
-      return json(400, {
+      json(400, {
         success: false,
         message: "Missing required field: placeId",
       });
+      return;
     }
 
     const placeId = parseInt(body.placeId as string);
     if (isNaN(placeId)) {
-      return json(400, {
+      json(400, {
         success: false,
         message: "Invalid placeId format",
       });
+      return;
     }
 
     // Parse and validate placeData
@@ -29,10 +31,11 @@ export const onPost: RequestHandler = async ({ request, json, event }) => {
           ? JSON.parse(body.placeData)
           : body.placeData;
     } catch (error) {
-      return json(400, {
+      json(400, {
         success: false,
         message: "Invalid placeData format. Must be valid JSON.",
       });
+      return;
     }
 
     // Validate specific fields
@@ -53,67 +56,72 @@ export const onPost: RequestHandler = async ({ request, json, event }) => {
     );
 
     if (invalidFields.length > 0) {
-      return json(400, {
+      json(400, {
         success: false,
         message: `Invalid fields: ${invalidFields.join(
           ", "
         )}. Allowed fields: ${allowedFields.join(", ")}`,
       });
+      return;
     }
 
     // Field-specific validations
     if (placeData.rating !== undefined) {
       if (typeof placeData.rating !== "number" || placeData.rating < 1 || placeData.rating > 5) {
-        return json(400, {
+        json(400, {
           success: false,
           message: "Rating must be a number between 1 and 5",
         });
+        return;
       }
     }
 
     if (placeData.wifiSpeed !== undefined) {
       if (typeof placeData.wifiSpeed !== "number" || placeData.wifiSpeed < 0) {
-        return json(400, {
+        json(400, {
           success: false,
           message: "WifiSpeed must be a non-negative number",
         });
+        return;
       }
     }
 
     if (placeData.lat !== undefined && (typeof placeData.lat !== "number" || placeData.lat < -90 || placeData.lat > 90)) {
-      return json(400, {
+      json(400, {
         success: false,
         message: "Latitude must be a number between -90 and 90",
       });
+      return;
     }
 
     if (placeData.lng !== undefined && (typeof placeData.lng !== "number" || placeData.lng < -180 || placeData.lng > 180)) {
-      return json(400, {
+      json(400, {
         success: false,
         message: "Longitude must be a number between -180 and 180",
       });
+      return;
     }
 
-    // Call the secure update function with built-in ownership validation
+    // Call secure update function with built-in ownership validation
     const result = await UpdatePlace({
-      event,
+      event: request,
       placeId,
       placeData,
     });
 
     if (result.success) {
-      return json(200, result);
+      json(200, result);
     } else {
       const statusCode = result.message.includes("Unauthorized")
         ? 403
         : result.message.includes("not found")
         ? 404
         : 400;
-      return json(statusCode, result);
+      json(statusCode, result);
     }
   } catch (error) {
     console.error("API Error in place update:", error);
-    return json(500, {
+    json(500, {
       success: false,
       message: "Internal server error",
     });
@@ -122,7 +130,7 @@ export const onPost: RequestHandler = async ({ request, json, event }) => {
 
 // Keep GET endpoint for backward compatibility or debugging
 export const onGet: RequestHandler = async ({ json }) => {
-  return json(405, {
+  json(405, {
     success: false,
     message: "Method not allowed. Use POST to update place.",
   });