Function manageRouter

apps/api/src/routes/manage.router.ts:20–197

(fastify)

const idParam = z.object({ id: z.string() });

const manageRouter: FastifyPluginAsyncZodOpenApi = async (fastify) => {
  await activateRateLimiter({
    fastify,
    max: 20,
    timeWindow: '10 seconds',
  });

  fastify.addHook('preHandler', async (req: FastifyRequest, reply) => {
    try {
      const client = await validateManageRequest(req.headers);
      req.client = client;
    } catch (e) {
      if (e instanceof Prisma.PrismaClientKnownRequestError) {
        return reply.status(401).send({
          error: 'Unauthorized',
          message: 'Client ID seems to be malformed',
        });
      }

      if (e instanceof Error) {
        return reply
          .status(401)
          .send({ error: 'Unauthorized', message: e.message });
      }

      return reply
        .status(401)
        .send({ error: 'Unauthorized', message: 'Unexpected error' });
    }

    // Validate :projectId URL param belongs to this client's organization.
    const client = req.client!;
    const params = req.params as { projectId?: string };
    if (params.projectId) {
      try {
        await resolveClientProjectId({
          clientType: 'root',
          clientProjectId: null,
          organizationId: client.organizationId,
          inputProjectId: params.projectId,
        });
      } catch {
        return reply.status(403).send({ error: 'Forbidden', message: 'Project does not belong to your organization' });
      }
    }
  });

  // Projects routes
  fastify.route({
    method: 'GET',
    url: '/projects',
    schema: { tags: ['Manage'], description: 'List all projects for the organization.' },
    handler: controller.listProjects,
  });

  fastify.route({
    method: 'GET',
    url: '/projects/:id',