Session 25: UserProfile+Clerk webhook, commIntegration errors, CodingChallenge page

Author: theunstopabble

apps/api/src/index.ts

@@ -13,6 +13,7 @@ import geoFencingRoutes from "./routes/geoFencing";
 import videoProctoringRoutes from "./routes/videoProctoring";
 import ssoIntegrationRoutes from "./routes/ssoIntegration";
 import webhooksRoutes from "./routes/webhooks";
+import clerkWebhookRoutes from "./routes/clerkWebhook";
 import multiTenancyRoutes from "./routes/multiTenancy";
 import { initializeDefaultPlanLimits } from "./lib/multiTenancy";
 import jobMatchingRoutes from "./routes/jobMatching";
@@ -336,6 +337,11 @@ app.use(
   webhooksRoutes,
 );
 
+app.use(
+  "/api/clerk",
+  clerkWebhookRoutes,
+);
+
 app.use(
   "/api/tenants",
   multiTenancyRoutes,

apps/api/src/lib/analytics.ts

@@ -1,6 +1,6 @@
 import { InterviewModel } from "../models/Interview";
 import { ProctoringSessionModel } from "../models/ProctoringSession";
-import { ResumeModel } from "../models/Resume";
+import { UserProfileModel } from "../models/UserProfile";
 import { logger } from "./logger";
 
 interface InterviewAnalytics {
@@ -194,20 +194,15 @@ export async function getTopPerformers(limit: number = 10): Promise<{ candidateI
     .lean();
 
   const userIds = [...new Set(docs.map(d => d.userId))];
-  const resumes = await ResumeModel.find({ userId: { $in: userIds } }).select("userId fileName").lean();
+  const profiles = await UserProfileModel.find({ userId: { $in: userIds } }).select("userId name").lean();
   const nameMap = new Map<string, string>();
-  for (const r of resumes) {
-    const name = r.fileName
-      .replace(/\.\w+$/, '')
-      .replace(/[_-]/g, ' ')
-      .replace(/\b(resume|cv|bio)\b/gi, '')
-      .trim();
-    if (name) nameMap.set(r.userId, name);
+  for (const p of profiles) {
+    if (p.name) nameMap.set(p.userId, p.name);
   }
 
   return docs.map((d) => ({
     candidateId: d.userId,
-    name: nameMap.get(d.userId) || `Candidate ${d.userId.slice(0, 8)}`,
+    name: nameMap.get(d.userId) || d.userId.slice(0, 8),
     score: d.score as number,
     trend: 'stable',
   }));

apps/api/src/lib/communicationIntegration.ts

@@ -38,8 +38,7 @@ export async function sendSlackMessage(webhookUrl: string, message: SlackMessage
 export async function createSlackChannel(name: string, topic?: string): Promise<{ channelId: string; name: string }> {
   const token = process.env.SLACK_BOT_TOKEN;
   if (!token) {
-    logger.warn("SLACK_BOT_TOKEN not configured; returning placeholder channel ID");
-    return { channelId: `C${Date.now()}`, name };
+    throw new Error("SLACK_BOT_TOKEN not configured — cannot create Slack channel");
   }
   try {
     const res = await axios.post("https://slack.com/api/conversations.create", {
@@ -61,7 +60,7 @@ export async function createSlackChannel(name: string, topic?: string): Promise<
     throw new Error(res.data?.error || "Slack API error");
   } catch (err: any) {
     logger.error({ err: err.message }, "Slack channel creation failed");
-    return { channelId: `C${Date.now()}`, name };
+    throw err;
   }
 }
 
