eng-1702-invite-new-member

Author: maparent

apps/website/app/utils/supabase/account.ts

@@ -3,11 +3,11 @@ import type { DGSupabaseClient } from "@repo/database/lib/client";
 
 type AgentType = Database["public"]["Enums"]["AgentType"] | "group";
 
-export const getSessionUserData = async (
+export const getSessionBaseUserData = async (
   client: DGSupabaseClient,
 ): Promise<{
   id: string;
-  name: string;
+  name?: string;
   type: AgentType;
   email?: string;
 } | null> => {
@@ -33,16 +33,38 @@ export const getSessionUserData = async (
       return { name, id, email, type: "group" };
     }
   }
-  const accountReq = await client
-    .from("PlatformAccount")
-    .select("name")
-    .eq("dg_account", session.data.session.user.id)
-    .eq("agent_type", "person")
-    .maybeSingle();
-  if (accountReq.error || !accountReq.data) {
-    return null;
+  return { id, type: "person", email };
+};
+
+export const getSessionUserData = async (
+  client: DGSupabaseClient,
+): Promise<{
+  id: string;
+  name: string;
+  type: AgentType;
+  email?: string;
+} | null> => {
+  const data = await getSessionBaseUserData(client);
+  if (data === null) return null;
+  if (!data.name && data.type === "person") {
+    const accountReq = await client
+      .from("PlatformAccount")
+      .select("name")
+      .eq("dg_account", data.id)
+      .eq("agent_type", "person")
+      .maybeSingle();
+    if (accountReq.error || !accountReq.data?.name) {
+      return null;
+    }
+    return { ...data, name: accountReq.data.name };
   }
-  return { id, name: accountReq.data.name, type: "person", email };
+  if (data.name === undefined) return null;
+  return data as {
+    id: string;
+    name: string; // typescript is being dumb
+    type: AgentType;
+    email?: string;
+  };
 };
 
 export const getGroupMemberList = async (
@@ -80,3 +102,42 @@ export const getGroupMemberList = async (
     }[]
   );
 };
+
+export const createGroupInvitation = async ({
+  client,
+  groupId,
+  admin = false,
+}: {
+  client: DGSupabaseClient;
+  groupId: string;
+  admin: boolean;
+}): Promise<string | null> => {
+  const userData = await getSessionBaseUserData(client);
+  if (!userData) return null;
+  const membershipReq = await client
+    .from("group_membership")
+    .select("admin")
+    .eq("group_id", groupId)
+    .eq("member_id", userData.id)
+    .maybeSingle();
+  if (membershipReq.data?.admin !== true) return null;
+  const { data, error } = await client.rpc("create_secret_token", {
+    v_payload: JSON.stringify({ groupId, type: "groupInvitation", admin }),
+    expiry_interval: "60d",
+  });
+  if (error || !data) return null;
+  return data;
+};
+
+export const acceptGroupInvitation = async (
+  client: DGSupabaseClient,
+  token: string,
+): Promise<string | null> => {
+  const userData = await getSessionBaseUserData(client);
+  if (!userData) return "Not logged in";
+  const { data, error } = await client.rpc("accept_group_invitation", {
+    token,
+  });
+  if (error || !data) return "This token does not exist";
+  return null;
+};

packages/database/src/dbTypes.ts

@@ -1314,6 +1314,7 @@ export type Database = {
           isSetofReturn: false
         }
       }
+      accept_group_invitation: { Args: { token: string }; Returns: boolean }
       account_in_shared_space: {
         Args: {
           access_level?: Database["public"]["Enums"]["SpaceAccessPermissions"]

packages/database/supabase/migrations/20260512201942_accept_group_invite.sql

@@ -0,0 +1,23 @@
+CREATE OR REPLACE FUNCTION public.accept_group_invitation(token varchar) RETURNS boolean
+SET search_path = '' SECURITY DEFINER
+LANGUAGE plpgsql AS $$
+DECLARE
+    v_creator UUID;
+    token_info JSONB;
+    v_group_id UUID;
+    token_type varchar;
+    as_admin BOOLEAN;
+    is_admin BOOLEAN;
+BEGIN
+    BEGIN
+        SELECT creator INTO v_creator STRICT FROM public.secret_token WHERE id=token;
+        SELECT public.get_secret_token(token) INTO token_info STRICT;
+        SELECT (token_info->>'groupId')::UUID, token_info->>'type', (token_info->'admin')::boolean INTO v_group_id, token_type, as_admin STRICT;
+        SELECT admin INTO is_admin FROM public.group_membership WHERE member_id = v_creator AND group_id = v_group_id;
+        IF is_admin IS NOT true THEN RETURN false; END IF;
+        INSERT INTO public.group_membership (group_id, member_id, admin) VALUES (v_group_id, auth.uid(), as_admin);
+        RETURN true;
+    EXCEPTION WHEN OTHERS THEN RETURN false;
+    END;
+END;
+$$;

packages/database/supabase/schemas/account.sql

@@ -473,6 +473,30 @@ LANGUAGE sql AS $$
     SELECT pa.id, pa.name, pa.platform, pa.agent_type, gm.admin FROM public.my_accounts AS pa JOIN public.group_membership AS gm ON (pa.dg_account=gm.member_id) WHERE gm.group_id=p_group_id;
 $$;
 
+CREATE OR REPLACE FUNCTION public.accept_group_invitation(token varchar) RETURNS boolean
+SET search_path = '' SECURITY DEFINER
+LANGUAGE plpgsql AS $$
+DECLARE
+    v_creator UUID;
+    token_info JSONB;
+    v_group_id UUID;
+    token_type varchar;
+    as_admin BOOLEAN;
+    is_admin BOOLEAN;
+BEGIN
+    BEGIN
+        SELECT creator INTO v_creator STRICT FROM public.secret_token WHERE id=token;
+        SELECT public.get_secret_token(token) INTO token_info STRICT;
+        SELECT (token_info->>'groupId')::UUID, token_info->>'type', (token_info->'admin')::boolean INTO v_group_id, token_type, as_admin STRICT;
+        SELECT admin INTO is_admin FROM public.group_membership WHERE member_id = v_creator AND group_id = v_group_id;
+        IF is_admin IS NOT true THEN RETURN false; END IF;
+        INSERT INTO public.group_membership (group_id, member_id, admin) VALUES (v_group_id, auth.uid(), as_admin);
+        RETURN true;
+    EXCEPTION WHEN OTHERS THEN RETURN false;
+    END;
+END;
+$$;
+
 DROP POLICY IF EXISTS platform_account_policy ON public."PlatformAccount";
 
 DROP POLICY IF EXISTS platform_account_select_policy ON public."PlatformAccount";