npm - @stamhoofd/backend - Versions diffs - 2.120.6 → 2.122.0 - Mend

@stamhoofd/backend 2.120.6 → 2.122.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (434) hide show

package/src/endpoints/organization/dashboard/billing/OrganizationCheckoutEndpoint.ts ADDED Viewed

@@ -0,0 +1,311 @@
+import type { Decoder } from '@simonbackx/simple-encoding';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
+import { Endpoint, Response } from '@simonbackx/simple-endpoints';
+import { SimpleError } from '@simonbackx/simple-errors';
+import { BalanceItem, Organization, Platform, STPackage } from '@stamhoofd/models';
+import { BalanceItemStatus, BalanceItemType, CheckoutResponse, OrganizationCheckout, OrganizationPackagesStatus, STPackageStruct } from '@stamhoofd/structures';
+import { CreateMandateSettings } from '@stamhoofd/structures/checkout/CreateMandateSettings.js';
+import { AuthenticatedStructures } from '../../../../helpers/AuthenticatedStructures.js';
+import { Context } from '../../../../helpers/Context.js';
+import { BalanceItemService } from '../../../../services/BalanceItemService.js';
+import { PaymentService } from '../../../../services/PaymentService.js';
+import { STPackageService } from '../../../../services/STPackageService.js';
+import { VATService } from '../../../../services/VATService.js';
+type Params = { sellingOrganizationId: string };
+type Query = undefined;
+type Body = OrganizationCheckout;
+type ResponseBody = CheckoutResponse;
+/**
+ * B2B billing (outstanding amount) and activating packages
+ */
+export class OrganizationCheckoutEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
+    bodyDecoder = OrganizationCheckout as Decoder<Body>;
+    protected doesMatch(request: Request): [true, Params] | [false] {
+        if (request.method !== 'POST') {
+            return [false];
+        }
+        const params = Endpoint.parseParameters(request.url, '/billing/@sellingOrganizationId/checkout', { sellingOrganizationId: String });
+        if (params) {
+            return [true, params as Params];
+        }
+        return [false];
+    }
+    async handle(request: DecodedRequest<Params, Query, Body>) {
+        const organization = await Context.setOrganizationScope();
+        const { user } = await Context.authenticate();
+        // If the user has permission, we'll also search if he has access to the organization's key
+        if (!await Context.auth.canActivatePackages(organization.id)) {
+            throw Context.auth.error();
+        }
+        const checkout = request.body;
+        const id = request.params.sellingOrganizationId;
+        if (!id) {
+            throw new SimpleError({
+                code: 'unavailable',
+                message: 'This is temporarily unavailable',
+                human: $t('%1Rz'),
+            });
+        }
+        const sellingOrganization = await Organization.getByID(id);
+        if (!sellingOrganization || !sellingOrganization.active) {
+            throw new SimpleError({
+                statusCode: 404,
+                code: 'not_found',
+                message: 'Selling organization not found',
+                human: $t('%1R5'),
+                field: 'sellingOrganization',
+            });
+        }
+        if (sellingOrganization.id === organization.id) {
+            throw new SimpleError({
+                code: 'unavailable',
+                message: 'Cannot purchase from yourself',
+            });
+        }
+        const packages: STPackageStruct[] = [];
+        const models: STPackage[] = [];
+        const balanceItems: Map<BalanceItem, number> = new Map();
+        const membershipOrganizationId = (await Platform.getShared()).membershipOrganizationId;
+        if (STAMHOOFD.userMode === 'organization' && sellingOrganization.id === membershipOrganizationId) {
+            const currentPackages = await STPackageService.getActivePackages(organization.id);
+            const packageStatus = OrganizationPackagesStatus.create({
+                packages: currentPackages.map(p => STPackageStruct.create(p)),
+            });
+            packages.push(...checkout.purchases.getPackages(packageStatus));
+        }
+        // Create the real models for each package
+        // calculate the price for these packages and create a hidden balance item
+        for (const pack of packages) {
+            const model = new STPackage();
+            model.id = pack.id;
+            model.meta = pack.meta;
+            model.validUntil = pack.validUntil;
+            model.removeAt = pack.removeAt;
+            // Not yet valid / active (ignored until valid)
+            model.validAt = null;
+            model.organizationId = organization.id;
+            if (request.body.proForma) {
+                // Security addition
+                model.disableSave();
+            }
+            const balanceItem = await STPackageService.chargePackage(model, sellingOrganization, checkout.customer?.company);
+            if (balanceItem) {
+                balanceItem.VATExcempt = VATService.getVATExcempt({
+                    company: checkout.customer?.company,
+                    sellingOrganization,
+                    type: 'services',
+                });
+                balanceItems.set(balanceItem, balanceItem.priceWithVAT);
+            }
+            if (!request.body.proForma) {
+                await model.save();
+                await balanceItem?.save();
+            } else {
+                // Security addition
+                if (balanceItem && balanceItem.id) {
+                    throw new Error('Unexpected balance item save');
+                }
+                balanceItem?.disableSave();
+            }
+            models.push(model);
+            if (model.meta.requiresMandate) {
+                if (checkout.proForma) {
+                    if (!checkout.createMandate) {
+                        checkout.createMandate = CreateMandateSettings.create({ saveAsDefault: true });
+                    }
+                } else {
+                    // setting checkout.mandate is not enough - we also need to set it as default.
