mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-13 06:32:03 +00:00
Marc-André Bombeck
9ce0bd5027
Fifty-nine 422s raised off a Zod `safeParse` answered with one opaque sentence and nothing a client could map onto a field, while the other 166 sent `details.issues` — the multi-issue envelope that exists so a caller with three bad fields fixes all three in one round-trip. Twelve of the fifty-nine put a dotted machine token in `error` where the sentence belongs, so `error` was sometimes text to show a person and sometimes a token that must not be shown, with nothing in the payload to tell them apart. Every one of them now answers through `apiValidationError`, which keeps the existing `error` string and the existing `meta` byte for byte and adds the issue list beside them. The dotted tokens keep their place in `error` for the clients that already match on them and are published in `meta.errorCode` as well, which is the field a machine code belongs in and the one a new client should read. A guard reads the route tree per refusal site rather than per file — per file is what let this grow, since a route that used the helper once looked compliant to a `grep -l` sweep — and asserts it still finds the sites it judges, so a matcher that stops matching fails instead of reporting a clean zero.
74 lines
1.9 KiB
TypeScript
74 lines
1.9 KiB
TypeScript
import { prisma } from "@/lib/db";
|
|
import { apiHandler, requireAuth } from "@/lib/api-handler";
|
|
import { annotate } from "@/lib/logging/context";
|
|
import {
|
|
apiSuccess,
|
|
apiValidationError,
|
|
safeJson,
|
|
sanitiseZodIssues,
|
|
} from "@/lib/api-response";
|
|
import { setOnboardingPendingCookie } from "@/lib/auth/session";
|
|
import { NextRequest } from "next/server";
|
|
import { z } from "zod/v4";
|
|
import { onboardingCompleteSchema } from "@/lib/validations/onboarding";
|
|
|
|
/**
|
|
* Complete the onboarding flow. Saves optional profile data and marks
|
|
* onboarding as completed.
|
|
*/
|
|
export const POST = apiHandler(async (request: NextRequest) => {
|
|
const { user } = await requireAuth();
|
|
annotate({ action: { name: "onboarding.complete" } });
|
|
|
|
const { data: body, error: jsonError } = await safeJson(request, {
|
|
maxBytes: 64 * 1024,
|
|
});
|
|
|
|
if (jsonError) return jsonError;
|
|
const result = z.safeParse(onboardingCompleteSchema, body);
|
|
if (!result.success) {
|
|
return apiValidationError(
|
|
"Invalid input",
|
|
sanitiseZodIssues(result.error.issues),
|
|
422,
|
|
{
|
|
errorCode: "onboarding.complete.invalid",
|
|
},
|
|
);
|
|
}
|
|
|
|
const data: Record<string, unknown> = {
|
|
onboardingCompletedAt: new Date(),
|
|
};
|
|
|
|
if (result.data.heightCm) {
|
|
data.heightCm = result.data.heightCm;
|
|
}
|
|
|
|
if (result.data.dateOfBirth) {
|
|
const dob = new Date(result.data.dateOfBirth);
|
|
if (!isNaN(dob.getTime())) {
|
|
data.dateOfBirth = dob;
|
|
}
|
|
}
|
|
|
|
if (result.data.gender) {
|
|
data.gender = result.data.gender;
|
|
}
|
|
|
|
if (result.data.displayName) {
|
|
data.displayName = result.data.displayName;
|
|
}
|
|
|
|
await prisma.user.update({
|
|
where: { id: user.id },
|
|
data,
|
|
});
|
|
|
|
// v1.4.22 C4 — clear the proxy-readable onboarding cookie so the
|
|
// next navigation drops the /onboarding redirect immediately.
|
|
await setOnboardingPendingCookie(false);
|
|
|
|
return apiSuccess({ completed: true });
|
|
});
|