dimitar/fitaiProto
1
0 Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

enforce membership feature access in api and surface plans in admin

Browse Source
This commit is contained in:
dimitar committed 2026-03-29 16:22:45 +02:00
1 parent 1f4800c055
commit ebfd633a11
14 files changed
+573 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

apps/admin/src/app/api/hydration/route.ts
+37
View File
@@ -3,6 +3,7 @@ import { NextRequest, NextResponse } from "next/server";
import { getDatabase } from "@/lib/database";
import { ensureUserSynced } from "@/lib/sync-user";
import log from "@/lib/logger";
import { getUserMembershipContext } from "@/lib/membership/access";
export async function POST(req: NextRequest) {
try {
@@ -11,6 +12,18 @@ export async function POST(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.hydrationTracking) {
return NextResponse.json(
{
error:
"Hydration tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const body = await req.json();
const { date, entries, totalWater, waterGoal } = body;
@@ -58,6 +71,18 @@ export async function GET(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.hydrationTracking) {
return NextResponse.json(
{
error:
"Hydration tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const url = new URL(req.url);
const date = url.searchParams.get("date");
@@ -100,6 +125,18 @@ export async function DELETE(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.hydrationTracking) {
return NextResponse.json(
{
error:
"Hydration tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const url = new URL(req.url);
const id = url.searchParams.get("id");
apps/admin/src/app/api/nutrition/meals/route.ts
+37
View File
@@ -3,6 +3,7 @@ import { NextRequest, NextResponse } from "next/server";
import { getDatabase } from "@/lib/database";
import { ensureUserSynced } from "@/lib/sync-user";
import log from "@/lib/logger";
import { getUserMembershipContext } from "@/lib/membership/access";
export async function POST(req: NextRequest) {
try {
@@ -11,6 +12,18 @@ export async function POST(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.nutritionTracking) {
return NextResponse.json(
{
error:
"Nutrition tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const body = await req.json();
const {
@@ -59,6 +72,18 @@ export async function GET(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.nutritionTracking) {
return NextResponse.json(
{
error:
"Nutrition tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const url = new URL(req.url);
const date = url.searchParams.get("date");
@@ -88,6 +113,18 @@ export async function DELETE(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.nutritionTracking) {
return NextResponse.json(
{
error:
"Nutrition tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const url = new URL(req.url);
const id = url.searchParams.get("id");
apps/admin/src/app/api/nutrition/route.ts
+37
View File
@@ -3,6 +3,7 @@ import { NextRequest, NextResponse } from "next/server";
import { getDatabase } from "@/lib/database";
import { ensureUserSynced } from "@/lib/sync-user";
import log from "@/lib/logger";
import { getUserMembershipContext } from "@/lib/membership/access";
export async function POST(req: NextRequest) {
try {
@@ -11,6 +12,18 @@ export async function POST(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.nutritionTracking) {
return NextResponse.json(
{
error:
"Nutrition tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const body = await req.json();
const { date, meals, totalCalories, calorieGoal } = body;
@@ -58,6 +71,18 @@ export async function GET(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.nutritionTracking) {
return NextResponse.json(
{
error:
"Nutrition tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const url = new URL(req.url);
const date = url.searchParams.get("date");
@@ -100,6 +125,18 @@ export async function DELETE(req: NextRequest) {
const db = await getDatabase();
await ensureUserSynced(userId, db);
const { features, membershipType } = await getUserMembershipContext(userId);
if (!features.nutritionTracking) {
return NextResponse.json(
{
error:
"Nutrition tracking is available on Premium and VIP memberships",
membershipType,
},
{ status: 403 },
);
}
const url = new URL(req.url);
const id = url.searchParams.get("id");
apps/admin/src/app/api/recommendations/generate/route.ts
+36
View File
@@ -5,6 +5,7 @@ import { buildAIContext } from "@/lib/ai/ai-context";
import { buildEnhancedPrompt, buildBasicPrompt } from "@/lib/ai/prompt-builder";
import log from "@/lib/logger";
import { ensureUserSynced } from "@/lib/sync-user";
import { getUserMembershipContext } from "@/lib/membership/access";
export async function POST(req: Request) {
try {
@@ -49,6 +50,41 @@ export async function POST(req: Request) {
return NextResponse.json({ error: "User not found" }, { status: 404 });
}
const { membershipType, features } = await getUserMembershipContext(userId);
if (features.recommendationsPerMonth === 1) {
const currentMonth = new Date();
const monthStart = new Date(
currentMonth.getFullYear(),
currentMonth.getMonth(),
1,
);
const monthEnd = new Date(
currentMonth.getFullYear(),
currentMonth.getMonth() + 1,
1,
);
const existingRecommendations =
await db.getRecommendationsByUserId(userId);
const recommendationsThisMonth = existingRecommendations.filter(
(recommendation) =>
recommendation.generatedAt >= monthStart &&
recommendation.generatedAt < monthEnd,
).length;
if (recommendationsThisMonth >= 1) {
return NextResponse.json(
{
error:
"Basic membership includes 1 recommendation per month. Upgrade to Premium or VIP for unlimited recommendations.",
membershipType,
},
{ status: 403 },
);
}
}
if (currentUser.role !== "superAdmin") {
if (!currentUser.gymId || targetUser.gymId !== currentUser.gymId) {
return NextResponse.json(