Files
Lageplan/src/app/api/tenant/soma-templates/route.ts

109 lines
3.8 KiB
TypeScript

import { NextRequest, NextResponse } from 'next/server'
import { prisma } from '@/lib/db'
import { getSession } from '@/lib/auth'
// GET: List SOMA templates for the current tenant
export async function GET() {
try {
const user = await getSession()
if (!user) return NextResponse.json({ error: 'Nicht autorisiert' }, { status: 401 })
if (user.role !== 'TENANT_ADMIN' && user.role !== 'SERVER_ADMIN') {
return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 })
}
const templates = await (prisma as any).journalCheckTemplate.findMany({
where: { tenantId: user.tenantId || null },
orderBy: { sortOrder: 'asc' },
})
return NextResponse.json({ templates })
} catch (error) {
console.error('Error fetching SOMA templates:', error)
return NextResponse.json({ error: 'Interner Fehler' }, { status: 500 })
}
}
// POST: Create a new SOMA template for the current tenant
export async function POST(req: NextRequest) {
try {
const user = await getSession()
if (!user) return NextResponse.json({ error: 'Nicht autorisiert' }, { status: 401 })
if (user.role !== 'TENANT_ADMIN' && user.role !== 'SERVER_ADMIN') {
return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 })
}
const { label, sortOrder } = await req.json()
if (!label?.trim()) {
return NextResponse.json({ error: 'Label ist erforderlich' }, { status: 400 })
}
const template = await (prisma as any).journalCheckTemplate.create({
data: {
label: label.trim(),
sortOrder: sortOrder ?? 0,
tenantId: user.tenantId || null,
isActive: true,
},
})
return NextResponse.json({ template }, { status: 201 })
} catch (error) {
console.error('Error creating SOMA template:', error)
return NextResponse.json({ error: 'Interner Fehler' }, { status: 500 })
}
}
// PATCH: Update multiple templates (bulk reorder/toggle)
export async function PATCH(req: NextRequest) {
try {
const user = await getSession()
if (!user) return NextResponse.json({ error: 'Nicht autorisiert' }, { status: 401 })
if (user.role !== 'TENANT_ADMIN' && user.role !== 'SERVER_ADMIN') {
return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 })
}
const { updates } = await req.json()
if (!Array.isArray(updates)) {
return NextResponse.json({ error: 'updates Array erforderlich' }, { status: 400 })
}
await Promise.all(
updates.map((u: { id: string; label?: string; sortOrder?: number; isActive?: boolean }) =>
(prisma as any).journalCheckTemplate.update({
where: { id: u.id },
data: {
...(u.label !== undefined && { label: u.label }),
...(u.sortOrder !== undefined && { sortOrder: u.sortOrder }),
...(u.isActive !== undefined && { isActive: u.isActive }),
},
})
)
)
return NextResponse.json({ success: true })
} catch (error) {
console.error('Error updating SOMA templates:', error)
return NextResponse.json({ error: 'Interner Fehler' }, { status: 500 })
}
}
// DELETE: Delete a SOMA template
export async function DELETE(req: NextRequest) {
try {
const user = await getSession()
if (!user) return NextResponse.json({ error: 'Nicht autorisiert' }, { status: 401 })
if (user.role !== 'TENANT_ADMIN' && user.role !== 'SERVER_ADMIN') {
return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 })
}
const { id } = await req.json()
if (!id) return NextResponse.json({ error: 'ID erforderlich' }, { status: 400 })
await (prisma as any).journalCheckTemplate.delete({ where: { id } })
return NextResponse.json({ success: true })
} catch (error) {
console.error('Error deleting SOMA template:', error)
return NextResponse.json({ error: 'Interner Fehler' }, { status: 500 })
}
}