feat: enhance API and middleware functionality: add public API routes, implement program and course member checks, and improve rate limiting for invite acceptance. Update OpenAPI spec generation to focus on public API endpoints and add new middleware for automation key scopes. Include new documentation for lesson AI features and public API tests.

2026-04-12 08:58:41 +01:00
parent 5a8f50f67b
commit d6e812d08b
573 changed files with 31964 additions and 8708 deletions
@@ -0,0 +1,64 @@
+import { Context, Next } from 'hono';
+
+import { ErrorCodes } from '@api/utils/errors';
+import { isOrgAdminByProgramId, isProgramMember } from '@cio/db/queries/program';
+
+/**
+ * Middleware to check if the authenticated user is a member of the program
+ * or an org admin for the program's organization.
+ */
+export const programMemberMiddleware = async (c: Context, next: Next) => {
+  try {
+    const user = c.get('user');
+    if (!user) {
+      return c.json(
+        {
+          success: false,
+          error: 'Unauthorized',
+          code: 'UNAUTHORIZED'
+        },
+        401
+      );
+    }
+
+    const programId = c.req.param('programId');
+    if (!programId) {
+      return c.json(
+        {
+          success: false,
+          error: 'Program ID is required',
+          code: 'PROGRAM_ID_REQUIRED'
+        },
+        400
+      );
+    }
+
+    const [member, isOrgAdmin] = await Promise.all([
+      isProgramMember(programId, user.id),
+      isOrgAdminByProgramId(programId, user.id)
+    ]);
+
+    if (member || isOrgAdmin) {
+      return next();
+    }
+
+    return c.json(
+      {
+        success: false,
+        error: 'You must be a member of this program to perform this action',
+        code: ErrorCodes.PROGRAM_FORBIDDEN
+      },
+      403
+    );
+  } catch (error) {
+    console.error('Error in programMemberMiddleware:', error);
+    return c.json(
+      {
+        success: false,
+        error: 'Failed to verify program membership',
+        code: ErrorCodes.PROGRAM_MEMBER_CHECK_FAILED
+      },
+      500
+    );
+  }
+};