[pull] main from dubinc:main

apps/web/app/api/embed/referrals/analytics/route.ts

@@ -3,13 +3,13 @@ import { withReferralsEmbedToken } from "@/lib/embed/referrals/auth";
 import { NextResponse } from "next/server";
 
 // GET /api/embed/referrals/analytics – get timeseries analytics for a partner
-export const GET = withReferralsEmbedToken(async ({ programId, partnerId }) => {
+export const GET = withReferralsEmbedToken(async ({ programEnrollment }) => {
   const analytics = await getAnalytics({
     event: "composite",
     groupBy: "timeseries",
     interval: "1y",
-    programId,
-    partnerId,
+    programId: programEnrollment.programId,
+    partnerId: programEnrollment.partnerId,
   });
 
   return NextResponse.json(analytics);

apps/web/app/api/embed/referrals/earnings/route.ts

@@ -7,7 +7,7 @@ import { NextResponse } from "next/server";
 
 // GET /api/embed/referrals/earnings – get commissions for a partner from an embed token
 export const GET = withReferralsEmbedToken(
-  async ({ programId, partnerId, searchParams }) => {
+  async ({ programEnrollment, searchParams }) => {
     const { page } = z
       .object({ page: z.coerce.number().optional().default(1) })
       .parse(searchParams);
@@ -17,8 +17,8 @@ export const GET = withReferralsEmbedToken(
         earnings: {
           gt: 0,
         },
-        programId,
-        partnerId,
+        programId: programEnrollment.programId,
+        partnerId: programEnrollment.partnerId,
       },
       select: {
         id: true,

apps/web/app/api/embed/referrals/leaderboard/route.ts

@@ -5,7 +5,7 @@ import { NextResponse } from "next/server";
 import z from "node_modules/zod/lib";
 
 // GET /api/embed/referrals/leaderboard – get leaderboard for a program
-export const GET = withReferralsEmbedToken(async ({ programId }) => {
+export const GET = withReferralsEmbedToken(async ({ program }) => {
   const partners = await prisma.$queryRaw`
       SELECT 
         p.id,
@@ -26,11 +26,11 @@ export const GET = withReferralsEmbedToken(async ({ programId }) => {
           SUM(sales) as totalSales,
           SUM(saleAmount) as totalSaleAmount
         FROM Link
-        WHERE programId = ${programId}
+        WHERE programId = ${program.id}
         GROUP BY partnerId
       ) metrics ON metrics.partnerId = pe.partnerId
       WHERE 
-        pe.programId = ${programId}
+        pe.programId = ${program.id}
         AND pe.status = 'approved'
       ORDER BY 
         totalSaleAmount DESC,

apps/web/app/api/embed/referrals/links/[linkId]/route.ts

@@ -0,0 +1,91 @@
+import { DubApiError, ErrorCodes } from "@/lib/api/errors";
+import { processLink, updateLink } from "@/lib/api/links";
+import { parseRequestBody } from "@/lib/api/utils";
+import { withReferralsEmbedToken } from "@/lib/embed/referrals/auth";
+import { createPartnerLinkSchema } from "@/lib/zod/schemas/partners";
+import { ReferralsEmbedLinkSchema } from "@/lib/zod/schemas/referrals-embed";
+import { getApexDomain } from "@dub/utils";
+import { NextResponse } from "next/server";
+
+// PATCH /api/embed/referrals/links/[linkId] - update a link for a partner
+export const PATCH = withReferralsEmbedToken(
+  async ({ req, params, programEnrollment, program, links }) => {
+    const { url, key } = createPartnerLinkSchema
+      .pick({ url: true, key: true })
+      .parse(await parseRequestBody(req));
+
+    if (programEnrollment.status === "banned") {
+      throw new DubApiError({
+        code: "forbidden",
+        message: "You are banned from this program hence cannot create links.",
+      });
+    }
+
+    const link = links.find((link) => link.id === params.linkId);
+
+    if (!link) {
+      throw new DubApiError({
+        code: "not_found",
+        message: "Link not found.",
+      });
+    }
+
+    if (!program.domain || !program.url) {
+      throw new DubApiError({
+        code: "bad_request",
+        message:
+          "This program needs a domain and URL set before creating a link.",
+      });
+    }
+
+    if (url && getApexDomain(url) !== getApexDomain(program.url)) {
+      throw new DubApiError({
+        code: "bad_request",
+        message: `The provided URL domain (${getApexDomain(url)}) does not match the program's domain (${getApexDomain(program.url)}).`,
+      });
+    }
+
+    // if domain and key are the same, we don't need to check if the key exists
+    const skipKeyChecks = link.key.toLowerCase() === key?.toLowerCase();
+
+    const {
+      link: processedLink,
+      error,
+      code,
+    } = await processLink({
+      // @ts-expect-error
+      payload: {
+        ...link,
+        key: key || undefined,
+        url: url || program.url,
+      },
+      workspace: {
+        id: program.workspaceId,
+        plan: "business",
+      },
+      userId: link.userId!,
+      skipKeyChecks,
+      skipFolderChecks: true, // can't be changed by the partner
+      skipProgramChecks: true, // can't be changed by the partner
+      skipExternalIdChecks: true, // can't be changed by the partner
+    });
+
+    if (error != null) {
+      throw new DubApiError({
+        code: code as ErrorCodes,
+        message: error,
+      });
+    }
+
+    const partnerLink = await updateLink({
+      oldLink: {
+        domain: link.domain,
+        key: link.key,
+        image: link.image,
+      },
+      updatedLink: processedLink,
+    });
+
+    return NextResponse.json(ReferralsEmbedLinkSchema.parse(partnerLink));
+  },
+);

apps/web/app/api/embed/referrals/links/route.ts

@@ -0,0 +1,99 @@
+import { DubApiError, ErrorCodes } from "@/lib/api/errors";
+import { createLink, processLink } from "@/lib/api/links";
+import { parseRequestBody } from "@/lib/api/utils";
+import { PARTNER_LINKS_LIMIT } from "@/lib/embed/constants";
+import { withReferralsEmbedToken } from "@/lib/embed/referrals/auth";
+import { createPartnerLinkSchema } from "@/lib/zod/schemas/partners";
+import { ReferralsEmbedLinkSchema } from "@/lib/zod/schemas/referrals-embed";
+import { prisma } from "@dub/prisma";
+import { getApexDomain } from "@dub/utils";
+import { NextResponse } from "next/server";
+
+// GET /api/embed/referrals/links – get links for a partner
+export const GET = withReferralsEmbedToken(async ({ links }) => {
+  const partnerLinks = ReferralsEmbedLinkSchema.array().parse(links);
+
+  return NextResponse.json(partnerLinks);
+});
+
+// POST /api/embed/referrals/links – create links for a partner
+export const POST = withReferralsEmbedToken(
+  async ({ req, programEnrollment, program, links }) => {
+    const { url, key } = createPartnerLinkSchema
+      .pick({ url: true, key: true })
+      .parse(await parseRequestBody(req));
+
+    if (programEnrollment.status === "banned") {
+      throw new DubApiError({
+        code: "forbidden",
+        message: "You are banned from this program hence cannot create links.",
+      });
+    }
+
+    if (!program.domain || !program.url) {
+      throw new DubApiError({
+        code: "bad_request",
+        message:
+          "This program needs a domain and URL set before creating a link.",
+      });
+    }
+
+    if (links.length >= PARTNER_LINKS_LIMIT) {
+      throw new DubApiError({
+        code: "bad_request",
+        message: `You have reached the limit of ${PARTNER_LINKS_LIMIT} program links.`,
+      });
+    }
+
+    if (url && getApexDomain(url) !== getApexDomain(program.url)) {
+      throw new DubApiError({
+        code: "bad_request",
+        message: `The provided URL domain (${getApexDomain(url)}) does not match the program's domain (${getApexDomain(program.url)}).`,
+      });
+    }
+
+    const workspaceOwner = await prisma.projectUsers.findFirst({
+      where: {
+        projectId: program.workspaceId,
+        role: "owner",
+      },
+      orderBy: {
+        createdAt: "desc",
+      },
+    });
+
+    const { link, error, code } = await processLink({
+      payload: {
+        key: key || undefined,
+        url: url || program.url,
+        domain: program.domain,
+        programId: program.id,
+        folderId: program.defaultFolderId,
+        tenantId: programEnrollment.tenantId,
+        partnerId: programEnrollment.partnerId,
+        trackConversion: true,
+      },
+      workspace: {
+        id: program.workspaceId,
+        plan: "business",
+      },
+      userId: workspaceOwner?.userId,
+      skipFolderChecks: true, // can't be changed by the partner
+      skipProgramChecks: true, // can't be changed by the partner
+      skipExternalIdChecks: true, // can't be changed by the partner
+    });
+
+    if (error != null) {
+      throw new DubApiError({
+        code: code as ErrorCodes,
+        message: error,
+      });
+    }
+
+    const partnerLink = await createLink(link);
+
+    return NextResponse.json(ReferralsEmbedLinkSchema.parse(partnerLink), {
+      status: 201,
+    });
+  },
+);

