[api] remarks & drafts/collabs + migrations

resolvers/zine/profile.py

@@ -162,16 +162,15 @@ async def update_profile(_, info, profile):
     user_id = auth.user_id
     with local_session() as session:
         user = session.query(User).filter(User.id == user_id).one()
-        slugowner = session.query(User).where(User.slug == profile['slug']).one()
-        if slugowner:
-            if slugowner.id != user_id:
-                return {
-                    "error": "slug is used by another user"
-                }
+        if not user:
+            return {
+                "error": "canoot find user"
+            }
         user.update(profile)
         session.commit()
     return {
-        "error": None
+        "error": None,
+        "author": user
     }
 
 

resolvers/zine/reactions.py

@@ -198,11 +198,10 @@ async def delete_reaction(_, info, reaction=None):
     auth: AuthCredentials = info.context["request"].auth
 
     with local_session() as session:
-        user = session.query(User).where(User.id == auth.user_id).first()
         r = session.query(Reaction).filter(Reaction.id == reaction).first()
         if not r:
             return {"error": "invalid reaction id"}
-        if r.createdBy != user.id:
+        if r.createdBy != auth.user_id:
             return {"error": "access denied"}
         r.deletedAt = datetime.now(tz=timezone.utc)
         session.commit()