Allow crate deletion in the first 24 hours from creation

Author: Marco Napetti

src/controllers/krate.rs

@@ -1,3 +1,4 @@
+pub mod delete;
 pub mod downloads;
 pub mod follow;
 pub mod metadata;

src/controllers/krate/delete.rs

@@ -0,0 +1,48 @@
+//! Functionality related to deleting a crate.
+
+use chrono::{Duration, Utc};
+
+use crate::controllers::cargo_prelude::*;
+use crate::models::Crate;
+
+use crate::schema::*;
+use crate::util::errors::internal;
+use crate::views::{EncodableCrate, GoodCrate, PublishWarnings};
+
+/// Handles the `DELETE /crates/:crate_id` route.
+///
+/// Actually deletion is allowed only in the first 24 hours from creation
+pub async fn delete(app: AppState, Path(crate_name): Path<String>) -> AppResult<Json<GoodCrate>> {
+    let conn = app.primary_database.get()?;
+    let krate: Crate = Crate::by_name(&crate_name).first(&*conn)?;
+
+    if Utc::now()
+        .naive_utc()
+        .signed_duration_since(krate.created_at)
+        > Duration::hours(24)
+    {
+        return Err(cargo_err(
+            "Crate deletion is allowed only in the first 24 hours from creation",
+        ));
+    }
+
+    // Create a transaction on the database, if there are no errors,
+    // commit the transactions to delete the crate.
+    conn.transaction(|| {
+        diesel::delete(crates::table.find(krate.id)).execute(&*conn)?;
+
+        let uploader = app.config.uploader();
+        uploader
+            .delete_index(app.http_client(), &krate.name)
+            .map_err(|e| internal(format_args!("failed to delete crate: {e}")))?;
+
+        Ok(Json(GoodCrate {
+            krate: EncodableCrate::from_minimal(krate, None, None, true, None),
+            warnings: PublishWarnings {
+                invalid_categories: vec![],
+                invalid_badges: vec![],
+                other: vec![],
+            },
+        }))
+    })
+}

src/router.rs

@@ -93,6 +93,7 @@ pub fn build_axum_router(state: AppState) -> Router {
             "/api/v1/crates/:crate_id/reverse_dependencies",
             get(krate::metadata::reverse_dependencies),
         )
+        .route("/api/v1/crates/:crate_id", delete(krate::delete::delete))
         .route("/api/v1/keywords", get(keyword::index))
         .route("/api/v1/keywords/:keyword_id", get(keyword::show))
         .route("/api/v1/categories", get(category::index))