Add dryRun parameter to the purchase api

Reviewed-on: https://codeberg.org/timelimit/timelimit-server/pulls/43

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:16-alpine
+FROM node:24-alpine
 
 # Create app directories
 RUN mkdir -p /usr/src/app

docs/api/admin.md

@@ -96,10 +96,11 @@ Use this to unlock all features for one user for a specified duration.
 
 ### request
 
-request properties: ``purchaseToken`` and ``purchaseId``
+request properties: ``purchaseToken``, ``purchaseId`` and ``dryRun``
 
 - ``purchasetoken`` is a string which the client shows at the purchase screen
 - ``purchaseId`` is the ID that is used at the bill
+- ``dryRun`` is a boolean; setting true will skip the actual unlocking
 
 ### response
 

src/api/admin.ts

@@ -140,13 +140,15 @@ export const createAdminRouter = ({ database, websocket, eventHandler }: {
       if (
         typeof req.body !== 'object' ||
         typeof req.body.purchaseToken !== 'string' ||
-        typeof req.body.purchaseId !== 'string'
+        typeof req.body.purchaseId !== 'string' ||
+        typeof req.body.dryRun !== 'boolean'
       ) {
         throw new BadRequest()
       }
 
       const purchaseToken: string = req.body.purchaseToken
       const purchaseId: string = req.body.purchaseId
+      const dryRun: boolean = req.body.dryRun
 
       const tokenContent = await verifyIdentitifyToken(purchaseToken)
 
@@ -250,15 +252,17 @@ export const createAdminRouter = ({ database, websocket, eventHandler }: {
             }
           }
 
-          await addPurchase({
-            database,
-            familyId: tokenContent.familyId,
-            type: 'year',
-            service: 'directpurchase',
-            transactionId: purchaseId,
-            websocket,
-            transaction
-          })
+          if (!dryRun) {
+            await addPurchase({
+              database,
+              familyId: tokenContent.familyId,
+              type: 'year',
+              service: 'directpurchase',
+              transactionId: purchaseId,
+              websocket,
+              transaction
+            })
+          }
         }
 
         return {