fix: validate request org id existance in guards

packages/server/src/modules/Tenancy/EnsureTenantIsInitialized.guard.ts

@@ -41,6 +41,12 @@ export class EnsureTenantIsInitializedGuard implements CanActivate {
     }
     const tenant = await this.tenancyContext.getTenant();
 
+    if (!tenant) {
+      throw new UnauthorizedException({
+        message: 'Tenant not found.',
+        errors: [{ type: 'TENANT.NOT.FOUND' }],
+      });
+    }
     if (!tenant?.initializedAt) {
       throw new UnauthorizedException({
         statusCode: 400,

packages/server/src/modules/Tenancy/EnsureTenantIsSeeded.guards.ts

@@ -41,6 +41,12 @@ export class EnsureTenantIsSeededGuard implements CanActivate {
     }
     const tenant = await this.tenancyContext.getTenant();
 
+    if (!tenant) {
+      throw new UnauthorizedException({
+        message: 'Tenant not found.',
+        errors: [{ type: 'TENANT.NOT.FOUND' }],
+      });
+    }
     if (!tenant.seededAt) {
       throw new UnauthorizedException({
         message: 'Tenant database is not seeded with initial data yet.',

packages/server/src/modules/Tenancy/TenancyContext.service.ts

@@ -2,6 +2,7 @@ import { Inject, Injectable } from '@nestjs/common';
 import { ClsService } from 'nestjs-cls';
 import { SystemUser } from '../System/models/SystemUser';
 import { TenantModel } from '../System/models/TenantModel';
+import { ServiceError } from '../Items/ServiceError';
 
 @Injectable()
 export class TenancyContext {
@@ -20,7 +21,7 @@ export class TenancyContext {
    * @param {boolean} withMetadata - If true, the tenant metadata will be fetched.
    * @returns
    */
-  getTenant(withMetadata: boolean = false) {
+  async getTenant(withMetadata: boolean = false) {
     // Get the tenant from the request headers.
     const organizationId = this.cls.get('organizationId');
 
@@ -32,7 +33,12 @@ export class TenancyContext {
     if (withMetadata) {
       query.withGraphFetched('metadata');
     }
-    return query;
+    const queryResult = await query;
+
+    if (!queryResult) {
+      throw new ServiceError('TENANT_NOT_FOUND', 'Tenant not found');
+    }
+    return queryResult;
   }
 
   async getTenantMetadata() {