Function postAdClick

web/src/app/api/v1/ads/click/_post.ts:23–125

(params: {
  req: NextRequest
  getUserInfoFromApiKey: GetUserInfoFromApiKeyFn
  logger: Logger
  loggerWithContext: LoggerWithContextFn
  trackEvent: TrackEventFn
})

})

export async function postAdClick(params: {
  req: NextRequest
  getUserInfoFromApiKey: GetUserInfoFromApiKeyFn
  logger: Logger
  loggerWithContext: LoggerWithContextFn
  trackEvent: TrackEventFn
}) {
  const { req, getUserInfoFromApiKey, loggerWithContext, trackEvent } = params
  const baseLogger = params.logger

  let impUrl: string
  let surface: z.infer<typeof bodySchema>['surface']
  try {
    const json = await req.json()
    const parsed = bodySchema.safeParse(json)
    if (!parsed.success) {
      return NextResponse.json(
        { error: 'Invalid request body', details: parsed.error.format() },
        { status: 400 },
      )
    }
    impUrl = parsed.data.impUrl
    surface = parsed.data.surface
  } catch {
    return NextResponse.json(
      { error: 'Invalid JSON in request body' },
      { status: 400 },
    )
  }

  const authed = await requireUserFromApiKey({
    req,
    getUserInfoFromApiKey,
    logger: baseLogger,
    loggerWithContext,
    trackEvent,
    authErrorEvent: AnalyticsEvent.ADS_API_AUTH_ERROR,
  })
  if (!authed.ok) return authed.response

  const { userId, logger } = authed.data

  const adRecord = await db.query.adImpression.findFirst({
    where: eq(schema.adImpression.imp_url, impUrl),
  })

  if (!adRecord || adRecord.user_id !== userId) {
    logger.warn(
      {
        userId,
        adUserId: adRecord?.user_id,
        impUrl,
      },
      '[ads] Ad click not found for user',
    )
    return NextResponse.json(
      { success: false, error: 'Ad not found' },
      { status: 404 },