From 25d6bb85ccdb030b93282517306aa0e5cd7b97b2 Mon Sep 17 00:00:00 2001
From: Eric Mc Sween <5454374+emcsween@users.noreply.github.com>
Date: Thu, 3 Jul 2025 16:10:39 -0400
Subject: [PATCH] Migrate removeAddon to zod

GitOrigin-RevId: 957781aaec8b6610b6d7944c24d4755c50c923a1
---
 .../src/Features/Subscription/SubscriptionController.js  | 9 ++++++++-
 .../app/src/Features/Subscription/SubscriptionRouter.mjs | 5 -----
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/services/web/app/src/Features/Subscription/SubscriptionController.js b/services/web/app/src/Features/Subscription/SubscriptionController.js
index dfeea7969e..74594076c8 100644
--- a/services/web/app/src/Features/Subscription/SubscriptionController.js
+++ b/services/web/app/src/Features/Subscription/SubscriptionController.js
@@ -650,9 +650,16 @@ async function purchaseAddon(req, res, next) {
   return res.sendStatus(200)
 }
 
+const removeAddonSchema = z.object({
+  params: z.object({
+    addOnCode: z.string(),
+  }),
+})
+
 async function removeAddon(req, res, next) {
   const user = SessionManager.getSessionUser(req.session)
-  const addOnCode = req.params.addOnCode
+  const { params } = validateReq(req, removeAddonSchema)
+  const addOnCode = params.addOnCode
 
   if (addOnCode !== AI_ADD_ON_CODE) {
     return res.sendStatus(404)
diff --git a/services/web/app/src/Features/Subscription/SubscriptionRouter.mjs b/services/web/app/src/Features/Subscription/SubscriptionRouter.mjs
index a5fb7d695d..29ca931c06 100644
--- a/services/web/app/src/Features/Subscription/SubscriptionRouter.mjs
+++ b/services/web/app/src/Features/Subscription/SubscriptionRouter.mjs
@@ -183,11 +183,6 @@ export default {
     webRouter.post(
       '/user/subscription/addon/:addOnCode/remove',
       AuthenticationController.requireLogin(),
-      validate({
-        params: Joi.object({
-          addOnCode: Joi.string(),
-        }),
-      }),
       RateLimiterMiddleware.rateLimit(subscriptionRateLimiter),
       SubscriptionController.removeAddon
     )