upstream-rocketchat/apps/meteor/server/lib/rooms/invites/useInviteToken.ts

import { isBannedSubscription } from '@rocket.chat/core-typings';
import { Invites, Subscriptions, Users } from '@rocket.chat/models';
import { Meteor } from 'meteor/meteor';

import { validateInviteToken } from './validateInviteToken';
import { RoomMemberActions } from '../../../../definition/IRoomTypeConfig';
import { addUserToRoom } from '../addUserToRoom';
import { roomCoordinator } from '../roomCoordinator';

export const useInviteToken = async (userId: string, token: string) => {
	if (!userId) {
		throw new Meteor.Error('error-invalid-user', 'The user is invalid', {
			method: 'useInviteToken',
			field: 'userId',
		});
	}

	if (!token) {
		throw new Meteor.Error('error-invalid-token', 'The invite token is invalid.', {
			method: 'useInviteToken',
			field: 'token',
		});
	}

	const { inviteData, room } = await validateInviteToken(token);

	if (!(await roomCoordinator.getRoomDirectives(room.t).allowMemberAction(room, RoomMemberActions.INVITE, userId))) {
		throw new Meteor.Error('error-room-type-not-allowed', "Can't join room of this type via invite", {
			method: 'useInviteToken',
			field: 'token',
		});
	}

	const user = await Users.findOneById(userId);
	if (!user) {
		throw new Meteor.Error('error-invalid-user', 'The user is invalid', {
			method: 'useInviteToken',
			field: 'userId',
		});
	}
	const subscription = await Subscriptions.findOneByRoomIdAndUserId(room._id, user._id);
	if (subscription && isBannedSubscription(subscription)) {
		throw new Meteor.Error('error-user-is-banned', 'User is banned from this room', {
			method: 'useInviteToken',
		});
	}

	await Users.updateInviteToken(user._id, token);

	if (!subscription) {
		await Invites.increaseUsageById(inviteData._id, 1);
	}

	// If the user already has an username, then join the invite room,
	// If no username is set yet, then the the join will happen on the setUsername method
	if (user.username) {
		await addUserToRoom(room._id, user);
	}

	return {
		room: {
			rid: inviteData.rid,
			prid: room.prid,
			fname: room.fname,
			name: room.name,
			t: room.t,
		},
	};
};