All files / lib/lambda/submit/submissionPayloads capitated-amendment.ts

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
 
 
 
 
 
 
 
 
3x
3x
 
3x
3x
1x
 
 
 
2x
 
 
 
 
2x
 
 
 
2x
2x
2x
2x
 
2x
 
 
 
2x
 
 
 
 
 
 
2x
 
 
// can/should add the additional frontend checks here
 
import { type APIGatewayEvent } from "aws-lambda";
import { itemExists } from "libs/api/package";
import { events } from "shared-types/events";
 
import { getAuthDetails, isAuthorized, lookupUserAttributes } from "../../../libs/api/auth/user";
import { getUserByEmail } from "../../user-management/userManagementService";
 
export const capitatedAmendment = async (event: APIGatewayEvent) => {
  Iif (!event.body) return;
 
  const parsedResult = events["capitated-amendment"].baseSchema.safeParse(JSON.parse(event.body));
  if (!parsedResult.success) {
    throw parsedResult.error;
  }
 
  // This is the backend check for auth
  Iif (!(await isAuthorized(event, parsedResult.data.id.slice(0, 2)))) {
    throw "Unauthorized";
  }
 
  // This is the backend check for the item already existing
  Iif (await itemExists({ id: parsedResult.data.id })) {
    throw "Item Already Exists";
  }
 
  const authDetails = getAuthDetails(event);
  const userAttr = await lookupUserAttributes(authDetails.userId, authDetails.poolId);
  const submitterEmail = userAttr.email;
  const user = await getUserByEmail(submitterEmail);
 
  Iif (!user) {
    throw new Error("User does not exist in User OpenSearch Index");
  }
 
  const transformedData = events["capitated-amendment"].schema.parse({
    ...parsedResult.data,
    submitterName: user.fullName,
    submitterEmail: user.email,
    timestamp: Date.now(),
  });
 
  return transformedData;
};