feedback

Author: brendan-kellam

packages/web/src/app/api/(server)/repos/route.ts

@@ -4,9 +4,18 @@ import { listRepositories } from "@/features/search/listReposApi";
 import { NextRequest } from "next/server";
 import { isServiceError } from "@/lib/utils";
 import { serviceErrorResponse } from "@/lib/serviceError";
+import { StatusCodes } from "http-status-codes";
+import { ErrorCode } from "@/lib/errorCodes";
 
 export const GET = async (request: NextRequest) => {
-    const domain = request.headers.get("X-Org-Domain")!;
+    const domain = request.headers.get("X-Org-Domain");
+    if (!domain) {
+        return serviceErrorResponse({
+            statusCode: StatusCodes.BAD_REQUEST,
+            errorCode: ErrorCode.MISSING_ORG_DOMAIN_HEADER,
+            message: "Missing X-Org-Domain header",
+        });
+    }
 
     const response = await listRepositories(domain);
     if (isServiceError(response)) {

packages/web/src/app/api/(server)/search/route.ts

@@ -5,9 +5,19 @@ import { isServiceError } from "@/lib/utils";
 import { NextRequest } from "next/server";
 import { schemaValidationError, serviceErrorResponse } from "@/lib/serviceError";
 import { searchRequestSchema } from "@/features/search/schemas";
+import { ErrorCode } from "@/lib/errorCodes";
+import { StatusCodes } from "http-status-codes";
 
 export const POST = async (request: NextRequest) => {
-    const domain = request.headers.get("X-Org-Domain")!;
+    const domain = request.headers.get("X-Org-Domain");
+    if (!domain) {
+        return serviceErrorResponse({
+            statusCode: StatusCodes.BAD_REQUEST,
+            errorCode: ErrorCode.MISSING_ORG_DOMAIN_HEADER,
+            message: "Missing X-Org-Domain header",
+        });
+    }
+
     const body = await request.json();
     const parsed = await searchRequestSchema.safeParseAsync(body);
     if (!parsed.success) {

packages/web/src/app/api/(server)/source/route.ts

@@ -5,8 +5,19 @@ import { schemaValidationError, serviceErrorResponse } from "@/lib/serviceError"
 import { isServiceError } from "@/lib/utils";
 import { NextRequest } from "next/server";
 import { fileSourceRequestSchema } from "@/features/search/schemas";
+import { ErrorCode } from "@/lib/errorCodes";
+import { StatusCodes } from "http-status-codes";
 
 export const POST = async (request: NextRequest) => {
+    const domain = request.headers.get("X-Org-Domain");
+    if (!domain) {
+        return serviceErrorResponse({
+            statusCode: StatusCodes.BAD_REQUEST,
+            errorCode: ErrorCode.MISSING_ORG_DOMAIN_HEADER,
+            message: "Missing X-Org-Domain header",
+        });
+    }
+
     const body = await request.json();
     const parsed = await fileSourceRequestSchema.safeParseAsync(body);
     if (!parsed.success) {
@@ -17,7 +28,7 @@ export const POST = async (request: NextRequest) => {
 
 
 
-    const response = await getFileSource(parsed.data, request.headers.get("X-Org-Domain")!);
+    const response = await getFileSource(parsed.data, domain);
     if (isServiceError(response)) {
         return serviceErrorResponse(response);
     }

packages/web/src/lib/errorCodes.ts

@@ -23,4 +23,5 @@ export enum ErrorCode {
     STRIPE_CLIENT_NOT_INITIALIZED = 'STRIPE_CLIENT_NOT_INITIALIZED',
     ACTION_DISALLOWED_IN_TENANCY_MODE = 'ACTION_DISALLOWED_IN_TENANCY_MODE',
     SEARCH_CONTEXT_NOT_FOUND = 'SEARCH_CONTEXT_NOT_FOUND',
+    MISSING_ORG_DOMAIN_HEADER = 'MISSING_ORG_DOMAIN_HEADER',
 }