Merge pull request #77 from techulus/develop

Fix team invites

Author: arjunkomath

apps/web/pages/api/teams/invite/accept/index.ts

@@ -26,7 +26,7 @@ const acceptInvite = async (req: NextApiRequest, res: NextApiResponse) => {
         .from("team_invitations")
         .select("*")
         .eq("id", invite_id)
-        .eq("email", user.email)
+        .ilike("email", user.email)
         .single();
 
       if (!invite) {

packages/supabase/migrations/16_teams.sql

@@ -62,8 +62,8 @@ alter table team_invitations add constraint unique_email_team_id unique (email,
 alter table team_invitations enable row level security;
 create policy "Can view own team invitations." on team_invitations for select using (auth.uid() = inviter_id);
 create policy "Can delete own team invitations." on team_invitations for delete using (auth.uid() = inviter_id);
-create policy "Can view team invitations." on team_invitations for select using (auth.email() = email);
-create policy "Invited users can view teams." on teams for select using (id in (select team_id from team_invitations where email = auth.email()));
+create policy "Can view team invitations." on team_invitations for select using ((lower(auth.email()) = lower(email)));
+create policy "Invited users can view teams." on teams for select using ((id IN ( SELECT team_invitations.team_id FROM team_invitations WHERE (lower(team_invitations.email) = lower(auth.email())))));
 
 CREATE TRIGGER set_timestamp
 BEFORE UPDATE ON team_invitations