make runs list nested

Author: motatoes

backend/controllers/runs.go

@@ -50,6 +50,13 @@ func RunsForProject(c *gin.Context) {
 		return
 	}
 
+	if project.OrganisationID != org.ID {
+		log.Printf("Forbidden access: not allowed to access projectID: %v logged in org: %v", project.OrganisationID, org.ID)
+		c.String(http.StatusForbidden, "No access to this project")
+		return
+
+	}
+
 	runs, err := models.DB.ListDiggerRunsForProject(project.Name, project.Repo.ID)
 	if err != nil {
 		log.Printf("could not fetch runs: %v", err)
@@ -67,5 +74,15 @@ func RunsForProject(c *gin.Context) {
 		}
 		serializedRuns = append(serializedRuns, serializedRun)
 	}
-	c.JSON(http.StatusOK, serializedRuns)
+	response := make(map[string]interface{})
+	response["runs"] = serializedRuns
+	c.JSON(http.StatusOK, response)
+}
+
+func RunDetails(c *gin.Context) {
+	//currentOrg, exists := c.Get(middleware.ORGANISATION_ID_KEY)
+	//projectIdStr := c.Param("project_id")
+
+	response := make(map[string]interface{})
+	c.JSON(http.StatusOK, response)
 }

backend/main.go

@@ -167,6 +167,10 @@ func main() {
 	projectsApiGroup.GET("/", controllers.FindProjectsForOrg)
 	projectsApiGroup.GET("/:project_id/runs", controllers.RunsForProject)
 
+	runsApiGroup := apiGroup.Group("/runs")
+	runsApiGroup.Use(middleware.GetWebMiddleware())
+	projectsApiGroup.GET("/:project_id/runs/:id", controllers.RunDetails)
+
 	fronteggWebhookProcessor.POST("/create-org-from-frontegg", controllers.CreateFronteggOrgFromWebhook)
 
 	r.Run(fmt.Sprintf(":%d", cfg.GetInt("port")))