Function createShareLink

templates/slides/server/handlers/share.ts:44–97

(event: any, deckId: string)

});

async function createShareLink(event: any, deckId: string) {
  const db = getDb();
  let storedDeck: any;
  let title = "Untitled";

  try {
    const access = await assertAccess("deck", deckId, "admin");
    title = access.resource.title ?? "Untitled";
    storedDeck = JSON.parse(access.resource.data);
  } catch (err) {
    if (err instanceof ForbiddenError) {
      setResponseStatus(event, err.statusCode);
      return { error: err.message };
    }
    throw err;
  }

  if (!Array.isArray(storedDeck?.slides) || storedDeck.slides.length === 0) {
    setResponseStatus(event, 400);
    return { error: "Deck with slides is required" };
  }

  const token = crypto.randomBytes(12).toString("base64url");
  const now = new Date().toISOString();

  const slides = storedDeck.slides.map((s: any) => ({
    id: s.id,
    content: s.content,
    notes: "", // never share speaker notes
    layout: s.layout,
    background: s.background,
  }));

  await db.insert(schema.deckShareLinks).values({
    token,
    title: title || storedDeck.title || "Untitled",
    slides: JSON.stringify(slides),
    aspectRatio: storedDeck.aspectRatio ?? null,
    createdAt: now,
  });

  // Prune expired rows opportunistically (no await — background)
  db.delete(schema.deckShareLinks)
    .where(
      lt(
        schema.deckShareLinks.createdAt,
        new Date(Date.now() - THIRTY_DAYS_MS).toISOString(),
      ),
    )
    .catch(() => {});

  const response: ShareDeckResponse = { shareToken: token };
  return response;
}

/**
 * GET /api/share/:token