Function handler

pages/api/join-org.ts:40–85

(req: NextRequest)

};

export default async function handler(req: NextRequest) {
  if (req.method !== "POST") {
    return new Response(
      JSON.stringify({
        error: "Only POST requests allowed",
      }),
      { status: 405, headers },
    );
  }
  if (!isValidBody<JoinOrgType>(req.body, JoinOrgZod)) {
    return new Response(JSON.stringify({ message: "Invalid request body" }), {
      status: 400,
      headers,
    });
  }
  const { session } = await getSessionFromCookie(req);
  if (!session) {
    return new Response(JSON.stringify({ error: "Unauthorized" }), {
      status: 401,
      headers,
    });
  }

  const { data, error } = await supabase
    .from("organizations")
    .select("id")
    .eq("join_link_id", req.body.join_id);
  if (error) throw new Error(error.message);
  if (data === null) {
    throw new Error("No data returned from organizations insert");
  }

  const profileResp = await supabase
    .from("profiles")
    .update({ org_id: data[0].id })
    .eq("id", session.user.id)
    .select();
  if (profileResp.error) throw profileResp.error;
  if (profileResp.data === null)
    throw new Error("No data returned from profiles update");

  return new Response(JSON.stringify({ success: true }), {
    status: 200,
    headers,
  });
}