snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/meteor-methods/users/insertOrUpdateUserStatus.ts

@@ -0,0 +1,111 @@
+import { api } from '@rocket.chat/core-services';
+import type { ICustomUserStatus } from '@rocket.chat/core-typings';
+import type { ServerMethods } from '@rocket.chat/ddp-client';
+import type { InsertionModel } from '@rocket.chat/model-typings';
+import { CustomUserStatus } from '@rocket.chat/models';
+import { Meteor } from 'meteor/meteor';
+
+import { trim } from '../../../lib/utils/stringUtils';
+import { hasPermissionAsync } from '../../lib/authorization/hasPermission';
+import { methodDeprecationLogger } from '../../lib/deprecationWarningLogger';
+
+type InsertOrUpdateUserStatus = {
+	_id?: string;
+	name: string;
+	statusType: string;
+	status?: string;
+	emoji?: string;
+	message?: string;
+	order?: number;
+	previousName?: string;
+	previousStatusType?: string;
+};
+
+declare module '@rocket.chat/ddp-client' {
+	// eslint-disable-next-line @typescript-eslint/naming-convention
+	interface ServerMethods {
+		insertOrUpdateUserStatus(userStatusData: InsertOrUpdateUserStatus): string | boolean;
+	}
+}
+
+export const insertOrUpdateUserStatus = async (userId: string, userStatusData: InsertOrUpdateUserStatus): Promise<string | boolean> => {
+	if (!(await hasPermissionAsync(userId, 'manage-user-status'))) {
+		throw new Meteor.Error('not_authorized');
+	}
+
+	if (!trim(userStatusData.name)) {
+		throw new Meteor.Error('error-the-field-is-required', 'The field Name is required', {
+			method: 'insertOrUpdateUserStatus',
+			field: 'Name',
+		});
+	}
+
+	// allow all characters except >, <, &, ", '
+	// more practical than allowing specific sets of characters; also allows foreign languages
+	const nameValidation = /[><&"']/;
+
+	if (nameValidation.test(userStatusData.name)) {
+		throw new Meteor.Error('error-input-is-not-a-valid-field', `${userStatusData.name} is not a valid name`, {
+			method: 'insertOrUpdateUserStatus',
+			input: userStatusData.name,
+			field: 'Name',
+		});
+	}
+
+	const conflictingUserStatus = userStatusData._id
+		? await CustomUserStatus.findOneByNameExceptId(userStatusData.name, userStatusData._id, { projection: { _id: 1 } })
+		: await CustomUserStatus.findOneByName(userStatusData.name, { projection: { _id: 1 } });
+
+	if (conflictingUserStatus) {
+		throw new Meteor.Error('Custom_User_Status_Error_Name_Already_In_Use', 'The custom user status name is already in use', {
+			method: 'insertOrUpdateUserStatus',
+		});
+	}
+
+	const validStatusTypes = ['online', 'away', 'busy', 'offline'];
+	if (userStatusData.statusType && validStatusTypes.indexOf(userStatusData.statusType) < 0) {
+		throw new Meteor.Error('error-input-is-not-a-valid-field', `${userStatusData.statusType} is not a valid status type`, {
+			method: 'insertOrUpdateUserStatus',
+			input: userStatusData.statusType,
+			field: 'StatusType',
+		});
+	}
+
+	if (!userStatusData._id) {
+		// insert user status
+		const createUserStatus: InsertionModel<ICustomUserStatus> = {
+			name: userStatusData.name,
+			statusType: userStatusData.statusType,
+		};
+
+		const _id = (await CustomUserStatus.create(createUserStatus)).insertedId;
+
+		void api.broadcast('user.updateCustomStatus', { ...createUserStatus, _id });
+
+		return _id;
+	}
+
+	// update User status
+	if (userStatusData.name !== userStatusData.previousName) {
+		await CustomUserStatus.setName(userStatusData._id, userStatusData.name);
+	}
+
+	if (userStatusData.statusType !== userStatusData.previousStatusType) {
+		await CustomUserStatus.setStatusType(userStatusData._id, userStatusData.statusType);
+	}
+
+	void api.broadcast('user.updateCustomStatus', { ...userStatusData, _id: userStatusData._id });
+
+	return true;
+};
+
+Meteor.methods<ServerMethods>({
+	async insertOrUpdateUserStatus(userStatusData) {
+		methodDeprecationLogger.method('insertOrUpdateUserStatus', '9.0.0', ['/v1/custom-user-status.create', '/v1/custom-user-status.update']);
+		if (!this.userId) {
+			throw new Meteor.Error('not_authorized');
+		}
+
+		return insertOrUpdateUserStatus(this.userId, userStatusData);
+	},
+});