ToolJet/server/src/controllers/app_import_export.controller.ts

import { Controller, ForbiddenException, Get, Param, Post, Query, UseGuards, Body } from '@nestjs/common';
import { JwtAuthGuard } from '../../src/modules/auth/jwt-auth.guard';
import { AppsService } from '../services/apps.service';
import { decamelizeKeys } from 'humps';
import { AppsAbilityFactory } from 'src/modules/casl/abilities/apps-ability.factory';
import { App } from 'src/entities/app.entity';
import { AppImportExportService } from '@services/app_import_export.service';
import { User } from 'src/decorators/user.decorator';
import { AppImportDto } from '@dto/app-import.dto';

@Controller('apps')
export class AppsImportExportController {
  constructor(
    private appsService: AppsService,
    private appImportExportService: AppImportExportService,
    private appsAbilityFactory: AppsAbilityFactory
  ) {}

  @UseGuards(JwtAuthGuard)
  @Post('/import')
  async import(@User() user, @Body() appImportDto: AppImportDto) {
    const ability = await this.appsAbilityFactory.appsActions(user);

    if (!ability.can('createApp', App)) {
      throw new ForbiddenException('You do not have permissions to perform this action');
    }
    const { name: appName, app: appContent } = appImportDto;
    const app = await this.appImportExportService.import(user, appContent, appName);
    return decamelizeKeys(app);
  }

  @UseGuards(JwtAuthGuard)
  @Get(':id/export')
  async export(@User() user, @Param('id') id, @Query() query) {
    const appToExport = await this.appsService.find(id);
    const ability = await this.appsAbilityFactory.appsActions(user, id);

    if (!ability.can('cloneApp', appToExport)) {
      throw new ForbiddenException('You do not have permissions to perform this action');
    }

    const app = await this.appImportExportService.export(user, id, query);
    return {
      ...app,
      tooljetVersion: globalThis.TOOLJET_VERSION,
    };
  }
}