Phase 7

src/app/(customer)/appointments/[id]/page.tsx

@@ -35,16 +35,19 @@ const REBOOKABLE_STATUSES = new Set(["COMPLETED", "CANCELLED", "NO_SHOW"]);
 
 export default async function AppointmentDetailsPage({
   params,
+  searchParams,
 }: {
   params: Promise<{ id: string }>;
+  searchParams: Promise<{ token?: string }>;
 }) {
   const { id } = await params;
+  const { token } = await searchParams;
   const appointment = await getAppointmentById(prisma, id);
   if (!appointment) notFound();
 
   const session = await auth();
   try {
-    assertCanAccessAppointment(appointment, session?.user?.id);
+    await assertCanAccessAppointment(prisma, appointment, { sessionUserId: session?.user?.id, guestToken: token });
   } catch (error) {
     if (error instanceof PermissionDeniedError) notFound(); // don't confirm the id exists to someone who can't see it
     throw error;
@@ -153,7 +156,7 @@ export default async function AppointmentDetailsPage({
 
         <div className="flex flex-wrap gap-3">
           <a
-            href={`/api/appointments/${appointment.id}/calendar.ics`}
+            href={`/api/appointments/${appointment.id}/calendar.ics${token ? `?token=${token}` : ""}`}
             className="rounded-jumbo border-line flex items-center gap-2 border bg-white px-5 py-3 text-sm font-bold"
           >
             <CalendarPlus className="text-accent h-4 w-4" aria-hidden="true" /> Add to Calendar
@@ -171,17 +174,17 @@ export default async function AppointmentDetailsPage({
         <div className="flex flex-wrap gap-3">
           {RESCHEDULABLE_STATUSES.has(appointment.status) && (
             <Link
-              href={`/appointments/${appointment.id}/reschedule`}
+              href={`/appointments/${appointment.id}/reschedule${token ? `?token=${token}` : ""}`}
               className="rounded-jumbo border-line border bg-white px-5 py-3 text-sm font-bold"
             >
               Reschedule
             </Link>
           )}
           {CANCELLABLE_STATUSES.has(appointment.status) && (
-            <CancelAppointmentDialog appointmentId={appointment.id} />
+            <CancelAppointmentDialog appointmentId={appointment.id} guestToken={token} />
           )}
           {REBOOKABLE_STATUSES.has(appointment.status) && (
-            <BookAgainButton appointmentId={appointment.id} />
+            <BookAgainButton appointmentId={appointment.id} guestToken={token} />
           )}
         </div>
       </main>