Add verify middleware

server/routers/org/createOrg.ts

@@ -11,6 +11,8 @@ const createOrgSchema = z.object({
   domain: z.string().min(1).max(255),
 });
 
+const MAX_ORGS = 5;
+
 export async function createOrg(req: Request, res: Response, next: NextFunction): Promise<any> {
   try {
     const parsedBody = createOrgSchema.safeParse(req.body);
@@ -23,6 +25,16 @@ export async function createOrg(req: Request, res: Response, next: NextFunction)
       );
     }
 
+    const userOrgIds = req.userOrgs;
+    if (userOrgIds && userOrgIds.length > MAX_ORGS) {
+      return next(
+        createHttpError(
+          HttpCode.FORBIDDEN,
+          `Maximum number of organizations reached.`
+        )
+      );
+    }
+
     const { name, domain } = parsedBody.data;
 
     const newOrg = await db.insert(orgs).values({

server/routers/org/listOrgs.ts

@@ -5,7 +5,7 @@ import { orgs } from '@server/db/schema';
 import response from "@server/utils/response";
 import HttpCode from '@server/types/HttpCode';
 import createHttpError from 'http-errors';
-import { sql } from 'drizzle-orm';
+import { sql, inArray } from 'drizzle-orm';
 
 const listOrgsSchema = z.object({
   limit: z.string().optional().transform(Number).pipe(z.number().int().positive().default(10)),
@@ -26,15 +26,45 @@ export async function listOrgs(req: Request, res: Response, next: NextFunction):
 
     const { limit, offset } = parsedQuery.data;
 
+    // Use the userOrgs passed from the middleware
+    const userOrgIds = req.userOrgs;
+
+    if (!userOrgIds || userOrgIds.length === 0) {
+      return res.status(HttpCode.OK).send(
+        response(res, {
+          data: {
+            organizations: [],
+            pagination: {
+              total: 0,
+              limit,
+              offset,
+            },
+          },
+          success: true,
+          error: false,
+          message: "No organizations found for the user",
+          status: HttpCode.OK,
+        })
+      );
+    }
+
     const organizations = await db.select()
       .from(orgs)
+      .where(inArray(orgs.orgId, userOrgIds))
       .limit(limit)
       .offset(offset);
 
     const totalCountResult = await db.select({ count: sql<number>`cast(count(*) as integer)` })
-      .from(orgs);
+      .from(orgs)
+      .where(inArray(orgs.orgId, userOrgIds));
     const totalCount = totalCountResult[0].count;
 
+    // // Add the user's role for each organization
+    // const organizationsWithRoles = organizations.map(org => ({
+    //   ...org,
+    //   userRole: req.userOrgRoles[org.orgId],
+    // }));
+
     return res.status(HttpCode.OK).send(
       response(res, {
         data: {