add accept quest route

website/src/controllers/api-v3/quests.js

@@ -35,7 +35,7 @@ let api = {};
  *
  * @apiParam {string} groupId The group _id (or 'party')
  *
- * @apiSuccess {Object} Quest Object
+ * @apiSuccess {Object} quest Quest Object
  */
 api.inviteToQuest = {
   method: 'POST',
@@ -124,4 +124,58 @@ api.inviteToQuest = {
   },
 };
 
+/**
+ * @api {post} /groups/:groupId/quests/accept Accept a pending quest
+ * @apiVersion 3.0.0
+ * @apiName AcceptQuest
+ * @apiGroup Group
+ *
+ * @apiParam {string} groupId The group _id (or 'party')
+ *
+ * @apiSuccess {Object} quest Quest Object
+ */
+api.acceptQuest = {
+  method: 'POST',
+  url: '/groups/:groupId/quests/accept',
+  middlewares: [authWithHeaders(), cron],
+  async handler (req, res) {
+    let user = res.locals.user;
+
+    req.checkParams('groupId', res.t('groupIdRequired')).notEmpty();
+
+    let validationErrors = req.validationErrors();
+    if (validationErrors) throw validationErrors;
+
+    let group = await Group.getGroup({user, groupId: req.params.groupId, fields: 'type quest'});
+
+    if (!group) throw new NotFound(res.t('groupNotFound'));
+    if (group.type !== 'party') throw new NotAuthorized(res.t('guildQuestsNotSupported'));
+    if (!group.quest.key) throw new NotFound(res.t('questInviteNotFound'));
+
+    group.quest.members[user._id] = true;
+    user.party.quest.RSVPNeeded = false;
+
+    if (canStartQuestAutomatically(group)) {
+      await group.startQuest(user);
+    }
+
+    let [savedGroup] = await Q.all([
+      group.save(),
+      user.save(),
+    ]);
+
+    res.respond(200, savedGroup.quest);
+
+    // track that an user has accepted the quest
+    analytics.track('quest', {
+      category: 'behavior',
+      owner: false,
+      response: 'accept',
+      gaLabel: 'accept',
+      questName: group.quest.key,
+      uuid: user._id,
+    });
+  },
+};
+
 export default api;