@nuxt-customer-portal/organizations 0.3.0

package/server/api/organizations/get-invitation.get.ts

@@ -0,0 +1,73 @@
+import { defineEventHandler, createError, getQuery } from 'h3'
+import { db } from '@nuxt-customer-portal/core/server/utils/db'
+import {
+  invitation as invitationTable,
+  organization as organizationTable
+} from '@nuxt-customer-portal/core/server/db/schema/auth-schema'
+import { eq } from 'drizzle-orm'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['General'],
+    operationId: 'generalOrganizationsGetInvitationGet',
+    summary: 'Get an organization invitation',
+    description:
+      'Get an organization invitation. Uses the current authenticated session and enforces the relevant portal permissions.'
+  }
+})
+
+/**
+ * Custom endpoint to get invitation details, bypassing Better Auth's inviter membership check.
+ * This is necessary because admins who create organizations and invite owners
+ * are removed as members, but their invitations should still be accessible.
+ *
+ * This endpoint is public (no authentication required) so users can view invitation
+ * details before signing up or logging in.
+ */
+export default defineEventHandler(async (event) => {
+  const query = getQuery(event)
+  const invitationId = query.id as string | undefined
+
+  if (!invitationId) {
+    throw createError({ statusCode: 400, message: 'Invitation ID is required' })
+  }
+
+  try {
+    // Fetch the invitation
+    const [invitation] = await db.select().from(invitationTable).where(eq(invitationTable.id, invitationId)).limit(1)
+
+    if (!invitation) {
+      throw createError({ statusCode: 404, message: 'Invitation not found' })
+    }
+
+    // Get organization details
+    const [organization] = await db
+      .select()
+      .from(organizationTable)
+      .where(eq(organizationTable.id, invitation.organizationId))
+      .limit(1)
+
+    if (!organization) {
+      throw createError({ statusCode: 404, message: 'Organization not found' })
+    }
+
+    // Return invitation data in the same format as Better Auth's getInvitation
+    return {
+      id: invitation.id,
+      organizationId: invitation.organizationId,
+      email: invitation.email,
+      role: invitation.role,
+      status: invitation.status,
+      expiresAt: invitation.expiresAt,
+      inviterId: invitation.inviterId,
+      organizationName: organization.name,
+      organizationSlug: organization.slug
+    }
+  } catch (err: unknown) {
+    if (err instanceof Error && 'statusCode' in err) {
+      throw err
+    }
+    const errorMessage = err instanceof Error ? err.message : 'Failed to fetch invitation'
+    throw createError({ statusCode: 500, message: errorMessage })
+  }
+})

package/server/api/profile.patch.ts

@@ -0,0 +1,99 @@
+import { defineEventHandler, createError, readBody } from 'h3'
+import { z } from 'zod'
+import { auth } from '@nuxt-customer-portal/core/server/utils/auth'
+import { db } from '@nuxt-customer-portal/core/server/utils/db'
+import { user as userTable } from '@nuxt-customer-portal/core/server/db/schema/auth-schema'
+import { eq } from 'drizzle-orm'
+import type { SessionUser } from '@nuxt-customer-portal/core/shared/types/index'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['General'],
+    operationId: 'generalProfilePatch',
+    summary: 'Update the current user profile',
+    description:
+      'Update the current user profile. Uses the current authenticated session and enforces the relevant portal permissions.'
+  }
+})
+
+// Zod schema for profile update request
+const updateProfileSchema = z
+  .object({
+    name: z
+      .string()
+      .trim()
+      .min(1, 'Name must be a non-empty string')
+      .max(255, 'Name must be less than 255 characters')
+      .optional(),
+    image: z
+      .union([z.string().url('Image must be a valid URL'), z.literal('').transform(() => null), z.null()])
+      .optional()
+  })
+  .refine((data) => data.name !== undefined || data.image !== undefined, {
+    message: 'At least one field (name or image) must be provided'
+  })
+
+interface UpdateProfileResponse {
+  success: boolean
+  message: string
+  user?: {
+    id: string
+    name: string
+    email: string
+    image: string | null
+  }
+}
+
+export default defineEventHandler(async (event): Promise<UpdateProfileResponse> => {
+  const session = await auth.api.getSession({ headers: event.headers })
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: 'Unauthorized' })
+  }
+
+  const user = session.user as SessionUser
+  const body = await readBody(event)
+
+  // Validate request body with Zod
+  const validationResult = updateProfileSchema.safeParse(body)
+  if (!validationResult.success) {
+    const firstError = validationResult.error.issues[0]
+    throw createError({
+      statusCode: 400,
+      message: firstError?.message || 'Validation failed'
+    })
+  }
+
+  const validatedData = validationResult.data
+
+  // Build update object
+  const updateData: { name?: string; image?: string | null } = {}
+  if (validatedData.name !== undefined) {
+    updateData.name = validatedData.name.trim()
+  }
+  if (validatedData.image !== undefined) {
+    updateData.image = validatedData.image
+  }
+
+  // Update user in database
+  const [updatedUser] = await db.update(userTable).set(updateData).where(eq(userTable.id, user.id)).returning({
+    id: userTable.id,
+    name: userTable.name,
+    email: userTable.email,
+    image: userTable.image
+  })
+
+  if (!updatedUser) {
+    throw createError({ statusCode: 500, message: 'Failed to update profile' })
+  }
+
+  return {
+    success: true,
+    message: 'Profile updated successfully',
+    user: {
+      id: updatedUser.id,
+      name: updatedUser.name,
+      email: updatedUser.email,
+      image: updatedUser.image
+    }
+  }
+})

package/shared/feature.ts

@@ -0,0 +1,24 @@
+import type { PortalFeatureDefinition } from '@nuxt-customer-portal/core/shared/types/feature'
+
+export const accountOrganizationsFeature: PortalFeatureDefinition = {
+  id: 'organizations',
+  navigation: [
+    {
+      id: 'my-organizations',
+      labelKey: 'myOrganizations.title',
+      icon: 'i-lucide-building',
+      to: '/my-organizations',
+      audiences: ['authenticated'],
+      order: 80
+    },
+    {
+      id: 'settings',
+      labelKey: 'menu.settings.title',
+      icon: 'i-lucide-settings',
+      to: '/settings',
+      audiences: ['authenticated'],
+      order: 90
+    }
+  ],
+  policy: { owner: [], admin: [], member: [] }
+}