Function withReferralsEmbedToken

apps/web/lib/embed/referrals/auth.ts:33–134

(
  handler: WithReferralsEmbedTokenHandler,
)

}

export const withReferralsEmbedToken = (
  handler: WithReferralsEmbedTokenHandler,
) => {
  return withAxiom(
    async (
      req,
      { params: initialParams }: { params: Promise<Record<string, string>> },
    ) => {
      const params = (await initialParams) || {};
      const requestHeaders = await headers();
      let responseHeaders = new Headers();

      try {
        const rateLimit = 60;
        const searchParams = getSearchParams(req.url);
        const embedToken = requestHeaders.get("Authorization")?.split(" ")[1];

        if (!embedToken) {
          throw new DubApiError({
            code: "unauthorized",
            message: "Embed public token not found in the request.",
          });
        }

        const { programId, partnerId } =
          (await referralsEmbedToken.get(embedToken)) ?? {};

        if (!programId || !partnerId) {
          throw new DubApiError({
            code: "unauthorized",
            message: "Invalid embed public token.",
          });
        }

        const { success, limit, reset, remaining } = await ratelimit(
          rateLimit,
          "1 m",
        ).limit(embedToken);

        responseHeaders.set("Retry-After", reset.toString());
        responseHeaders.set("X-RateLimit-Limit", limit.toString());
        responseHeaders.set("X-RateLimit-Remaining", remaining.toString());
        responseHeaders.set("X-RateLimit-Reset", reset.toString());

        if (!success) {
          throw new DubApiError({
            code: "rate_limit_exceeded",
            message: "Too many requests.",
          });
        }

        const { program, links, partnerGroup, ...programEnrollment } =
          await prisma.programEnrollment.findUniqueOrThrow({
            where: {
              partnerId_programId: {
                partnerId,
                programId,
              },