zitadel/console/src/app/services/interceptors/org.interceptor.ts

import { Injectable } from '@angular/core';
import { Request, RpcError, StatusCode, UnaryInterceptor, UnaryResponse } from 'grpc-web';
import { Org } from 'src/app/proto/generated/zitadel/org_pb';

import { StorageKey, StorageLocation, StorageService } from '../storage.service';

const ORG_HEADER_KEY = 'x-zitadel-orgid';
@Injectable({ providedIn: 'root' })
export class OrgInterceptor<TReq = unknown, TResp = unknown> implements UnaryInterceptor<TReq, TResp> {
  constructor(private readonly storageService: StorageService) {}

  public async intercept(request: Request<TReq, TResp>, invoker: any): Promise<UnaryResponse<TReq, TResp>> {
    const metadata = request.getMetadata();

    const org: Org.AsObject | null = this.storageService.getItem(StorageKey.organization, StorageLocation.session);

    if (org) {
      metadata[ORG_HEADER_KEY] = `${org.id}`;
    }

    try {
      return await invoker(request);
    } catch (error: any) {
      if (
        error instanceof RpcError &&
        error.code === StatusCode.PERMISSION_DENIED &&
        error.message.startsWith("Organisation doesn't exist")
      ) {
        this.storageService.removeItem(StorageKey.organization, StorageLocation.session);
      }
      throw error;
    }
  }
}