mirror of
https://github.com/kjanat/livedash-node.git
synced 2026-01-16 08:52:10 +01:00
Kaj Kowalski
50b2fbda55
refactor: improve refresh-sessions API handler for better readability and error handling fix: enhance NextAuth configuration with session token handling and cookie settings chore: update dashboard API handlers for consistency and improved error responses style: format dashboard API routes for better readability feat: implement forgot password and reset password functionality with security improvements feat: add user registration API with email existence check and initial company creation chore: create initial database migration and seed script for demo data style: clean up PostCSS and Tailwind CSS configuration files fix: update TypeScript configuration for stricter type checking chore: add development environment variables for NextAuth feat: create Providers component for session management in the app chore: initialize Prisma migration and seed files for database setup
59 lines
1.8 KiB
TypeScript
59 lines
1.8 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from "next";
|
|
import { getServerSession } from "next-auth";
|
|
import { prisma } from "../../../lib/prisma";
|
|
import bcrypt from "bcryptjs";
|
|
import { authOptions } from "../auth/[...nextauth]";
|
|
// User type from prisma is used instead of the one in lib/types
|
|
|
|
interface UserBasicInfo {
|
|
id: string;
|
|
email: string;
|
|
role: string;
|
|
}
|
|
|
|
export default async function handler(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse,
|
|
) {
|
|
const session = await getServerSession(req, res, authOptions);
|
|
if (!session?.user || session.user.role !== "admin")
|
|
return res.status(403).json({ error: "Forbidden" });
|
|
|
|
const user = await prisma.user.findUnique({
|
|
where: { email: session.user.email as string },
|
|
});
|
|
|
|
if (!user) return res.status(401).json({ error: "No user" });
|
|
|
|
if (req.method === "GET") {
|
|
const users = await prisma.user.findMany({
|
|
where: { companyId: user.companyId },
|
|
});
|
|
|
|
const mappedUsers: UserBasicInfo[] = users.map((u) => ({
|
|
id: u.id,
|
|
email: u.email,
|
|
role: u.role,
|
|
}));
|
|
|
|
res.json({ users: mappedUsers });
|
|
} else if (req.method === "POST") {
|
|
const { email, role } = req.body;
|
|
if (!email || !role)
|
|
return res.status(400).json({ error: "Missing fields" });
|
|
const exists = await prisma.user.findUnique({ where: { email } });
|
|
if (exists) return res.status(409).json({ error: "Email exists" });
|
|
const tempPassword = Math.random().toString(36).slice(-8); // random initial password
|
|
await prisma.user.create({
|
|
data: {
|
|
email,
|
|
password: await bcrypt.hash(tempPassword, 10),
|
|
companyId: user.companyId,
|
|
role,
|
|
},
|
|
});
|
|
// TODO: Email user their temp password (stub, for demo)
|
|
res.json({ ok: true, tempPassword });
|
|
} else res.status(405).end();
|
|
}
|