leaflet / actions / getIdentityData.ts

"use server";

import { supabaseServerClient } from "supabase/serverClient";
import { cache } from "react";
import { unstable_cache } from "next/cache";
import { deduplicateByUri } from "src/utils/deduplicateRecords";
import { getAuthToken } from "src/auth";

const getCachedIdentityData = unstable_cache(
  (auth_token: string) => fetchIdentityData(auth_token),
  ["identity-data"],
  { revalidate: 30 },
);

export const getIdentityData = cache(async () => {
  let auth_token = await getAuthToken();
  if (!auth_token) return null;
  return getCachedIdentityData(auth_token);
});

export async function uncachedGetIdentityData() {
  let auth_token = await getAuthToken();
  if (!auth_token) return null;

  return fetchIdentityData(auth_token);
}

async function fetchIdentityData(auth_token: string) {
  let auth_res = await supabaseServerClient
    .from("email_auth_tokens")
    .select(
      `*,
          identities(
            *,
            bsky_profiles(*),
            notifications(count),
            publication_subscriptions(*),
            custom_domains!custom_domains_identity_id_fkey(publication_domains(*), *),
            home_leaflet:permission_tokens!identities_home_page_fkey(*, permission_token_rights(*,
                              entity_sets(entities(facts(*)))
            )),
            permission_token_on_homepage(
              archived,
              created_at,
              permission_tokens!inner(
                id,
                root_entity,
                permission_token_rights(*),
                leaflets_to_documents(*, documents(*)),
                leaflets_in_publications(*, publications(*), documents(*))
              )
            ),
            user_subscriptions(plan, status, current_period_end),
            user_entitlements(entitlement_key, granted_at, expires_at, source, metadata)
          )`,
    )
    .eq("identities.notifications.read", false)
    .eq("id", auth_token)
    .eq("confirmed", true)
    .single();

  if (!auth_res?.data?.identities) return null;

  // Transform embedded entitlements into a keyed record, filtering expired
  const now = new Date().toISOString();
  const entitlements: Record<
    string,
    {
      granted_at: string;
      expires_at: string | null;
      source: string | null;
      metadata: unknown;
    }
  > = {};
  for (const row of auth_res.data.identities.user_entitlements || []) {
    if (row.expires_at && row.expires_at < now) continue;
    entitlements[row.entitlement_key] = {
      granted_at: row.granted_at,
      expires_at: row.expires_at,
      source: row.source,
      metadata: row.metadata,
    };
  }

  const subscription = auth_res.data.identities.user_subscriptions ?? null;

  if (auth_res.data.identities.atp_did) {
    //I should create a relationship table so I can do this in the above query
    let { data: rawPublications } = await supabaseServerClient
      .from("publications")
      .select("*")
      .eq("identity_did", auth_res.data.identities.atp_did);
    // Deduplicate records that may exist under both pub.leaflet and site.standard namespaces
    const publications = deduplicateByUri(rawPublications || []);
    return {
      ...auth_res.data.identities,
      publications,
      entitlements,
      subscription,
    };
  }

  return {
    ...auth_res.data.identities,
    publications: [],
    entitlements,
    subscription,
  };
}