81 lines
2.3 KiB
TypeScript
81 lines
2.3 KiB
TypeScript
|
import { NextRequest, NextResponse } from "next/server";
|
||
|
|
import { Pool } from "pg";
|
||
|
|
import { requireAdmin, requireSuperAdmin } from "@/lib/auth-utils";
|
||
|
|
|
||
|
|
const pool = new Pool({
|
||
|
|
connectionString: process.env.DATABASE_URL,
|
||
|
|
});
|
||
|
|
|
||
|
|
// GET /api/admin/roles - List all roles
|
||
|
|
export async function GET(request: NextRequest) {
|
||
|
|
const { error } = await requireAdmin();
|
||
|
|
if (error) return error;
|
||
|
|
|
||
|
|
try {
|
||
|
|
const result = await pool.query(`
|
||
|
|
SELECT
|
||
|
|
r.id, r.name, r.description, r.permissions, r.is_system, r.created_at,
|
||
|
|
COUNT(DISTINCT u.id) as user_count
|
||
|
|
FROM "role" r
|
||
|
|
LEFT JOIN "user" u ON u.role = r.name
|
||
|
|
GROUP BY r.id
|
||
|
|
ORDER BY r.is_system DESC, r.name ASC
|
||
|
|
`);
|
||
|
|
|
||
|
|
return NextResponse.json({ roles: result.rows });
|
||
|
|
} catch (error) {
|
||
|
|
console.error("Error fetching roles:", error);
|
||
|
|
return NextResponse.json(
|
||
|
|
{ error: "Failed to fetch roles" },
|
||
|
|
{ status: 500 }
|
||
|
|
);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// POST /api/admin/roles - Create a new role
|
||
|
|
export async function POST(request: NextRequest) {
|
||
|
|
const { error } = await requireSuperAdmin();
|
||
|
|
if (error) return error;
|
||
|
|
|
||
|
|
try {
|
||
|
|
const body = await request.json();
|
||
|
|
const { name, description, permissions } = body;
|
||
|
|
|
||
|
|
if (!name) {
|
||
|
|
return NextResponse.json(
|
||
|
|
{ error: "Role name is required" },
|
||
|
|
{ status: 400 }
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check if role already exists
|
||
|
|
const existingRole = await pool.query(
|
||
|
|
'SELECT id FROM "role" WHERE name = $1',
|
||
|
|
[name]
|
||
|
|
);
|
||
|
|
|
||
|
|
if (existingRole.rows.length > 0) {
|
||
|
|
return NextResponse.json(
|
||
|
|
{ error: "Role with this name already exists" },
|
||
|
|
{ status: 409 }
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
const id = `role_${crypto.randomUUID().replace(/-/g, "").slice(0, 12)}`;
|
||
|
|
const result = await pool.query(
|
||
|
|
`INSERT INTO "role" (id, name, description, permissions, is_system, created_at, updated_at)
|
||
|
|
VALUES ($1, $2, $3, $4, false, NOW(), NOW())
|
||
|
|
RETURNING id, name, description, permissions, is_system, created_at`,
|
||
|
|
[id, name, description || null, JSON.stringify(permissions || {})]
|
||
|
|
);
|
||
|
|
|
||
|
|
return NextResponse.json({ role: result.rows[0] }, { status: 201 });
|
||
|
|
} catch (error) {
|
||
|
|
console.error("Error creating role:", error);
|
||
|
|
return NextResponse.json(
|
||
|
|
{ error: "Failed to create role" },
|
||
|
|
{ status: 500 }
|
||
|
|
);
|
||
|
|
}
|
||
|
|
}
|