bug fixes

package.json

@@ -15,16 +15,17 @@
     "dotenv": "^16.4.5",
     "eslint-config-airbnb": "^19.0.4",
     "jsonwebtoken": "^9.0.2",
-
-      "moment-timezone": "^0.5.46",
+    "moment-timezone": "^0.5.46",
     "mongoose": "^8.7.2",
     "next": "14.1.0",
     "next-pwa": "^5.6.0",
     "nodemailer": "^6.9.16",
+    "otplib": "^12.0.1",
     "react": "^18",
     "react-dom": "^18",
     "sass": "^1.71.1",
-    "typescript": "^5.6.3"
+    "typescript": "^5.6.3",
+    "zod": "^3.23.8"
   },
   "devDependencies": {
     "@types/react": "18.3.2",

src/app/api/v1/makeAdmin/[id]/route.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import mongoose from "mongoose";
 import dbConnect from "../../../../../lib/dbConnect";
 import UserModel from "../../../../../model/User";
 import { isSuperAdmin } from "../../../../../helpers/verifyAdmin";
@@ -21,6 +22,13 @@ export async function POST(req: NextRequest) {
     );
   }
 
+  if (!mongoose.isValidObjectId(id)) {
+    return NextResponse.json(
+      { message: "Invalid User ID format" },
+      { status: 400 },
+    );
+  }
+
   try {
     const user = await UserModel.findByIdAndUpdate(
       id,

src/app/api/v1/makeClient/[id]/route.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import mongoose from "mongoose";
 import dbConnect from "../../../../../lib/dbConnect";
 import UserModel from "../../../../../model/User";
 import { isSuperAdmin } from "../../../../../helpers/verifyAdmin";
@@ -21,6 +22,13 @@ export async function POST(req: NextRequest) {
     );
   }
 
+  if (!mongoose.isValidObjectId(id)) {
+    return NextResponse.json(
+      { message: "Invalid User ID format" },
+      { status: 400 },
+    );
+  }
+
   try {
     const user = await UserModel.findByIdAndUpdate(
       id,