+                    if (!checkout.createMandate) {
+                        throw new SimpleError({
+                            code: '',
+                            message: $t('%1Rh'),
+                        });
+                    }
+                    if (!checkout.createMandate.saveAsDefault) {
+                        throw new SimpleError({
+                            code: '',
+                            message: $t('%1Qp'),
+                        });
+                    }
+                }
+            }
+        }
+        // Add pending items (balance items in request)
+        // Update balances before we start
+        await BalanceItemService.flushCaches(organization.id);
+        // Validate balance items (can only happen serverside)
+        const balanceItemIds = [...request.body.balances.keys()];
+        if (balanceItemIds.length > 0) {
+            const balanceItemsModels = await BalanceItem.select().where('id', balanceItemIds).andWhere('organizationId', sellingOrganization.id).limit(balanceItemIds.length).fetch();
+            if (balanceItemsModels.length !== balanceItemIds.length) {
+                throw new SimpleError({
+                    code: 'balance_changed',
+                    message: $t(`%vg`),
+                });
+            }
+            for (const [id, amount] of request.body.balances) {
+                if (amount === 0) {
+                    continue;
+                }
+                const item = balanceItemsModels.find(b => b.id === id);
+                if (!item) {
+                    throw new SimpleError({
+                        code: 'balance_changed',
+                        message: $t(`%vg`),
+                    });
+                }
+                if (item.priceOpen === 0) {
+                    throw new SimpleError({
+                        code: 'balance_changed',
+                        message: $t(`%vg`),
+                    });
+                }
+                if (item.priceOpen > 0 && amount < 0 || amount > item.priceOpen) {
+                    throw new SimpleError({
+                        code: 'balance_changed',
+                        message: $t(`%vg`),
+                    });
+                }
+                if (item.priceOpen < 0 && amount > 0 || amount < item.priceOpen) {
+                    throw new SimpleError({
+                        code: 'balance_changed',
+                        message: $t(`%vg`),
+                    });
+                }
+                balanceItems.set(item, amount);
+            }
+        }
+        // If still zero payment
+        let { price: totalPrice, roundingAmount } = PaymentService.calculateTotalPrice({
+            balanceItems,
+            organization: sellingOrganization,
+        });
+        const minimumAmount = checkout.createMandate && !checkout.mandate ? 2_00 : 0;
+        // Automatically add discounts
+        await BalanceItemService.applyDiscountsToCheckout({
+            totalPrice: totalPrice - roundingAmount,
+            minimumAmount,
+            balanceItems,
+            sellingOrganizationId: sellingOrganization.id,
+            payingOrganizationId: organization.id,
+        });
+        // Update price and rounding
+        ({ price: totalPrice, roundingAmount } = PaymentService.calculateTotalPrice({
+            balanceItems,
+            organization: sellingOrganization,
+        }));
+        if (totalPrice < minimumAmount) {
+            const item = new BalanceItem();
+            item.type = BalanceItemType.AdministrationFee;
+            item.description = $t('%1Q4');
+            item.payingOrganizationId = organization.id;
+            item.organizationId = sellingOrganization.id;
+            item.VATPercentage = 21;
+            item.VATExcempt = VATService.getVATExcempt({
+                company: checkout.customer?.company,
+                sellingOrganization,
+                type: 'services',
+            });
+            item.VATIncluded = !item.VATExcempt; // Makes sure price with VAT always matches unitPrice
+            item.quantity = 1;
+            item.unitPrice = minimumAmount - (totalPrice - roundingAmount);
+            item.createdAt = new Date();
+            item.status = BalanceItemStatus.Hidden;
+            if (!request.body.proForma) {
+                await item.save();
+            } else {
+                item.disableSave();
+            }
+            balanceItems.set(item, item.priceWithVAT);
+        }
+        if (checkout.proForma) {
+            const result = await PaymentService.createProForma({
+                balanceItems,
+                checkout,
+                user,
+                organization: sellingOrganization,
+                payingOrganization: organization,
+            });
+            return new Response(CheckoutResponse.create({
+                payment: result.payment,
+                invoice: result.invoice,
+            }));
+        }
+        const result = await PaymentService.createPayment({
+            balanceItems,
+            checkout,
+            user,
+            organization: sellingOrganization,
+            payingOrganization: organization,
+            serviceFeeType: 'system',
+            createMandate: checkout.createMandate,
+            useMandate: checkout.mandate,
+            paymentConfiguration: sellingOrganization.meta.registrationPaymentConfiguration,
+            privatePaymentConfiguration: sellingOrganization.privateMeta.registrationPaymentConfiguration,
+        });
+        if (!result) {
+            // No payment needed
+            throw new SimpleError({
+                code: 'missing_data',
+                message: 'Checkout was empty',
+                human: $t('%1L2'),
+            });
+        }
+        for (const pack of models) {
+            await pack.save();
+        }
+        const { payment, paymentUrl, paymentQRCode } = result;
+        return new Response(CheckoutResponse.create({
+            payment: payment ? await AuthenticatedStructures.paymentGeneral(payment) : null,
+            paymentUrl,
+            paymentQRCode,
+        }));
+    }
+    setPayment;
+}

