fix

livepeer · Mar 18, 2024 · 3b586d2 · 3b586d2
1 parent 91f0dfa
commit 3b586d2
Showing 1 changed file with 15 additions and 15 deletions.
diff --git a/packages/api/src/controllers/stream.ts b/packages/api/src/controllers/stream.ts
@@ -633,7 +633,7 @@ app.get("/sessions/:parentId", authorizer({}), async (req, res) => {
     !stream ||
     stream.deleted ||
     (stream.userId !== req.user.id && !req.isUIAdmin) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({ errors: ["not found"] });
@@ -709,7 +709,7 @@ app.get("/:id", authorizer({}), async (req, res) => {
   if (
     !stream ||
     ((stream.userId !== req.user.id || stream.deleted) && !req.user.admin) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     // do not reveal that stream exists
     res.status(404);
@@ -753,7 +753,7 @@ app.get("/playback/:playbackId", authorizer({}), async (req, res) => {
   if (
     !stream ||
     ((stream.userId !== req.user.id || stream.deleted) && !req.user.admin) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({ errors: ["not found"] });
@@ -834,7 +834,7 @@ app.post(
       !stream ||
       ((stream.userId !== req.user.id || stream.deleted) &&
         !(req.user.admin && !stream.deleted)) ||
-      stream.projectId !== req.project.id
+      stream.projectId !== req.project?.id
     ) {
       // do not reveal that stream exists
       res.status(404);
@@ -1227,7 +1227,7 @@ app.post("/:id/heartbeat", authorizer({ anyAdmin: true }), async (req, res) => {
   if (
     !stream ||
     (stream.deleted && !req.user.admin) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({ errors: ["not found"] });
@@ -1251,7 +1251,7 @@ app.put(
     if (
       !stream ||
       (stream.deleted && !req.user.admin) ||
-      stream.projectId !== req.project.id
+      stream.projectId !== req.project?.id
     ) {
       res.status(404);
       return res.json({ errors: ["not found"] });
@@ -1561,7 +1561,7 @@ app.post(
 
     const stream = await db.stream.get(req.params.id);
 
-    if (!stream || stream.deleted || stream.projectId !== req.project.id) {
+    if (!stream || stream.deleted || stream.projectId !== req.project?.id) {
       res.status(404);
       return res.json({ errors: ["stream not found"] });
     }
@@ -1650,7 +1650,7 @@ app.patch(
 
     const exists = stream && !stream.deleted;
     const hasAccess = stream?.userId === req.user.id || req.isUIAdmin;
-    if (!exists || !hasAccess || stream.projectId !== req.project.id) {
+    if (!exists || !hasAccess || stream.projectId !== req.project?.id) {
       res.status(404);
       return res.json({ errors: ["not found"] });
     }
@@ -1729,7 +1729,7 @@ app.patch(
 app.patch("/:id/record", authorizer({}), async (req, res) => {
   const { id } = req.params;
   const stream = await db.stream.get(id);
-  if (!stream || stream.deleted || stream.projectId !== req.project.id) {
+  if (!stream || stream.deleted || stream.projectId !== req.project?.id) {
     res.status(404);
     return res.json({ errors: ["not found"] });
   }
@@ -1763,7 +1763,7 @@ app.delete("/:id", authorizer({}), async (req, res) => {
     !stream ||
     stream.deleted ||
     (stream.userId !== req.user.id && !req.user.admin) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({ errors: ["not found"] });
@@ -1828,7 +1828,7 @@ app.get("/:id/info", authorizer({}), async (req, res) => {
   if (
     !stream ||
     (!req.user.admin && (stream.deleted || stream.userId !== req.user.id)) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({
@@ -1868,7 +1868,7 @@ app.get("/:id/config", authorizer({ anyAdmin: true }), async (req, res) => {
     !stream ||
     stream.deleted ||
     stream.suspended ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({
@@ -1904,7 +1904,7 @@ app.patch("/:id/suspended", authorizer({}), async (req, res) => {
   if (
     !stream ||
     (!req.user.admin && (stream.deleted || stream.userId !== req.user.id)) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({ errors: ["not found"] });
@@ -1928,7 +1928,7 @@ app.post(
     if (
       !stream ||
       (!req.user.admin && (stream.deleted || stream.userId !== req.user.id)) ||
-      stream.projectId !== req.project.id
+      stream.projectId !== req.project?.id
     ) {
       res.status(404);
       return res.json({ errors: ["not found"] });
@@ -1952,7 +1952,7 @@ app.delete("/:id/terminate", authorizer({}), async (req, res) => {
   if (
     !stream ||
     (!req.user.admin && (stream.deleted || stream.userId !== req.user.id)) ||
-    stream.projectId !== req.project.id
+    stream.projectId !== req.project?.id
   ) {
     res.status(404);
     return res.json({ errors: ["not found"] });