@sanity/sdk/src/auth/getOrganizationVerificationState.ts

Sanity SDK

import {combineLatest, distinctUntilChanged, map, type Observable, of, switchMap} from 'rxjs'

import {
  compareProjectOrganization,
  type OrgVerificationResult,
} from '../project/organizationVerification'
import {getProjectState} from '../project/project'
import {type SanityInstance} from '../store/createSanityInstance'
import {getDashboardOrganizationId} from './dashboardUtils'

/**
 * Creates an observable that emits the organization verification state for a given instance.
 * It combines the dashboard organization ID (from auth context) with the
 * project's actual organization ID (fetched via getProjectState) and compares them.
 * @public
 */
export function observeOrganizationVerificationState(
  instance: SanityInstance,
  projectIds: string[],
): Observable<OrgVerificationResult> {
  // Observable for the dashboard org ID (potentially null)
  const dashboardOrgId$ =
    getDashboardOrganizationId(instance).observable.pipe(distinctUntilChanged())

  // Create observables for each project's org ID
  const projectOrgIdObservables = projectIds.map((id) =>
    getProjectState(instance, {projectId: id}).observable.pipe(
      map((project) => ({projectId: id, orgId: project?.organizationId ?? null})),
      // Ensure we only proceed if the orgId is loaded, distinct prevents unnecessary checks
      distinctUntilChanged((prev, curr) => prev.orgId === curr.orgId),
    ),
  )

  // Combine observables to get all project org IDs
  const allProjectOrgIds$ =
    projectOrgIdObservables.length > 0 ? combineLatest(projectOrgIdObservables) : of([])

  // Combine the sources
  return combineLatest([dashboardOrgId$, allProjectOrgIds$]).pipe(
    switchMap(([dashboardOrgId, projectOrgDataArray]) => {
      // If no dashboard org ID is set, or no project IDs provided, verification isn't applicable/possible
      if (!dashboardOrgId || projectOrgDataArray.length === 0) {
        return of<OrgVerificationResult>({error: null}) // Return success (no error)
      }

      // Iterate through all projects and check organization IDs
      for (const projectData of projectOrgDataArray) {
        // If a project doesn't have an orgId, we can't verify, treat as non-blocking for now
        // (Matches original logic where null projectOrgId resulted in {error: null})
        if (!projectData.orgId) {
          continue
        }

        // Perform the comparison for the current project
        const result = compareProjectOrganization(
          projectData.projectId,
          projectData.orgId,
          dashboardOrgId,
        )

        // If any project fails verification, immediately return the error
        if (result.error) {
          return of(result)
        }
      }

      // If all projects passed verification (or had no orgId to check)
      return of<OrgVerificationResult>({error: null})
    }),
    // Only emit when the overall error status actually changes
    distinctUntilChanged((prev, curr) => prev.error === curr.error),
  )
}