Something went wrong. Try again.
a tool for shared writing and social publishing
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158import { supabaseServerClient } from "supabase/serverClient";import { publishAtprotoSubscriptionForDid } from "app/(app)/lish/subscribeToPublication";import { parseActionFromSearchParam } from "app/api/oauth/[route]/afterSignInActions";import { getSuppression, deleteSuppression,} from "src/utils/postmarkSuppressions";import { membershipJoinUrl } from "src/membership.server";import { Ok, Err, type Result } from "src/result";
export async function recordEmailSubscription( publicationUri: string, email: string, identityId: string,): Promise<Result<null, "database_error">> { const { data: existing } = await supabaseServerClient .from("publication_email_subscribers") .select("state") .eq("publication", publicationUri) .eq("email", email) .maybeSingle(); const wasUnsubscribed = existing?.state === "unsubscribed";
const { data: subscriber, error } = await supabaseServerClient .from("publication_email_subscribers") .upsert( { publication: publicationUri, email, identity_id: identityId, state: "confirmed", confirmation_code: null, confirmed_at: new Date().toISOString(), unsubscribed_at: null, }, { onConflict: "publication,email" }, ) .select("id") .single(); if (error || !subscriber) { console.error("[recordEmailSubscription] upsert failed:", error); return Err("database_error"); }
const { error: eventsError } = await supabaseServerClient .from("publication_email_subscriber_events") .insert([ { subscriber: subscriber.id, publication: publicationUri, event_type: wasUnsubscribed ? "resubscribed" : "subscribe_requested", }, { subscriber: subscriber.id, publication: publicationUri, event_type: "confirmed", }, ]); if (eventsError) { console.error("[recordEmailSubscription] events failed:", eventsError); return Err("database_error"); }
const { data: confirmedIdentity } = await supabaseServerClient .from("identities") .select("atp_did") .eq("id", identityId) .maybeSingle(); if (confirmedIdentity?.atp_did) { await publishAtprotoSubscriptionForDid( confirmedIdentity.atp_did, publicationUri, ); }
return Ok(null);}
export async function checkEmailSubscriptionAllowed( publicationUri: string, email: string,): Promise< Result< null, | "newsletter_disabled" | "suppressed_spam_complaint" | "suppression_delete_failed" >> { const { data: settings } = await supabaseServerClient .from("publication_newsletter_settings") .select("enabled") .eq("publication", publicationUri) .maybeSingle(); if (!settings?.enabled) return Err("newsletter_disabled");
const suppression = await getSuppression(email); if (suppression?.reason === "SpamComplaint") { return Err("suppressed_spam_complaint"); } if ( suppression?.reason === "HardBounce" || suppression?.reason === "ManualSuppression" ) { const deleted = await deleteSuppression(email); if (!deleted) return Err("suppression_delete_failed"); } return Ok(null);}
// Runs the after-sign-in action (parsed from the `action` search param) for a// just-authenticated email identity and returns where to send the browser. When// there is no action — or no authenticated identity — the redirect is returned// unchanged; only a recognized action does extra work. `subscribe` is currently// the only handler. Called from the email-login flow's two mutually-exclusive// entry points: the reused-session fast path in app/api/auth/email-login/route.ts// and the fresh-confirm path in confirmEmailLogin.export async function applyAfterSignInAction( action: string | null, redirect: string, email: string | null, identityId: string | null,): Promise<string> { const parsed = parseActionFromSearchParam(action); if (!parsed || !email || !identityId) return redirect;
switch (parsed.action) { case "subscribe": { const target = new URL(redirect); const allowed = await checkEmailSubscriptionAllowed( parsed.publication, email, ); if (!allowed.ok) { target.searchParams.set("subscribe_email_error", allowed.error); return target.toString(); } const recorded = await recordEmailSubscription( parsed.publication, email, identityId, ); if (!recorded.ok) { target.searchParams.set("subscribe_email_error", recorded.error); return target.toString(); } // Memberships enabled → land the new subscriber on the tier page // instead of the confirmation toast. const joinUrl = await membershipJoinUrl(parsed.publication); if (joinUrl) return new URL(joinUrl, target).toString(); target.searchParams.set("subscribe_email", email); return target.toString(); } default: return redirect; }}