B2B-88: add starter kit structure and elements

packages/next/src/actions/index.ts

@@ -0,0 +1,76 @@
+import 'server-only';
+
+import { redirect } from 'next/navigation';
+
+import type { User } from '@supabase/supabase-js';
+
+import { ZodType, z } from 'zod';
+
+import { verifyCaptchaToken } from '@kit/auth/captcha/server';
+import { requireUser } from '@kit/supabase/require-user';
+import { getSupabaseServerClient } from '@kit/supabase/server-client';
+
+import { zodParseFactory } from '../utils';
+
+/**
+ * @name enhanceAction
+ * @description Enhance an action with captcha, schema and auth checks
+ */
+export function enhanceAction<
+  Args,
+  Response,
+  Config extends {
+    auth?: boolean;
+    captcha?: boolean;
+    schema?: z.ZodType<
+      Config['captcha'] extends true ? Args & { captchaToken: string } : Args,
+      z.ZodTypeDef
+    >;
+  },
+>(
+  fn: (
+    params: Config['schema'] extends ZodType ? z.infer<Config['schema']> : Args,
+    user: Config['auth'] extends false ? undefined : User,
+  ) => Response | Promise<Response>,
+  config: Config,
+) {
+  return async (
+    params: Config['schema'] extends ZodType ? z.infer<Config['schema']> : Args,
+  ) => {
+    type UserParam = Config['auth'] extends false ? undefined : User;
+
+    const requireAuth = config.auth ?? true;
+    let user: UserParam = undefined as UserParam;
+
+    // validate the schema passed in the config if it exists
+    const data = config.schema
+      ? zodParseFactory(config.schema)(params)
+      : params;
+
+    // by default, the CAPTCHA token is not required
+    const verifyCaptcha = config.captcha ?? false;
+
+    // verify the CAPTCHA token. It will throw an error if the token is invalid.
+    if (verifyCaptcha) {
+      const token = (data as Args & { captchaToken: string }).captchaToken;
+
+      // Verify the CAPTCHA token. It will throw an error if the token is invalid.
+      await verifyCaptchaToken(token);
+    }
+
+    // verify the user is authenticated if required
+    if (requireAuth) {
+      // verify the user is authenticated if required
+      const auth = await requireUser(getSupabaseServerClient());
+
+      // If the user is not authenticated, redirect to the specified URL.
+      if (!auth.data) {
+        redirect(auth.redirectTo);
+      }
+
+      user = auth.data as UserParam;
+    }
+
+    return fn(data, user);
+  };
+}