All files / invitations list.js

91.17% Statements 31/34
80% Branches 16/20
100% Functions 5/5
90.62% Lines 29/32

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 1311x 1x   1x 1x   1x 12x 12x   12x 1x                     11x     11x   11x                             11x                             11x     10x   10x 4x                     6x 7x 6x       7x           5x     5x 6x 6x                     5x       5x                         2x 2x                    
const { DynamoDBClient } = require('@aws-sdk/client-dynamodb')
const { DynamoDBDocumentClient, QueryCommand } = require('@aws-sdk/lib-dynamodb')
 
const client = new DynamoDBClient({})
const docClient = DynamoDBDocumentClient.from(client)
 
exports.handler = async (event) => {
  try {
    const userId = event.requestContext?.authorizer?.claims?.sub
 
    if (!userId) {
      return {
        statusCode: 401,
        headers: {
          'Content-Type': 'application/json',
          'Access-Control-Allow-Origin': '*'
        },
        body: JSON.stringify({ error: 'Unauthorized' })
      }
    }
 
    // Pagination support
    const limit = event.queryStringParameters?.limit
      ? parseInt(event.queryStringParameters.limit)
      : 30
    const nextToken = event.queryStringParameters?.nextToken
 
    const params = {
      TableName: process.env.MEMBERSHIPS_TABLE_NAME,
      KeyConditionExpression: 'userId = :userId',
      FilterExpression: '#status = :status',
      ExpressionAttributeNames: {
        '#status': 'status'
      },
      ExpressionAttributeValues: {
        ':userId': userId,
        ':status': 'pending'
      },
      Limit: limit
    }
 
    // Add pagination token if provided
    Iif (nextToken) {
      try {
        params.ExclusiveStartKey = JSON.parse(Buffer.from(nextToken, 'base64').toString())
      } catch {
        return {
          statusCode: 400,
          headers: {
            'Content-Type': 'application/json',
            'Access-Control-Allow-Origin': '*'
          },
          body: JSON.stringify({ error: 'Invalid nextToken' })
        }
      }
    }
 
    const result = await docClient.send(new QueryCommand(params))
 
    // Enrich with tenant information
    const invitations = result.Items || []
 
    if (invitations.length === 0) {
      return {
        statusCode: 200,
        headers: {
          'Content-Type': 'application/json',
          'Access-Control-Allow-Origin': '*'
        },
        body: JSON.stringify({ items: [], nextToken: null, hasMore: false })
      }
    }
 
    // Batch get tenant details
    const { BatchGetCommand } = require('@aws-sdk/lib-dynamodb')
    const tenantIds = invitations.map((inv) => inv.tenantId)
    const tenantsResult = await docClient.send(
      new BatchGetCommand({
        RequestItems: {
          [process.env.TENANTS_TABLE_NAME]: {
            Keys: tenantIds.map((id) => ({ id }))
          }
        }
      })
    )
 
    const tenants = tenantsResult.Responses?.[process.env.TENANTS_TABLE_NAME] || []
 
    // Merge tenant info with invitation info
    const enrichedInvitations = invitations.map((invitation) => {
      const tenant = tenants.find((t) => t.id === invitation.tenantId)
      return {
        tenantId: invitation.tenantId,
        tenantName: tenant?.name || 'Unknown',
        tenantSlug: tenant?.slug,
        roleIds: invitation.roleIds || [],
        status: invitation.status,
        invitedAt: invitation.invitedAt || invitation.joinedAt,
        invitedBy: invitation.invitedBy
      }
    })
 
    const responseNextToken = result.LastEvaluatedKey
      ? Buffer.from(JSON.stringify(result.LastEvaluatedKey)).toString('base64')
      : null
 
    return {
      statusCode: 200,
      headers: {
        'Content-Type': 'application/json',
        'Access-Control-Allow-Origin': '*'
      },
      body: JSON.stringify({
        items: enrichedInvitations,
        nextToken: responseNextToken,
        hasMore: !!responseNextToken
      })
    }
  } catch (error) {
    console.error('Error getting invitations:', error)
    return {
      statusCode: 500,
      headers: {
        'Content-Type': 'application/json',
        'Access-Control-Allow-Origin': '*'
      },
      body: JSON.stringify({ error: 'Failed to get invitations' })
    }
  }
}