import type { NextApiRequest } from "next"; import { getServerSession } from "@calcom/features/auth/lib/getServerSession"; import handleNewBooking from "@calcom/features/bookings/lib/handleNewBooking"; import { checkRateLimitAndThrowError } from "@calcom/lib/checkRateLimitAndThrowError"; import getIP from "@calcom/lib/getIP"; import { defaultResponder } from "@calcom/lib/server"; import { checkCfTurnstileToken } from "@calcom/lib/server/checkCfTurnstileToken"; import { CreationSource } from "@calcom/prisma/enums"; async function handler(req: NextApiRequest & { userId?: number }) { const userIp = getIP(req); if (process.env.NEXT_PUBLIC_CLOUDFLARE_USE_TURNSTILE_IN_BOOKER === "1") { await checkCfTurnstileToken({ token: req.body["cfToken"] as string, remoteIp: userIp, }); } await checkRateLimitAndThrowError({ rateLimitingType: "core", identifier: userIp, }); const session = await getServerSession({ req }); /* To mimic API behavior and comply with types */ req.userId = session?.user?.id || -1; req.body = { ...req.body, creationSource: CreationSource.WEBAPP, }; const booking = await handleNewBooking(req); return booking; } export default defaultResponder(handler, "/api/book/event");