From 924924b10ed60c2abe80cb910e32cf84dd6a84f7 Mon Sep 17 00:00:00 2001
From: xBelladonna <isabelladonnamoore@outlook.com>
Date: Sat, 27 Jul 2019 13:07:23 +0930
Subject: [PATCH] Add endpoint to create new member by POST request

---
 PluralKit.API/Controllers/MemberController.cs | 42 ++++++++++++++++++-
 1 file changed, 41 insertions(+), 1 deletion(-)

diff --git a/PluralKit.API/Controllers/MemberController.cs b/PluralKit.API/Controllers/MemberController.cs
index e3e6931b..b257d20d 100644
--- a/PluralKit.API/Controllers/MemberController.cs
+++ b/PluralKit.API/Controllers/MemberController.cs
@@ -29,6 +29,46 @@ namespace PluralKit.API.Controllers
             return Ok(member);
         }
 
+        [HttpPost]
+        [RequiresSystem]
+        public async Task<ActionResult<PKMember>> PostMember([FromBody] PKMember newMember)
+        {
+            var system = _auth.CurrentSystem;
+
+            if (newMember.Name == null)
+            return BadRequest("Member name cannot be null.");
+
+            // Explicit bounds checks
+            if (newMember.Name != null && newMember.Name.Length > Limits.MaxMemberNameLength)
+                return BadRequest($"Member name too long ({newMember.Name.Length} > {Limits.MaxMemberNameLength}.");
+            if (newMember.Pronouns != null && newMember.Pronouns.Length > Limits.MaxPronounsLength)
+                return BadRequest($"Member pronouns too long ({newMember.Pronouns.Length} > {Limits.MaxPronounsLength}.");
+            if (newMember.Description != null && newMember.Description.Length > Limits.MaxDescriptionLength)
+                return BadRequest($"Member descriptions too long ({newMember.Description.Length} > {Limits.MaxDescriptionLength}.");
+
+            // Sanity bounds checks
+            if (newMember.AvatarUrl != null && newMember.AvatarUrl.Length > 1000)
+                return BadRequest();
+            if (newMember.Prefix != null && newMember.Prefix.Length > 1000)
+                return BadRequest();
+            if (newMember.Suffix != null && newMember.Suffix.Length > 1000)
+                return BadRequest();
+
+            var member = await _members.Create(system, newMember.Name);
+
+            member.Name = newMember.Name;
+            member.Color = newMember.Color;
+            member.AvatarUrl = newMember.AvatarUrl;
+            member.Birthday = newMember.Birthday;
+            member.Pronouns = newMember.Pronouns;
+            member.Description = newMember.Description;
+            member.Prefix = newMember.Prefix;
+            member.Suffix = newMember.Suffix;
+            await _members.Save(member);
+
+            return Ok();
+        }
+
         [HttpPatch("{hid}")]
         [RequiresSystem]
         public async Task<ActionResult<PKMember>> PatchMember(string hid, [FromBody] PKMember newMember)
@@ -66,7 +106,7 @@ namespace PluralKit.API.Controllers
             member.Prefix = newMember.Prefix;
             member.Suffix = newMember.Suffix;
             await _members.Save(member);
-            
+
             return Ok();
         }
     }