Function _require_org

api/orgs.py:124–135

Resolve the caller's org from their JWT. The org_id never comes from the request.

(user: AuthUser)

async def _require_org(user: AuthUser) -> tuple[str, dict]:
    """Resolve the caller's org from their JWT. The org_id never comes from the request."""
    org_id = (user.app_metadata or {}).get("org_id")
    if not org_id:
        raise HTTPException(status_code=403, detail="You are not a member of an organization.")

    org, _ = await r2_store.get_json(r2_store.org_key(org_id))
    if not org:
        logger.error(f"User {user.id} has org_id {org_id} but no org record exists")
        raise HTTPException(status_code=404, detail="Organization not found.")

    return org_id, org


def _send_invite_email(email: str, org_name: str, token: str) -> None: