export async function PUT()

in src/app/api/v1/user/breaches/bulk-resolve/route.ts [16:96]
66 lines of code
12 McCabe index (conditional complexity)

export async function PUT(req: NextRequest): Promise<NextResponse> {
  const session = await getServerSession();
  if (
    !session?.user?.subscriber ||
    typeof session?.user?.subscriber.fxa_uid !== "string"
  ) {
    return new NextResponse(
      JSON.stringify({ success: false, message: "Unauthenticated" }),
      { status: 401 },
    );
  }

  try {
    const subscriber = await getSubscriberByFxaUid(
      session.user.subscriber.fxa_uid,
    );
    if (!subscriber) {
      throw new Error("No subscriber found for the current session.");
    }
    const allBreaches = await getBreaches();
    const { dataType: dataTypeToResolve }: BreachBulkResolutionRequest =
      await req.json();

    const { verifiedEmails } = await getAllEmailsAndBreaches(
      subscriber,
      allBreaches,
    );

    // Typed as `any` because `subscriber` used to be typed as `any`, and making
    // that type more specific was enough work just by itself:
    // eslint-disable-next-line @typescript-eslint/no-explicit-any
    const currentBreachResolution: any = subscriber.breach_resolution || {}; // get this from existing breach resolution if available

    for (const verifiedEmail of verifiedEmails) {
      const currentEmail = verifiedEmail.email;
      for (const currentBreach of verifiedEmail.breaches) {
        const currentBreachDataTypes = currentBreach.DataClasses;

        if (currentBreachDataTypes?.includes(dataTypeToResolve)) {
          const breachId = currentBreach.Id;
          const currentResolutionsChecked =
            currentBreachResolution[currentEmail]?.[breachId]
              ?.resolutionsChecked ?? [];

          if (!currentResolutionsChecked.includes(dataTypeToResolve)) {
            currentResolutionsChecked.push(dataTypeToResolve);
          }

          currentBreachResolution[currentEmail] = {
            ...(currentBreachResolution[currentEmail] || {}),
            ...{
              [breachId]: {
                resolutionsChecked: currentResolutionsChecked,
              },
            },
          };
        }
      }
    }

    // set useBreachId to mark latest version of breach resolution
    // without this line, the get call might assume recency index
    currentBreachResolution.useBreachId = true;

    const updatedSubscriber = await setBreachResolution(
      subscriber,
      currentBreachResolution,
    );
    if (!updatedSubscriber) {
      throw new Error("Could not retrieve updated subscriber data.");
    }

    return NextResponse.json({
      success: true,
      breachResolutions: updatedSubscriber.breach_resolution,
    });
  } catch (e) {
    logger.error(e);
    return NextResponse.json({ success: false }, { status: 500 });
  }
}