Function addUserToOrganization

packages/web/src/lib/authUtils.ts:188–285

(userId: string, orgId: number)

}

export const addUserToOrganization = async (userId: string, orgId: number): Promise<{ success: boolean } | ServiceError> => {
    const user = await __unsafePrisma.user.findUnique({
        where: {
            id: userId,
        },
    });

    if (!user) {
        logger.error(`addUserToOrganization: user not found for id ${userId}`);
        return userNotFound();
    }

    const org = await __unsafePrisma.org.findUnique({
        where: {
            id: orgId,
        },
    });

    if (!org) {
        logger.error(`addUserToOrganization: org not found for id ${orgId}`);
        return orgNotFound();
    }

    const hasAvailability = await orgHasAvailability(org.id);
    if (!hasAvailability) {
        return {
            statusCode: StatusCodes.BAD_REQUEST,
            errorCode: ErrorCode.ORG_SEAT_COUNT_REACHED,
            message: "Organization is at max capacity",
        } satisfies ServiceError;
    }

    const hasOrgManagement = await hasEntitlement('org-management');

    await __unsafePrisma.$transaction(async (tx) => {
        // Upsert rather than create: the user may already be a member from the
        // self-serve auto-join in onCreateUser, in which case this call is
        // just here to trigger the AccountRequest / Invite cleanup below.
        await tx.userToOrg.upsert({
            where: {
                orgId_userId: {
                    orgId: org.id,
                    userId: user.id,
                },
            },
            create: {
                userId: user.id,
                orgId: org.id,
                role: hasOrgManagement ? OrgRole.MEMBER : OrgRole.OWNER,
            },
            update: {},
        });

        // Delete the account request if it exists since we've added the user to the org
        const accountRequest = await tx.accountRequest.findUnique({
            where: {
                requestedById_orgId: {
                    requestedById: user.id,