package/src/endpoints/organization/dashboard/billing/PatchOrganizationMandatesEndpoint.ts ADDED Viewed

@@ -0,0 +1,94 @@
+import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder } from '@simonbackx/simple-encoding';
+import { PatchableArrayDecoder, StringDecoder } from '@simonbackx/simple-encoding';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
+import { Endpoint, Response } from '@simonbackx/simple-endpoints';
+import { SimpleError } from '@simonbackx/simple-errors';
+import { Organization } from '@stamhoofd/models';
+import { PaymentMandate } from '@stamhoofd/structures/PaymentMandate.js';
+import { Context } from '../../../../helpers/Context.js';
+import { PaymentMandateService } from '../../../../services/PaymentMandateService.js';
+type Params = { sellingOrganizationId: string };
+type Query = undefined;
+type Body = PatchableArrayAutoEncoder<PaymentMandate>;
+type ResponseBody = PaymentMandate[];
+export class DeleteOrganizationMandateEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
+    bodyDecoder = new PatchableArrayDecoder(
+        PaymentMandate as Decoder<PaymentMandate>,
+        PaymentMandate.patchType() as Decoder<AutoEncoderPatchType<PaymentMandate>>,
+        StringDecoder,
+    ) as Decoder<PatchableArrayAutoEncoder<PaymentMandate>>;
+    protected doesMatch(request: Request): [true, Params] | [false] {
+        if (request.method !== 'PATCH') {
+            return [false];
+        }
+        const params = Endpoint.parseParameters(request.url, '/billing/@sellingOrganizationId/mandates', { sellingOrganizationId: String });
+        if (params) {
+            return [true, params as Params];
+        }
+        return [false];
+    }
+    async handle(request: DecodedRequest<Params, Query, Body>) {
+        const payingOrganization = await Context.setOrganizationScope();
+        const { user } = await Context.authenticate();
+        const id = request.params.sellingOrganizationId;
+        if (!id) {
+            throw new SimpleError({
+                code: 'unavailable',
+                message: 'This is temporarily unavailable',
+                human: $t('%1Rz'),
+            });
+        }
+        const sellingOrganization = await Organization.getByID(id);
+        if (!sellingOrganization || !sellingOrganization.active) {
+            throw new SimpleError({
+                statusCode: 404,
+                code: 'not_found',
+                message: 'Selling organization not found',
+                human: $t('%1R5'),
+                field: 'sellingOrganization',
+            });
+        }
+        const mandates = await PaymentMandateService.getMandates({
+            sellingOrganization,
+            user,
+            payingOrganization,
+        });
+        for (const patch of request.body.getPatches()) {
+            const mandate = mandates.find(m => m.id === patch.id);
+            if (!mandate) {
+                throw new SimpleError({
+                    code: 'not_found',
+                    message: 'This payment mandate is not found',
+                    human: $t('%1R8'),
+                });
+            }
+            if (patch.isDefault === true) {
+                await PaymentMandateService.setDefaultMandate({
+                    mandateId: mandate.id,
+                    sellingOrganizationId: sellingOrganization.id,
+                    payingOrganizationId: payingOrganization,
+                    payingUserId: null,
+                });
+            }
+        }
+        const updatedMandates = await PaymentMandateService.getMandates({
+            sellingOrganization,
+            user,
+            payingOrganization,
+        });
+        return new Response(PaymentMandateService.groupByMandate(updatedMandates).mandates);
+    }
+}

