Function createOrganizationsRouter

server/src/routes/organizations.ts:68–3954

()

 * Returns a router for API routes (/api/organizations/*)
 */
export function createOrganizationsRouter(): Router {
  const router = Router();

  // =========================================================================
  // ORGANIZATION SEARCH & DISCOVERY
  // =========================================================================

  // GET /api/organizations/search - Search for organizations by name
  // Used in the "find your company" feature during onboarding
  router.get('/search', requireAuth, async (req, res) => {
    try {
      const user = req.user!;
      const query = (req.query.q as string) || '';

      if (!query || query.trim().length < 2) {
        return res.json({ organizations: [], user_domain: getCompanyDomain(user.email) });
      }

      const joinRequestDb = new JoinRequestDatabase();

      // Get user's current org memberships to exclude
      const userMemberships = await workos!.userManagement.listOrganizationMemberships({
        userId: user.id,
      });
      const userOrgIds = userMemberships.data.map(m => m.organizationId);

      // Get user's pending join requests
      const pendingRequests = await joinRequestDb.getUserPendingRequests(user.id);
      const pendingOrgIds = new Set(pendingRequests.map(r => r.workos_organization_id));

      // Search organizations
      const results = await orgDb.searchOrganizations({
        query: query.trim(),
        excludeOrgIds: userOrgIds,
        limit: 10,
      });

      // Get admin contact info for each org (masked)
      const orgsWithAdmins = await Promise.all(
        results.map(async (org) => {
          let adminContact: string | null = null;
          try {
            const memberships = await workos!.userManagement.listOrganizationMemberships({
              organizationId: org.workos_organization_id,
            });

            // Find an admin or owner
            const adminMembership = memberships.data.find(m => {
              const role = m.role?.slug || 'member';
              return role === 'admin' || role === 'owner';
            });

            if (adminMembership) {
              const adminUser = await workos!.userManagement.getUser(adminMembership.userId);
              // Mask the email: "j***@company.com"
              const email = adminUser.email;
              const [local, domain] = email.split('@');
              adminContact = `${local[0]}***@${domain}`;