Function getAuthContext

packages/web/src/middleware/withAuth.ts:64–112

()

};

export const getAuthContext = async (): Promise<OptionalAuthContext | ServiceError> => {
    const authResult = await getAuthenticatedUser();

    const org = await __unsafePrisma.org.findUnique({
        where: {
            id: SINGLE_TENANT_ORG_ID,
        }
    });

    if (!org) {
        return notFound("Organization not found");
    }

    const user = authResult?.user;

    const membership = user ? await __unsafePrisma.userToOrg.findUnique({
        where: {
            orgId_userId: {
                orgId: org.id,
                userId: user.id,
            },
        },
    }) : null;

    const role = membership?.role;

    if (
        env.DISABLE_API_KEY_USAGE_FOR_NON_OWNER_USERS === 'true' &&
        authResult?.source === 'api_key' &&
        role !== OrgRole.OWNER
    ) {
        return {
            statusCode: StatusCodes.FORBIDDEN,
            errorCode: ErrorCode.API_KEY_USAGE_DISABLED,
            message: "API key usage is disabled for non-admin users.",
        } satisfies ServiceError;
    }

    const prisma = __unsafePrisma.$extends(await userScopedPrismaClientExtension(user)) as PrismaClient;

    if (user) {
        updateUserLastActiveAt(user);
    }

    if (user && role) {
        return { user, org, role, prisma };
    }
    return { user, org, prisma };
};

const updateUserLastActiveAt = (user: UserWithAccounts) => {
    const now = Date.now();