package/src/endpoints/organization/dashboard/documents/GetDocumentTemplateXML.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { DocumentTemplate } from '@stamhoofd/models';

package/src/endpoints/organization/dashboard/documents/GetDocumentTemplatesCountEndpoint.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import type { Decoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { CountFilteredRequest, CountResponse } from '@stamhoofd/structures';

package/src/endpoints/organization/dashboard/documents/GetDocumentTemplatesEndpoint.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { DocumentTemplate } from '@stamhoofd/models';
 import type { CountFilteredRequest, DocumentTemplatePrivate, StamhoofdFilter } from '@stamhoofd/structures';

package/src/endpoints/organization/dashboard/documents/GetDocumentsCountEndpoint.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import type { Decoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { CountFilteredRequest, CountResponse } from '@stamhoofd/structures';

package/src/endpoints/organization/dashboard/documents/GetDocumentsEndpoint.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { Document } from '@stamhoofd/models';
 import type { CountFilteredRequest, Document as DocumentStruct, StamhoofdFilter } from '@stamhoofd/structures';

package/src/endpoints/organization/dashboard/documents/PatchDocumentEndpoint.ts CHANGED Viewed

@@ -1,6 +1,6 @@
-import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder} from '@simonbackx/simple-encoding';
+import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder } from '@simonbackx/simple-encoding';
 import { PatchableArrayDecoder, StringDecoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { Document, DocumentTemplate, Member, Registration } from '@stamhoofd/models';
@@ -45,6 +45,14 @@ export class PatchDocumentEndpoint extends Endpoint<Params, Query, Body, Respons
                 throw Context.auth.notFoundOrNoAccess($t(`%EK`));
             }
+            if (document.isLocked) {
+                throw new SimpleError({
+                    code: 'locked',
+                    message: 'Document is locked',
+                    human: $t(`%1Uc`),
+                });
+            }
             if (patch.data) {
                 document.data.patchOrPut(patch.data);
             }

package/src/endpoints/organization/dashboard/documents/PatchDocumentTemplatesEndpoint.test.ts CHANGED Viewed

@@ -1,7 +1,7 @@
 import { PatchableArray } from '@simonbackx/simple-encoding';
-import type { Endpoint} from '@simonbackx/simple-endpoints';
+import type { Endpoint } from '@simonbackx/simple-endpoints';
 import { Request } from '@simonbackx/simple-endpoints';
-import type { Organization, RegistrationPeriod, User} from '@stamhoofd/models';
+import type { Organization, RegistrationPeriod, User } from '@stamhoofd/models';
 import { DocumentTemplate, DocumentTemplateFactory, OrganizationFactory, RegistrationPeriodFactory, Token, UserFactory } from '@stamhoofd/models';
 import { SQL } from '@stamhoofd/sql';
 import { DocumentPrivateSettings, DocumentStatus, DocumentTemplateDefinition, DocumentTemplatePrivate, PermissionLevel, Permissions } from '@stamhoofd/structures';

package/src/endpoints/organization/dashboard/documents/PatchDocumentTemplatesEndpoint.ts CHANGED Viewed

