fix: conditionally use user token or service token for booking

server/routers/booking/mutation.ts

@@ -2,7 +2,7 @@ import { metrics } from "@opentelemetry/api"
 
 import * as api from "@/lib/api"
 import { getVerifiedUser } from "@/server/routers/user/query"
-import { router, serviceProcedure } from "@/server/trpc"
+import { router, safeProtectedServiceProcedure } from "@/server/trpc"
 
 import { getMembership } from "@/utils/user"
 
@@ -35,16 +35,14 @@ async function getMembershipNumber(
 }
 
 export const bookingMutationRouter = router({
-  create: serviceProcedure.input(createBookingInput).mutation(async function ({
-    ctx,
-    input,
-  }) {
+  create: safeProtectedServiceProcedure
+    .input(createBookingInput)
+    .mutation(async function ({ ctx, input }) {
+      const accessToken = ctx.session?.token.access_token ?? ctx.serviceToken
       const { checkInDate, checkOutDate, hotelId } = input
 
-    // TODO: add support for user token OR service token in procedure
-    // then we can fetch membership number if user token exists
       const loggingAttributes = {
-      // membershipNumber: await getMembershipNumber(ctx.session),
+        membershipNumber: await getMembershipNumber(ctx.session),
         checkInDate,
         checkOutDate,
         hotelId,
@@ -59,7 +57,7 @@ export const bookingMutationRouter = router({
         })
       )
       const headers = {
-      Authorization: `Bearer ${ctx.serviceToken}`,
+        Authorization: `Bearer ${accessToken}`,
       }
 
       const apiResponse = await api.post(api.endpoints.v1.Booking.bookings, {