@@ -305,8 +304,7 @@ export async function createGoogleMeetEvent(config: GoogleMeetConfig, event: Goo
   logger.info({ summary: event.summary }, "Creating Google Meet event");
   const accessToken = await refreshGoogleAccessToken(config);
   if (!accessToken) {
-    logger.warn("No Google access token; returning placeholder Meet link");
-    return { meetLink: `https://meet.google.com/abc-${Date.now()}`, eventId: `gcal_${Date.now()}` };
+    throw new Error("Google OAuth token refresh failed — cannot create Meet event. Ensure valid refreshToken is provided.");
   }
   try {
     const res = await axios.post("https://www.googleapis.com/calendar/v3/calendars/primary/events", {

apps/api/src/lib/syncUserProfile.ts

@@ -0,0 +1,38 @@
+import axios from "axios";
+import { UserProfileModel } from "../models/UserProfile";
+import { logger } from "./logger";
+
+const CLERK_SECRET_KEY = process.env.CLERK_SECRET_KEY;
+const CLERK_API = "https://api.clerk.com/v1";
+
+export async function syncUserFromClerk(userId: string): Promise<void> {
+  try {
+    if (!CLERK_SECRET_KEY) return;
+
+    const { data } = await axios.get(`${CLERK_API}/users/${userId}`, {
+      headers: { Authorization: `Bearer ${CLERK_SECRET_KEY}` },
+      timeout: 5000,
+    });
+
+    const name = [data.first_name, data.last_name].filter(Boolean).join(" ") || data.username || userId;
+    const email = data.email_addresses?.[0]?.email_address || "";
+    const avatarUrl = data.image_url || "";
+
+    await UserProfileModel.findOneAndUpdate(
+      { userId },
+      { name, email, avatarUrl, lastSyncedAt: new Date() },
+      { upsert: true, new: true },
+    );
+  } catch (err: unknown) {
+    logger.warn({ err: (err as Error).message, userId }, "Failed to sync user from Clerk");
+  }
+}
+
+export async function getOrCreateUserProfile(userId: string): Promise<{ name: string; email: string }> {
+  const existing = await UserProfileModel.findOne({ userId }).lean();
+  if (existing) return { name: existing.name, email: existing.email };
+
+  await syncUserFromClerk(userId);
+  const synced = await UserProfileModel.findOne({ userId }).lean();
+  return { name: synced?.name || userId, email: synced?.email || "" };
+}

apps/api/src/middleware/auth.ts

@@ -2,9 +2,12 @@ import { requireAuth as clerkRequireAuth } from "@clerk/express";
 import { Request, Response, NextFunction } from "express";
 import dotenv from "dotenv";
 import { logger } from "../lib/logger";
+import { syncUserFromClerk } from "../lib/syncUserProfile";
+import { UserProfileModel } from "../models/UserProfile";
 
 dotenv.config();
 
+const LazySyncInterval = parseInt(process.env.USER_SYNC_INTERVAL || "3600000");
 
 export const requireAuth = (
   req: Request,
@@ -19,6 +22,21 @@ export const requireAuth = (
         .status(401)
         .json({ error: "Unauthorized! Please login first." });
     }
+
+    const userId = (req as any).auth?.userId;
+    if (userId && process.env.CLERK_SECRET_KEY) {
+      UserProfileModel.findOne({ userId }).lean()
+        .then(existing => {
+          const needsSync = !existing ||
+            !existing.name ||
+            Date.now() - new Date(existing.lastSyncedAt).getTime() > LazySyncInterval;
+          if (needsSync) syncUserFromClerk(userId);
+        })
+        .catch(() => {});
+    }
+
     next();
   });
 };
+
+

apps/api/src/models/UserProfile.ts

@@ -0,0 +1,23 @@
+import mongoose from "mongoose";
+
+export interface IUserProfile {
+  userId: string;
+  name: string;
+  email: string;
+  avatarUrl: string;
+  role: "candidate" | "interviewer" | "admin";
+  lastSyncedAt: Date;
+  createdAt: Date;
+  updatedAt: Date;
+}
+
+const userProfileSchema = new mongoose.Schema({
+  userId: { type: String, required: true, unique: true, index: true },
+  name: { type: String, default: "" },
+  email: { type: String, default: "" },
+  avatarUrl: { type: String, default: "" },
+  role: { type: String, enum: ["candidate", "interviewer", "admin"], default: "candidate" },
+  lastSyncedAt: { type: Date, default: Date.now },
+}, { timestamps: true });
+
+export const UserProfileModel = mongoose.model<IUserProfile>("UserProfile", userProfileSchema);