@@ -1,6 +1,6 @@
-import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder} from '@simonbackx/simple-encoding';
+import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder } from '@simonbackx/simple-encoding';
 import { PatchableArrayDecoder, StringDecoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { DocumentTemplate } from '@stamhoofd/models';

package/src/endpoints/organization/dashboard/email/CheckEmailBouncesEndpoint.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import { ArrayDecoder, StringDecoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { EmailAddress } from '@stamhoofd/email';

package/src/endpoints/organization/dashboard/email-templates/GetEmailTemplatesEndpoint.test.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import { Request } from '@simonbackx/simple-endpoints';
-import type { Organization, RegistrationPeriod} from '@stamhoofd/models';
+import type { Organization, RegistrationPeriod } from '@stamhoofd/models';
 import { EmailTemplate, GroupFactory, OrganizationFactory, Platform, RegistrationPeriodFactory, Token, UserFactory } from '@stamhoofd/models';
 import { EmailTemplateType, PermissionLevel, PermissionRoleDetailed, Permissions, PermissionsResourceType, ResourcePermissions, Version } from '@stamhoofd/structures';
 import { TestUtils } from '@stamhoofd/test-utils';

package/src/endpoints/organization/dashboard/email-templates/GetEmailTemplatesEndpoint.ts CHANGED Viewed

@@ -1,8 +1,8 @@
-import type { Decoder} from '@simonbackx/simple-encoding';
+import type { Decoder } from '@simonbackx/simple-encoding';
 import { AutoEncoder, EnumDecoder, field, StringDecoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
-import { EmailTemplate } from '@stamhoofd/models';
+import { EmailTemplate, Platform } from '@stamhoofd/models';
 import { EmailTemplate as EmailTemplateStruct, EmailTemplateType } from '@stamhoofd/structures';
 import { Formatter } from '@stamhoofd/utility';
@@ -60,11 +60,13 @@ export class GetEmailTemplatesEndpoint extends Endpoint<Params, Query, Body, Res
             });
         }
+        const platform = await Platform.getShared();
         const types = (request.query.types ?? [...Object.values(EmailTemplateType)]).filter((type) => {
             if (!organization) {
                 return EmailTemplateStruct.allowPlatformLevel(type);
             }
-            return EmailTemplateStruct.allowOrganizationLevel(type);
+            return EmailTemplateStruct.allowOrganizationLevel(type, organization, platform);
         });
         if (types.length === 0) {
@@ -86,10 +88,10 @@ export class GetEmailTemplatesEndpoint extends Endpoint<Params, Query, Body, Res
                 // Required for event emails when logged in as the platform admin
                     (request.query.webshopId || request.query.groupIds)
                         ? await EmailTemplate.where({
-                            webshopId: request.query.webshopId ?? null,
-                            groupId: request.query.groupIds ? { sign: 'IN', value: request.query.groupIds } : null,
-                            type: { sign: 'IN', value: types },
-                        })
+                                webshopId: request.query.webshopId ?? null,
+                                groupId: request.query.groupIds ? { sign: 'IN', value: request.query.groupIds } : null,
+                                type: { sign: 'IN', value: types },
+                            })
                         : []
                 );

package/src/endpoints/organization/dashboard/email-templates/PatchEmailTemplatesEndpoint.test.ts CHANGED Viewed

@@ -1,7 +1,7 @@
 import type { PatchableArrayAutoEncoder } from '@simonbackx/simple-encoding';
 import { PatchableArray } from '@simonbackx/simple-encoding';
 import { Request } from '@simonbackx/simple-endpoints';
-import type { Organization, RegistrationPeriod} from '@stamhoofd/models';
+import type { Organization, RegistrationPeriod } from '@stamhoofd/models';
 import { EmailTemplate, GroupFactory, OrganizationFactory, Platform, RegistrationPeriodFactory, Token, UserFactory } from '@stamhoofd/models';
 import { EmailTemplate as EmailTemplateStruct, EmailTemplateType, PermissionLevel, PermissionRoleDetailed, Permissions, PermissionsResourceType, ResourcePermissions, Version } from '@stamhoofd/structures';
 import { TestUtils } from '@stamhoofd/test-utils';

package/src/endpoints/organization/dashboard/email-templates/PatchEmailTemplatesEndpoint.ts CHANGED Viewed

