Organizations And Teams

1// src/app/api/v1/organizations/route.ts
2import { NextResponse } from "next/server";
3import { prisma } from "@/lib/db";
4import { auth } from "@/lib/auth";
5import slugify from "slugify";
6
7export async function POST(request: Request) {
8  const session = await auth();
9  if (!session?.user) {
10    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
11  }
12
13  const { name } = await request.json();
14
15  if (!name || name.length < 2) {
16    return NextResponse.json(
17      { error: "Organization name must be at least 2 characters" },
18      { status: 400 }
19    );
20  }
21
22  // Generate unique slug
23  let slug = slugify(name, { lower: true, strict: true });
24  const existing = await prisma.organization.findUnique({
25    where: { slug },
26  });
27
28  if (existing) {
29    slug = `${slug}-${Date.now()}`;
30  }
31
32  // Create org with user as owner
33  const organization = await prisma.organization.create({
34    data: {
35      name,
36      slug,
37      members: {
38        create: {
39          userId: session.user.id,
40          role: "OWNER",
41        },
42      },
43    },
44    include: {
45      members: {
46        include: { user: { select: { id: true, name: true, email: true } } },
47      },
48    },
49  });
50
51  return NextResponse.json(organization, { status: 201 });
52}

1// src/app/api/v1/organizations/invite/route.ts
2import { nanoid } from "nanoid";
3import { sendInviteEmail } from "@/lib/email";
4
5export async function POST(request: Request) {
6  const session = await auth();
7  if (!session?.user) {
8    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
9  }
10
11  const { organizationId, email, role = "MEMBER" } = await request.json();
12
13  // Check user has permission to invite
14  const membership = await prisma.organizationMember.findUnique({
15    where: {
16      userId_organizationId: {
17        userId: session.user.id,
18        organizationId,
19      },
20    },
21  });
22
23  if (!membership || !["OWNER", "ADMIN"].includes(membership.role)) {
24    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
25  }
26
27  // Create invite
28  const token = nanoid(32);
29  const invite = await prisma.organizationInvite.create({
30    data: {
31      email,
32      organizationId,
33      role,
34      token,
35      invitedById: session.user.id,
36      expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000), // 7 days
37    },
38    include: {
39      organization: { select: { name: true } },
40    },
41  });
42
43  // Send invite email
44  await sendInviteEmail({
45    to: email,
46    organizationName: invite.organization.name,
47    inviterName: session.user.name || session.user.email,
48    inviteUrl: `${config.app.url}/invite/${token}`,
49    role,
50  });
51
52  return NextResponse.json({ success: true, invite });
53}

1// src/lib/permissions.ts
2import { prisma } from "@/lib/db";
3
4type Permission =
5  | "view"
6  | "create"
7  | "invite"
8  | "remove_members"
9  | "edit_settings"
10  | "manage_billing"
11  | "delete_org";
12
13const rolePermissions: Record<string, Permission[]> = {
14  OWNER: ["view", "create", "invite", "remove_members", "edit_settings", "manage_billing", "delete_org"],
15  ADMIN: ["view", "create", "invite", "remove_members", "edit_settings", "manage_billing"],
16  MEMBER: ["view", "create"],
17  GUEST: ["view"],
18};
19
20export async function checkPermission(
21  userId: string,
22  organizationId: string,
23  permission: Permission
24): Promise<boolean> {
25  const membership = await prisma.organizationMember.findUnique({
26    where: {
27      userId_organizationId: { userId, organizationId },
28    },
29  });
30
31  if (!membership) return false;
32
33  return rolePermissions[membership.role]?.includes(permission) ?? false;
34}