feat: move community supabase request to api layer (#612)

* feat: move community supabase request to api layer

* chore: pr review checkpoint

* chore: PR fixes

* feat: implement role-based authorization middleware and align the community features with the developer guide.

- Added role-based authorization middleware for organization and course membership checks, including `orgMemberMiddleware`, `orgTeamMemberMiddleware`, and `courseMemberMiddleware`.
- Introduced route-specific middleware for comment and question authorization, ensuring only authors or team members can modify content.
- Updated community routes to utilize the new middleware for enhanced security and access control.
- Refactored community services to streamline upvote functionality and improve error handling.
- Enhanced UI components for community interactions, including new comment and question pages, and improved state management for user actions.
- Updated documentation to reflect new middleware usage and best practices for authorization in the API layer.

* feat: enhance course and organization routes with middleware for improved access control

- Added `courseMemberMiddleware` to course download and clone routes to enforce membership checks.
- Updated lesson route to include `courseMemberMiddleware` for PDF downloads.
- Integrated `orgMemberMiddleware` into organization routes for team and audience access, ensuring only authorized members can retrieve data.
- Refactored lesson and organization routes for consistency and clarity in middleware usage.

* chore: streamline dashboard and API development scripts in package.json

- Consolidated dashboard and API development commands to include all relevant filters in a single line for improved clarity and ease of use.
- Removed redundant full command variants to simplify the script section.

---------

Co-authored-by: Rotimi Best <best@classroomio.com>

This commit is contained in:

Adeyemi Adetunji

2025-12-22 19:57:27 +01:00

committed by

GitHub

co-authored by

Rotimi Best

parent 9fb6c7cbaa

commit bc9e3b41ae

41 changed files with 2699 additions and 1598 deletions

									
										apps/api/src/app.ts
									
		+2
		
												View File
												
				@@ -17,6 +17,7 @@ import { dashAnalyticsRouter } from '@api/routes/dash';

				import { mediaRouter } from '@api/routes/media';

				import { onboardingRouter } from '@api/routes/onboarding';

				import { organizationRouter } from '@api/routes/organization';

				import { communityRouter } from '@api/routes/community';

				// Create Hono app with chaining for RPC support

				export const app = new Hono()

				@@ -77,6 +78,7 @@ export const app = new Hono()

				  .route('/media', mediaRouter)

				  .route('/organization', organizationRouter)

				  .route('/dash', dashAnalyticsRouter)

				  .route('/community', communityRouter)

				  // Error handling

				  .onError((err, c) => {