68 lines
2.2 KiB
TypeScript
68 lines
2.2 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { prisma } from "../../../../lib/prisma";
|
|
import { requireAuth } from "../../../../lib/jwt";
|
|
import { Role, ListingStatus, UserStatus } from "@prisma/client";
|
|
|
|
export async function GET(req: Request) {
|
|
try {
|
|
const auth = await requireAuth(req);
|
|
const isAdmin = auth.role === Role.ADMIN;
|
|
const canUserMod = auth.role === Role.USER_MODERATOR;
|
|
const canListingMod = auth.role === Role.LISTING_MODERATOR;
|
|
if (!isAdmin && !canUserMod && !canListingMod) {
|
|
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
|
|
}
|
|
|
|
const wantsUsers = isAdmin || canUserMod;
|
|
const wantsListings = isAdmin || canListingMod;
|
|
|
|
const [users, listings] = await Promise.all([
|
|
wantsUsers
|
|
? prisma.user.findMany({
|
|
where: { status: UserStatus.PENDING },
|
|
select: {
|
|
id: true,
|
|
email: true,
|
|
status: true,
|
|
emailVerifiedAt: true,
|
|
approvedAt: true,
|
|
role: true,
|
|
},
|
|
orderBy: { createdAt: "asc" },
|
|
take: 50,
|
|
})
|
|
: Promise.resolve([]),
|
|
wantsListings
|
|
? prisma.listing.findMany({
|
|
where: { status: ListingStatus.PENDING, removedAt: null },
|
|
select: {
|
|
id: true,
|
|
status: true,
|
|
createdAt: true,
|
|
evChargingAvailable: true,
|
|
evChargingOnSite: true,
|
|
wheelchairAccessible: true,
|
|
owner: { select: { email: true } },
|
|
translations: {
|
|
select: { title: true, slug: true, locale: true },
|
|
},
|
|
},
|
|
orderBy: { createdAt: "asc" },
|
|
take: 50,
|
|
})
|
|
: Promise.resolve([]),
|
|
]);
|
|
|
|
return NextResponse.json({ users, listings, role: auth.role });
|
|
} catch (error) {
|
|
console.error("List pending error", error);
|
|
if (String(error).includes("Unauthorized")) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
return NextResponse.json(
|
|
{ error: "Failed to load pending items" },
|
|
{ status: 500 },
|
|
);
|
|
}
|
|
}
|
|
export const dynamic = "force-dynamic";
|