apps/api/src/routes/clerkWebhook.ts

@@ -0,0 +1,71 @@
+import { Router, Request, Response } from "express";
+import { Webhook } from "svix";
+import { UserProfileModel } from "../models/UserProfile";
+import { logger } from "../lib/logger";
+
+const router = Router();
+
+router.post("/webhook", async (req: Request, res: Response) => {
+  const secret = process.env.CLERK_WEBHOOK_SECRET;
+  if (!secret) {
+    res.status(500).json({ error: "CLERK_WEBHOOK_SECRET not configured" });
+    return;
+  }
+
+  const svixId = req.headers["svix-id"] as string;
+  const svixTimestamp = req.headers["svix-timestamp"] as string;
+  const svixSignature = req.headers["svix-signature"] as string;
+
+  if (!svixId || !svixTimestamp || !svixSignature) {
+    res.status(400).json({ error: "Missing Svix headers" });
+    return;
+  }
+
+  let payload: any;
+  try {
+    const wh = new Webhook(secret);
+    payload = wh.verify(JSON.stringify(req.body), {
+      "svix-id": svixId,
+      "svix-timestamp": svixTimestamp,
+      "svix-signature": svixSignature,
+    });
+  } catch {
+    res.status(400).json({ error: "Invalid webhook signature" });
+    return;
+  }
+
+  const eventType = payload.type as string;
+  const data = payload.data;
+
+  if (!data?.id) {
+    res.status(400).json({ error: "Missing user id in payload" });
+    return;
+  }
+
+  try {
+    if (eventType === "user.created" || eventType === "user.updated") {
+      const name = [data.first_name, data.last_name].filter(Boolean).join(" ") || data.username || data.id;
+      const email = data.email_addresses?.[0]?.email_address || "";
+      const avatarUrl = data.image_url || "";
+
+      await UserProfileModel.findOneAndUpdate(
+        { userId: data.id },
+        { name, email, avatarUrl, lastSyncedAt: new Date() },
+        { upsert: true, new: true },
+      );
+      logger.info({ userId: data.id, name, eventType }, "User profile synced via Clerk webhook");
+    }
+
+    if (eventType === "user.deleted") {
+      await UserProfileModel.deleteOne({ userId: data.id });
+      logger.info({ userId: data.id }, "User profile removed via Clerk webhook");
+    }
+
+    res.json({ success: true });
+  } catch (err) {
+    logger.error({ err: (err as Error).message, eventType }, "Clerk webhook handler error");
+    res.status(500).json({ error: "Webhook handler error" });
+  }
+});
+
+export default router;

apps/api/tsconfig.tsbuildinfo

@@ -29,6 +29,7 @@ import AdminPage from "./pages/AdminPage";
 import CandidatePortal from "./pages/CandidatePortal";
 import SchedulingPage from "./pages/SchedulingPage";
 import QuestionBankPage from "./pages/QuestionBankPage";
+import CodingChallengePage from "./pages/CodingChallengePage";
 import ReportsPage from "./pages/ReportsPage";
 import PreparationPage from "./pages/PreparationPage";
 import PipelinePage from "./pages/PipelinePage";
@@ -193,6 +194,7 @@ function App() {
             <Route path="/candidate-portal" element={<ProtectedRoute><CandidatePortal /></ProtectedRoute>} />
             <Route path="/scheduling" element={<ProtectedRoute><SchedulingPage /></ProtectedRoute>} />
             <Route path="/questions" element={<ProtectedRoute><QuestionBankPage /></ProtectedRoute>} />
+            <Route path="/coding-challenge/:id" element={<ProtectedRoute><CodingChallengePage /></ProtectedRoute>} />
             <Route path="/reports" element={<ProtectedRoute><ReportsPage /></ProtectedRoute>} />
             <Route path="/preparation" element={<ProtectedRoute><PreparationPage /></ProtectedRoute>} />
             <Route path="/pipeline" element={<ProtectedRoute><PipelinePage /></ProtectedRoute>} />