twotalesanimation
79 lines
2.3 KiB
TypeScript
79 lines
2.3 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { auth } from "@/auth";
|
|
import { db } from "@/lib/db";
|
|
import { addDays } from "date-fns";
|
|
|
|
export async function GET(req: NextRequest) {
|
|
const session = await auth();
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const projectId = req.nextUrl.searchParams.get("projectId");
|
|
|
|
const sessions = await db.reviewSession.findMany({
|
|
where: projectId ? { projectId } : undefined,
|
|
orderBy: { createdAt: "desc" },
|
|
include: {
|
|
project: { select: { id: true, name: true, code: true } },
|
|
},
|
|
});
|
|
|
|
return NextResponse.json({ sessions });
|
|
}
|
|
|
|
export async function POST(req: NextRequest) {
|
|
const session = await auth();
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
if (!["ADMIN", "PRODUCER", "SUPERVISOR"].includes(session.user.role as string)) {
|
|
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
|
|
}
|
|
|
|
const body = await req.json();
|
|
const { projectId, label, email, expiresInDays = 30 } = body;
|
|
|
|
if (!projectId) {
|
|
return NextResponse.json({ error: "projectId is required" }, { status: 400 });
|
|
}
|
|
|
|
const project = await db.project.findUnique({ where: { id: projectId } });
|
|
if (!project) {
|
|
return NextResponse.json({ error: "Project not found" }, { status: 404 });
|
|
}
|
|
|
|
const reviewSession = await db.reviewSession.create({
|
|
data: {
|
|
projectId,
|
|
label: label || `Review — ${project.name}`,
|
|
email: email || null,
|
|
expiresAt: addDays(new Date(), expiresInDays),
|
|
},
|
|
});
|
|
|
|
const appUrl =
|
|
process.env.NEXT_PUBLIC_APP_URL ||
|
|
`${req.headers.get("x-forwarded-proto") ?? "https"}://${req.headers.get("host")}`;
|
|
const portalUrl = `${appUrl}/client/${reviewSession.token}`;
|
|
|
|
return NextResponse.json({ session: reviewSession, portalUrl }, { status: 201 });
|
|
}
|
|
|
|
export async function DELETE(req: NextRequest) {
|
|
const session = await auth();
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const id = req.nextUrl.searchParams.get("id");
|
|
if (!id) return NextResponse.json({ error: "id required" }, { status: 400 });
|
|
|
|
await db.reviewSession.update({
|
|
where: { id },
|
|
data: { isActive: false },
|
|
});
|
|
|
|
return NextResponse.json({ success: true });
|
|
}
|