myeasycms-v2/apps/web/app/join/page.tsx

import { notFound, redirect } from 'next/navigation';

import { Logger } from '@kit/shared/logger';
import { requireAuth } from '@kit/supabase/require-auth';
import { getSupabaseServerComponentClient } from '@kit/supabase/server-component-client';
import { AcceptInvitationContainer } from '@kit/team-accounts/components';

import pathsConfig from '~/config/paths.config';
import { withI18n } from '~/lib/i18n/with-i18n';

interface Context {
  searchParams: {
    invite_token: string;
  };
}

export const generateMetadata = () => {
  return {
    title: 'Join Team Account',
  };
};

async function JoinTeamAccountPage({ searchParams }: Context) {
  const token = searchParams.invite_token;

  // no token, redirect to 404
  if (!token) {
    notFound();
  }

  const client = getSupabaseServerComponentClient();
  const session = await requireAuth(client);

  // if the user is not logged in or there is an error
  // redirect to the sign up page with the invite token
  // so that they will get back to this page after signing up
  if (session.error ?? !session.data) {
    redirect(pathsConfig.auth.signUp + '?invite_token=' + token);
  }

  // the user is logged in, we can now check if the token is valid
  const invitation = await getInviteDataFromInviteToken(token);

  if (!invitation) {
    notFound();
  }

  // we need to verify the user isn't already in the account
  const isInAccount = await isCurrentUserAlreadyInAccount(
    invitation.account.id,
  );

  if (isInAccount) {
    Logger.warn(
      {
        name: 'join-team-account',
        accountId: invitation.account.id,
        userId: session.data.user.id,
      },
      'User is already in the account. Redirecting to account page.',
    );

    // if the user is already in the account redirect to the home page
    redirect(pathsConfig.app.home);
  }

  // if the user decides to sign in with a different account
  // we redirect them to the sign in page with the invite token
  const signOutNext = pathsConfig.auth.signIn + '?invite_token=' + token;

  // once the user accepts the invitation, we redirect them to the account home page
  const accountHome = pathsConfig.app.accountHome.replace(
    '[account]',
    invitation.account.slug,
  );

  return (
    <AcceptInvitationContainer
      inviteToken={token}
      invitation={invitation}
      paths={{
        signOutNext,
        accountHome,
      }}
    />
  );
}

export default withI18n(JoinTeamAccountPage);

/**
 * Verifies that the current user is not already in the account by
 * reading the document from the `accounts` table. If the user can read it
 * it means they are already in the account.
 * @param accountId
 */
async function isCurrentUserAlreadyInAccount(accountId: string) {
  const client = getSupabaseServerComponentClient();

  const { data } = await client
    .from('accounts')
    .select('id')
    .eq('id', accountId)
    .maybeSingle();

  return !!data?.id;
}

async function getInviteDataFromInviteToken(token: string) {
  // we use an admin client to be able to read the pending membership
  // without having to be logged in
  const adminClient = getSupabaseServerComponentClient({ admin: true });

  const { data: invitation, error } = await adminClient
    .from('invitations')
    .select<
      string,
      {
        id: string;
        account: {
          id: string;
          name: string;
          slug: string;
          picture_url: string;
        };
      }
    >('id, account: account_id !inner (id, name, slug, picture_url)')
    .eq('invite_token', token)
    .single();

  if (!invitation ?? error) {
    return null;
  }

  return invitation;
}