fix(api/member): check user existence before insert to database (#111)

compsci-adl · Feb 27, 2024 · 1b65404 · 1b65404
1 parent 82c07ca
commit 1b65404
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/app/api/member/route.ts b/src/app/api/member/route.ts
@@ -1,5 +1,6 @@
 import { db } from '@/db';
 import { memberTable } from '@/db/schema';
+import { checkUserExists } from '@/server/check-user-exists';
 import { currentUser } from '@clerk/nextjs';
 import { createInsertSchema } from 'drizzle-zod';
 import { z } from 'zod';
@@ -21,6 +22,12 @@ export async function POST(request: Request) {
         return new Response(JSON.stringify(reqBody.error.format()), { status: 400 });
     }
 
+    // Avoid duplicate users in database
+    const userExists = await checkUserExists(user.id);
+    if (userExists) {
+        return new Response(null, { status: 403 });
+    }
+
     await db.insert(memberTable).values({
         clerkId: user.id,
         email: user.emailAddresses[0].emailAddress,