twotalesanimation
48 lines
1.3 KiB
TypeScript
48 lines
1.3 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { auth } from "@/auth";
|
|
import { db } from "@/lib/db";
|
|
|
|
export async function GET(req: NextRequest) {
|
|
const session = await auth();
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const clients = await db.client.findMany({
|
|
select: {
|
|
id: true,
|
|
company: true,
|
|
contactPerson: true,
|
|
email: true,
|
|
isActive: true,
|
|
_count: { select: { projects: true } },
|
|
},
|
|
orderBy: { company: "asc" },
|
|
});
|
|
|
|
return NextResponse.json({ clients });
|
|
}
|
|
|
|
export async function POST(req: NextRequest) {
|
|
const session = await auth();
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
if (!["ADMIN", "PRODUCER"].includes(session.user.role as string)) {
|
|
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
|
|
}
|
|
|
|
const body = await req.json();
|
|
const { company, contactPerson, email, phone, notes } = body;
|
|
|
|
if (!company || !contactPerson || !email) {
|
|
return NextResponse.json({ error: "company, contactPerson and email are required" }, { status: 400 });
|
|
}
|
|
|
|
const client = await db.client.create({
|
|
data: { company, contactPerson, email, phone, notes },
|
|
});
|
|
|
|
return NextResponse.json({ client }, { status: 201 });
|
|
}
|