fix: address code review feedback - add error handling and fix import style

Co-authored-by: ZimengXiong <83783148+ZimengXiong@users.noreply.github.com>

backend/src/__tests__/user-sandboxing.test.ts

@@ -8,6 +8,7 @@
  */
 
 import { describe, it, expect, beforeAll, afterAll, beforeEach } from "vitest";
+import bcrypt from "bcrypt";
 import {
   getTestPrisma,
   cleanupTestDb,
@@ -28,7 +29,6 @@ describe("User Data Sandboxing", () => {
     prisma = getTestPrisma();
 
     // Create two test users
-    const bcrypt = require("bcrypt");
     const hashA = await bcrypt.hash("passwordA", 10);
     const hashB = await bcrypt.hash("passwordB", 10);
 

backend/src/index.ts

@@ -797,30 +797,35 @@ io.on("connection", (socket) => {
       drawingId: string;
       user: Omit<User, "socketId" | "isActive">;
     }) => {
-      // Verify the authenticated user owns this drawing
-      if (authenticatedUserId) {
-        const drawing = await prisma.drawing.findFirst({
-          where: { id: drawingId, userId: authenticatedUserId },
-          select: { id: true },
-        });
+      try {
+        // Verify the authenticated user owns this drawing
+        if (authenticatedUserId) {
+          const drawing = await prisma.drawing.findFirst({
+            where: { id: drawingId, userId: authenticatedUserId },
+            select: { id: true },
+          });
 
-        if (!drawing) {
-          socket.emit("error", { message: "Drawing not found or access denied" });
-          return;
+          if (!drawing) {
+            socket.emit("error", { message: "Drawing not found or access denied" });
+            return;
+          }
         }
+
+        const roomId = `drawing_${drawingId}`;
+        socket.join(roomId);
+
+        const newUser: User = { ...user, socketId: socket.id, isActive: true };
+
+        const currentUsers = roomUsers.get(roomId) || [];
+        const filteredUsers = currentUsers.filter((u) => u.id !== user.id);
+        filteredUsers.push(newUser);
+        roomUsers.set(roomId, filteredUsers);
+
+        io.to(roomId).emit("presence-update", filteredUsers);
+      } catch (err) {
+        console.error("Error in join-room handler:", err);
+        socket.emit("error", { message: "Failed to join room" });
       }
-
-      const roomId = `drawing_${drawingId}`;
-      socket.join(roomId);
-
-      const newUser: User = { ...user, socketId: socket.id, isActive: true };
-
-      const currentUsers = roomUsers.get(roomId) || [];
-      const filteredUsers = currentUsers.filter((u) => u.id !== user.id);
-      filteredUsers.push(newUser);
-      roomUsers.set(roomId, filteredUsers);
-
-      io.to(roomId).emit("presence-update", filteredUsers);
     }
   );