refactor: consolidate check-email into Elysia rate limiter (Task 6)

lib/api/__tests__/check-email.test.ts

@@ -0,0 +1,41 @@
+import { describe, it, expect } from "vitest"
+import { loginEmailSchema } from "@/lib/auth/validation"
+
+describe("check-email validation", () => {
+  it("accepts valid email", () => {
+    const result = loginEmailSchema.safeParse({ email: "user@example.com" })
+    expect(result.success).toBe(true)
+  })
+
+  it("rejects missing email", () => {
+    const result = loginEmailSchema.safeParse({})
+    expect(result.success).toBe(false)
+  })
+
+  it("rejects invalid email format", () => {
+    const result = loginEmailSchema.safeParse({ email: "not-email" })
+    expect(result.success).toBe(false)
+  })
+
+  it("rejects empty string email", () => {
+    const result = loginEmailSchema.safeParse({ email: "" })
+    expect(result.success).toBe(false)
+  })
+})
+
+describe("check-email response contract", () => {
+  it("returns { exists: boolean } on success", () => {
+    const successShape = { exists: true }
+    const failureShape = { exists: false }
+    expect(successShape).toHaveProperty("exists")
+    expect(failureShape).toHaveProperty("exists")
+    expect(typeof successShape.exists).toBe("boolean")
+    expect(typeof failureShape.exists).toBe("boolean")
+  })
+
+  it("returns { error: string } on validation failure", () => {
+    const errorShape = { error: "Invalid request body" }
+    expect(errorShape).toHaveProperty("error")
+    expect(typeof errorShape.error).toBe("string")
+  })
+})

lib/api/app.ts

@@ -1,4 +1,4 @@
-import { Elysia } from "elysia"
+import { Elysia, t } from "elysia"
 import { openapi } from "@elysia/openapi"
 import { cron, Patterns } from "@elysia/cron"
 import { auth } from "@/lib/auth"
@@ -45,6 +45,10 @@ import { savedFilterRoutes } from "@/lib/api/saved-filters"
 import { cronRoutes } from "@/lib/api/cron"
 import { profilePhotoRoutes } from "@/lib/api/profile-photo"
 import { screenshotRoutes } from "@/lib/api/screenshots"
+import { loginEmailSchema } from "@/lib/auth/validation"
+import { db } from "@/lib/db"
+import { user } from "@/lib/db/schema/auth"
+import { eq } from "drizzle-orm"
 import { mobileRoutes } from "@/lib/api/mobile"
 
 const betterAuth = new Elysia({ name: "better-auth" })
@@ -156,6 +160,33 @@ export const app = new Elysia({ prefix: "/api" })
       .use(betterAuth)
       .use(userRoutes)
       .use(profilePhotoRoutes)
+      .post(
+        "/auth/check-email",
+        async ({ body, set }) => {
+          const result = loginEmailSchema.safeParse(body)
+          if (!result.success) {
+            set.status = 400
+            return { error: result.error.issues[0].message }
+          }
+
+          const { email } = result.data
+          const existingUser = await db
+            .select({ id: user.id })
+            .from(user)
+            .where(eq(user.email, email.toLowerCase()))
+            .limit(1)
+
+          return { exists: existingUser.length > 0 }
+        },
+        {
+          body: t.Object({ email: t.String() }),
+          response: t.Union([
+            t.Object({ exists: t.Boolean() }),
+            t.Object({ error: t.String() }),
+          ]),
+          detail: { hide: true },
+        },
+      )
   )
   // ── Read-heavy public routes (read rate limit) ───────────────
   .group("", (app) =>