fix(event): replace organizerId with organizer public fields in GET /:slug response (#346)

The event detail endpoint was returning the raw organizer UUID via
organizerId, leaking an internal database identifier to unauthenticated
callers. Fetch the organizer relation and expose organizerUsername and
organizerDisplayName instead.

Author: anshul23102

apps/backend/src/routes/event.ts

@@ -5,15 +5,16 @@ import {generateUniqueSlug} from '../utils/slug'
 
 
 type EventDetails = {
-    id: string; 
-    name: string; 
-    slug: string; 
-    location: string; 
-    description: string | null; 
-    organizerId: string; 
-    startDate: Date; 
-    endDate: Date; 
-    createdAt: Date; 
+    id: string;
+    name: string;
+    slug: string;
+    location: string;
+    description: string | null;
+    organizerUsername: string;
+    organizerDisplayName: string;
+    startDate: Date;
+    endDate: Date;
+    createdAt: Date;
     attendeesCount: number
 }
 
@@ -115,13 +116,19 @@ export async function eventRoutes(app:FastifyInstance) {
         const paramsSlug = request.params.slug; 
         const details = await app.prisma.event.findUnique({
             where: {
-                slug : paramsSlug, 
+                slug: paramsSlug,
             },
             include: {
                 _count: {
                     select: {
                         attendees: true
                     }
+                },
+                organizer: {
+                    select: {
+                        username: true,
+                        displayName: true
+                    }
                 }
             }
         })
@@ -131,14 +138,15 @@ export async function eventRoutes(app:FastifyInstance) {
 
         const response: EventDetails = {
             id: details.id,
-            name: details.name, 
-            slug: details.slug, 
+            name: details.name,
+            slug: details.slug,
             description: details.description,
             location: details.location,
-            organizerId: details.organizerId, 
+            organizerUsername: details.organizer.username,
+            organizerDisplayName: details.organizer.displayName,
             startDate: details.startDate,
-            endDate: details.endDate, 
-            createdAt: details.createdAt, 
+            endDate: details.endDate,
+            createdAt: details.createdAt,
             attendeesCount: details._count.attendees
         }