livedash-node/pages/api/dashboard/settings.ts

import { NextApiRequest, NextApiResponse } from "next";
import { getServerSession } from "next-auth";
import { prisma } from "../../../lib/prisma";
import { authOptions } from "../auth/[...nextauth]";

export default async function handler(req: NextApiRequest, res: NextApiResponse) {
    const session = await getServerSession(req, res, authOptions);
    if (!session?.user || session.user.role !== "admin")
        return res.status(403).json({ error: "Forbidden" });

    const user = await prisma.user.findUnique({
        where: { email: session.user.email as string }
    });

    if (!user) return res.status(401).json({ error: "No user" });

    if (req.method === "POST") {
        const { csvUrl, csvUsername, csvPassword, sentimentThreshold } = req.body;
        await prisma.company.update({
            where: { id: user.companyId },
            data: {
                csvUrl,
                csvUsername,
                ...(csvPassword ? { csvPassword } : {}),
                sentimentAlert: sentimentThreshold ? parseFloat(sentimentThreshold) : null,
            }
        });
        res.json({ ok: true });
    } else {
        res.status(405).end();
    }
}