Mayank Mishra
a906dc5635
- Introduced a new handler for adding activity prepopulation. - Enhanced the PrePopulateService to fetch all necessary prepopulate data for the new activity. - Updated the updateBankDetails handler to correctly inject host ID. - Improved user data retrieval in HostService to include additional fields. - Added validation for host ID in showSuggestionToAM handler.
78 lines
2.8 KiB
TypeScript
78 lines
2.8 KiB
TypeScript
import { APIGatewayProxyEvent, APIGatewayProxyResult, Context } from 'aws-lambda';
|
|
import { safeHandler } from '../../../../../common/utils/handlers/safeHandler';
|
|
import { prismaClient } from '../../../../../common/database/prisma.lambda.service';
|
|
import { HostService } from '../../../services/host.service';
|
|
import ApiError from '../../../../../common/utils/helper/ApiError';
|
|
import { verifyHostToken } from '../../../../../common/middlewares/jwt/authForHost';
|
|
import { hostBankDetailsSchema } from '../../../../../common/utils/validation/host/addPaymentDetails.validation';
|
|
|
|
const hostService = new HostService(prismaClient);
|
|
|
|
export const handler = safeHandler(async (
|
|
event: APIGatewayProxyEvent,
|
|
context?: Context
|
|
): Promise<APIGatewayProxyResult> => {
|
|
// Extract token from headers
|
|
const token = event.headers['x-auth-token'] || event.headers['X-Auth-Token']
|
|
if (!token) {
|
|
throw new ApiError(400, 'This is a protected route. Please provide a valid token.');
|
|
}
|
|
|
|
// Authenticate user using the shared authForHost function
|
|
const userInfo = await verifyHostToken(token);
|
|
const hostId = userInfo.id;
|
|
|
|
if (Number.isNaN(hostId)) {
|
|
throw new ApiError(400, 'Host id must be a number');
|
|
}
|
|
|
|
const host = await hostService.getHostIdByUserXid(hostId);
|
|
if (!host) {
|
|
throw new ApiError(404, 'Host not found');
|
|
}
|
|
|
|
// Parse request body
|
|
let body: { bankXid?: number; bankBranchXid?: number; accountNumber?: string; confirmAccountNumber?: string; accountHolderName?: string; currencyXid?: number };
|
|
|
|
try {
|
|
body = event.body ? JSON.parse(event.body) : {};
|
|
} catch (error) {
|
|
throw new ApiError(400, 'Invalid JSON in request body');
|
|
}
|
|
|
|
// ✅ Validate payload using Zod
|
|
const validationResult = hostBankDetailsSchema.safeParse({
|
|
...(body as object),
|
|
hostXid: host.host.id, // inject hostId from token (not from user input)
|
|
});
|
|
|
|
if (!validationResult.success) {
|
|
const errorMessages = validationResult.error.issues.map(e => e.message).join(', ');
|
|
throw new ApiError(400, `Validation failed: ${errorMessages}`);
|
|
}
|
|
|
|
const validatedData = validationResult.data;
|
|
|
|
// Fetch IFSC code from bank branch
|
|
const bankBranch = await hostService.getBankBranchById(validatedData.bankBranchXid);
|
|
if (!bankBranch) {
|
|
throw new ApiError(404, 'Bank branch not found');
|
|
}
|
|
|
|
await hostService.addPaymentDetails({
|
|
...validatedData,
|
|
ifscCode: bankBranch.ifscCode,
|
|
});
|
|
|
|
return {
|
|
statusCode: 200,
|
|
headers: {
|
|
'Content-Type': 'application/json',
|
|
'Access-Control-Allow-Origin': '*',
|
|
},
|
|
body: JSON.stringify({
|
|
success: true,
|
|
message: 'Payment details added successfully',
|
|
}),
|
|
};
|
|
}); |