@@ -1,8 +1,8 @@
-import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder} from '@simonbackx/simple-encoding';
+import type { AutoEncoderPatchType, Decoder, PatchableArrayAutoEncoder } from '@simonbackx/simple-encoding';
 import { PatchableArrayDecoder, StringDecoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
-import { EmailTemplate, Group, Webshop } from '@stamhoofd/models';
+import { EmailTemplate, Group, Platform, Webshop } from '@stamhoofd/models';
 import { EmailTemplate as EmailTemplateStruct, PermissionLevel } from '@stamhoofd/structures';
 import { Context } from '../../../../helpers/Context.js';
@@ -38,7 +38,6 @@ export class PatchEmailTemplatesEndpoint extends Endpoint<Params, Query, Body, R
                 throw Context.auth.error();
             }
         }
         const templates: EmailTemplate[] = [];
         // Get all patches
@@ -61,11 +60,11 @@ export class PatchEmailTemplatesEndpoint extends Endpoint<Params, Query, Body, R
         for (const put of request.body.getPuts()) {
             const struct = put.put;
-            if (!EmailTemplateStruct.allowOrganizationLevel(struct.type) && organization) {
+            if (organization && !EmailTemplateStruct.allowOrganizationLevel(struct.type, organization, await Platform.getShared())) {
                 throw Context.auth.error();
             }
-            if (!EmailTemplateStruct.allowPlatformLevel(struct.type) && !organization) {
+            if (!organization && !EmailTemplateStruct.allowPlatformLevel(struct.type)) {
                 throw Context.auth.error();
             }

package/src/endpoints/organization/dashboard/invoices/GetInvoicesCountEndpoint.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import type { Decoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { CountFilteredRequest, CountResponse } from '@stamhoofd/structures';

package/src/endpoints/organization/dashboard/invoices/GetInvoicesEndpoint.ts CHANGED Viewed

@@ -1,14 +1,16 @@
 import type { Decoder } from '@simonbackx/simple-encoding';
-import type { DecodedRequest, Request} from '@simonbackx/simple-endpoints';
+import type { DecodedRequest, Request } from '@simonbackx/simple-endpoints';
 import { Endpoint, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { Invoice } from '@stamhoofd/models';
 import { applySQLSorter, compileToSQLFilter } from '@stamhoofd/sql';
-import type { CountFilteredRequest, InvoiceStruct, StamhoofdFilter} from '@stamhoofd/structures';
+import type { CountFilteredRequest, InvoiceStruct, StamhoofdFilter } from '@stamhoofd/structures';
 import { LimitedFilteredRequest, PaginatedResponse, assertSort, getSortFilter } from '@stamhoofd/structures';
 import { AuthenticatedStructures } from '../../../../helpers/AuthenticatedStructures.js';
 import { Context } from '../../../../helpers/Context.js';
+import { InvoicePdfService } from '../../../../services/InvoicePdfService.js';
+import { InvoiceXMlService } from '../../../../services/InvoiceXMLService.js';
 import { invoiceFilterCompilers } from '../../../../sql-filters/invoices.js';
 import { invoiceSorters } from '../../../../sql-sorters/invoices.js';
@@ -154,8 +156,7 @@ export class GetInvoicesEndpoint extends Endpoint<Params, Query, Body, ResponseB
         try {
             invoices = await query.fetch();
-        }
-        catch (error) {
+        } catch (error) {
             if (error.message.includes('ER_QUERY_TIMEOUT')) {
                 throw new SimpleError({
                     code: 'timeout',
@@ -186,6 +187,16 @@ export class GetInvoicesEndpoint extends Endpoint<Params, Query, Body, ResponseB
             }
         }
+        for (const invoice of invoices) {
+            if (invoice.number && !invoice.pdf && STAMHOOFD.environment === 'development') {
+                await InvoicePdfService.generatePdf(invoice);
+            }
+            if (invoice.number && STAMHOOFD.environment === 'development') {
+                await InvoiceXMlService.generateXml(invoice);
+            }
+        }
         return new PaginatedResponse<InvoiceStruct[], LimitedFilteredRequest>({
             results: await AuthenticatedStructures.invoices(invoices),
             next,