|
1 | 1 | import { randomUUID } from 'crypto' |
| 2 | +import { render } from '@react-email/render' |
2 | 3 | import { and, eq } from 'drizzle-orm' |
3 | 4 | import { type NextRequest, NextResponse } from 'next/server' |
| 5 | +import { WorkspaceInvitationEmail } from '@/components/emails/workspace-invitation' |
4 | 6 | import { getSession } from '@/lib/auth' |
| 7 | +import { sendEmail } from '@/lib/email/mailer' |
| 8 | +import { getFromEmailAddress } from '@/lib/email/utils' |
5 | 9 | import { env } from '@/lib/env' |
6 | 10 | import { hasWorkspaceAdminAccess } from '@/lib/permissions/utils' |
7 | 11 | import { db } from '@/db' |
@@ -48,6 +52,14 @@ export async function GET( |
48 | 52 | .then((rows) => rows[0]) |
49 | 53 |
|
50 | 54 | if (!invitation) { |
| 55 | + if (isAcceptFlow) { |
| 56 | + return NextResponse.redirect( |
| 57 | + new URL( |
| 58 | + `/invite/${invitationId}?error=invalid-token`, |
| 59 | + env.NEXT_PUBLIC_APP_URL || 'https://sim.ai' |
| 60 | + ) |
| 61 | + ) |
| 62 | + } |
51 | 63 | return NextResponse.json({ error: 'Invitation not found or has expired' }, { status: 404 }) |
52 | 64 | } |
53 | 65 |
|
@@ -234,3 +246,87 @@ export async function DELETE( |
234 | 246 | return NextResponse.json({ error: 'Failed to delete invitation' }, { status: 500 }) |
235 | 247 | } |
236 | 248 | } |
| 249 | + |
| 250 | +// POST /api/workspaces/invitations/[invitationId] - Resend a workspace invitation |
| 251 | +export async function POST( |
| 252 | + _req: NextRequest, |
| 253 | + { params }: { params: Promise<{ invitationId: string }> } |
| 254 | +) { |
| 255 | + const { invitationId } = await params |
| 256 | + const session = await getSession() |
| 257 | + |
| 258 | + if (!session?.user?.id) { |
| 259 | + return NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) |
| 260 | + } |
| 261 | + |
| 262 | + try { |
| 263 | + const invitation = await db |
| 264 | + .select() |
| 265 | + .from(workspaceInvitation) |
| 266 | + .where(eq(workspaceInvitation.id, invitationId)) |
| 267 | + .then((rows) => rows[0]) |
| 268 | + |
| 269 | + if (!invitation) { |
| 270 | + return NextResponse.json({ error: 'Invitation not found' }, { status: 404 }) |
| 271 | + } |
| 272 | + |
| 273 | + const hasAdminAccess = await hasWorkspaceAdminAccess(session.user.id, invitation.workspaceId) |
| 274 | + if (!hasAdminAccess) { |
| 275 | + return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 }) |
| 276 | + } |
| 277 | + |
| 278 | + if (invitation.status !== ('pending' as WorkspaceInvitationStatus)) { |
| 279 | + return NextResponse.json({ error: 'Can only resend pending invitations' }, { status: 400 }) |
| 280 | + } |
| 281 | + |
| 282 | + const ws = await db |
| 283 | + .select() |
| 284 | + .from(workspace) |
| 285 | + .where(eq(workspace.id, invitation.workspaceId)) |
| 286 | + .then((rows) => rows[0]) |
| 287 | + |
| 288 | + if (!ws) { |
| 289 | + return NextResponse.json({ error: 'Workspace not found' }, { status: 404 }) |
| 290 | + } |
| 291 | + |
| 292 | + const newToken = randomUUID() |
| 293 | + const newExpiresAt = new Date() |
| 294 | + newExpiresAt.setDate(newExpiresAt.getDate() + 7) |
| 295 | + |
| 296 | + await db |
| 297 | + .update(workspaceInvitation) |
| 298 | + .set({ token: newToken, expiresAt: newExpiresAt, updatedAt: new Date() }) |
| 299 | + .where(eq(workspaceInvitation.id, invitationId)) |
| 300 | + |
| 301 | + const baseUrl = env.NEXT_PUBLIC_APP_URL || 'https://sim.ai' |
| 302 | + const invitationLink = `${baseUrl}/invite/${invitationId}?token=${newToken}` |
| 303 | + |
| 304 | + const emailHtml = await render( |
| 305 | + WorkspaceInvitationEmail({ |
| 306 | + workspaceName: ws.name, |
| 307 | + inviterName: session.user.name || session.user.email || 'A user', |
| 308 | + invitationLink, |
| 309 | + }) |
| 310 | + ) |
| 311 | + |
| 312 | + const result = await sendEmail({ |
| 313 | + to: invitation.email, |
| 314 | + subject: `You've been invited to join "${ws.name}" on Sim`, |
| 315 | + html: emailHtml, |
| 316 | + from: getFromEmailAddress(), |
| 317 | + emailType: 'transactional', |
| 318 | + }) |
| 319 | + |
| 320 | + if (!result.success) { |
| 321 | + return NextResponse.json( |
| 322 | + { error: 'Failed to send invitation email. Please try again.' }, |
| 323 | + { status: 500 } |
| 324 | + ) |
| 325 | + } |
| 326 | + |
| 327 | + return NextResponse.json({ success: true }) |
| 328 | + } catch (error) { |
| 329 | + console.error('Error resending workspace invitation:', error) |
| 330 | + return NextResponse.json({ error: 'Failed to resend invitation' }, { status: 500 }) |
| 331 | + } |
| 332 | +} |
0 commit comments