root
25 lines
978 B
JavaScript
25 lines
978 B
JavaScript
"use strict";
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.requireTenant = requireTenant;
|
|
const prisma_1 = require("../lib/prisma");
|
|
const authHelpers_1 = require("./authHelpers");
|
|
/**
|
|
* Loads the company record and validates it exists.
|
|
* Must be applied after `requireCompanyAuth`.
|
|
*
|
|
* Guarantees on success:
|
|
* req.company — full Company record
|
|
* req.companyId — string id (already set by requireCompanyAuth)
|
|
*/
|
|
async function requireTenant(req, res, next) {
|
|
if (!req.companyId) {
|
|
return (0, authHelpers_1.sendUnauthorized)(res, 'unauthenticated', 'Tenant context missing — requireCompanyAuth must run first');
|
|
}
|
|
const company = await prisma_1.prisma.company.findUnique({ where: { id: req.companyId } });
|
|
if (!company) {
|
|
return (0, authHelpers_1.sendUnauthorized)(res, 'company_not_found', 'Company not found');
|
|
}
|
|
req.company = company;
|
|
next();
|
|
}
|
|
//# sourceMappingURL=requireTenant.js.map
|