fix first online resevation

apps/api/src/middleware/requireCompanyAuth.ts

@@ -1,5 +1,5 @@
 import { Request, Response, NextFunction } from 'express'
-import { clerkClient } from '@clerk/clerk-sdk-node'
+import jwt from 'jsonwebtoken'
 import { prisma } from '../lib/prisma'
 
 export async function requireCompanyAuth(req: Request, res: Response, next: NextFunction) {
@@ -15,26 +15,26 @@ export async function requireCompanyAuth(req: Request, res: Response, next: Next
   }
 
   try {
-    const session = await clerkClient.sessions.verifySession(sessionToken, sessionToken)
-    const clerkUserId = session.userId
-
-    const employee = await prisma.employee.findUnique({
-      where: { clerkUserId },
-      include: { company: true },
-    })
-
-    if (!employee || !employee.isActive) {
-      return res.status(401).json({
-        error: 'unauthenticated',
-        message: 'Employee account not found or inactive',
-        statusCode: 401,
+    const payload = jwt.verify(sessionToken, process.env.JWT_SECRET!) as { sub: string; type: string }
+    if (payload.type === 'employee') {
+      const employee = await prisma.employee.findUnique({
+        where: { id: payload.sub },
+        include: { company: true },
       })
-    }
 
-    req.employee = employee
-    req.company = employee.company
-    req.companyId = employee.companyId
-    next()
+      if (!employee || !employee.isActive) {
+        return res.status(401).json({
+          error: 'unauthenticated',
+          message: 'Employee account not found or inactive',
+          statusCode: 401,
+        })
+      }
+
+      req.employee = employee
+      req.company = employee.company
+      req.companyId = employee.companyId
+      return next()
+    }
   } catch {
     return res.status(401).json({
       error: 'invalid_token',