apps/web/app/api/partner-profile/programs/[programId]/links/route.ts

@@ -3,13 +3,12 @@ import { createLink, processLink } from "@/lib/api/links";
 import { getProgramEnrollmentOrThrow } from "@/lib/api/programs/get-program-enrollment-or-throw";
 import { parseRequestBody } from "@/lib/api/utils";
 import { withPartnerProfile } from "@/lib/auth/partner";
+import { PARTNER_LINKS_LIMIT } from "@/lib/embed/constants";
 import { PartnerProfileLinkSchema } from "@/lib/zod/schemas/partner-profile";
 import { createPartnerLinkSchema } from "@/lib/zod/schemas/partners";
 import { getApexDomain } from "@dub/utils";
 import { NextResponse } from "next/server";
 
-const PARTNER_LINKS_LIMIT = 5;
-
 // GET /api/partner-profile/programs/[programId]/links - get a partner's links in a program
 export const GET = withPartnerProfile(async ({ partner, params }) => {
   const { links } = await getProgramEnrollmentOrThrow({
@@ -80,7 +79,7 @@ export const POST = withPartnerProfile(
         id: program.workspaceId,
         plan: "business",
       },
-      userId: session.user.id,
+      userId: session.user.id, // TODO: Hm, this is the partner user, not the workspace user?
       skipFolderChecks: true, // can't be changed by the partner
       skipProgramChecks: true, // can't be changed by the partner
       skipExternalIdChecks: true, // can't be changed by the partner

apps/web/app/app.dub.co/embed/referrals/activity.tsx

@@ -1,7 +1,6 @@
 import { CursorRays } from "@/ui/layout/sidebar/icons/cursor-rays";
 import { InfoTooltip, MiniAreaChart } from "@dub/ui";
-import { cn, currencyFormatter, nFormatter } from "@dub/utils";
-import { fetcher } from "@dub/utils/src/functions";
+import { cn, currencyFormatter, fetcher, nFormatter } from "@dub/utils";
 import { useEmbedToken } from "app/app.dub.co/embed/use-embed-token";
 import { AnalyticsTimeseries } from "dub/models/components";
 import { SVGProps, useId } from "react";
@@ -22,8 +21,13 @@ export function ReferralsEmbedActivity({
 
   const isEmpty = clicks === 0 && leads === 0 && sales === 0;
   const { data: analytics } = useSWR<AnalyticsTimeseries[]>(
-    !isEmpty && `/api/embed/referrals/analytics?token=${token}`,
-    fetcher,
+    !isEmpty && "/api/embed/referrals/analytics",
+    (url) =>
+      fetcher(url, {
+        headers: {
+          Authorization: `Bearer ${token}`,
+        },
+      }),
     {
       keepPreviousData: true,
       dedupingInterval: 60000,