lomavuokraus/app/api/admin/settings/route.ts
Tero Halla-aho 0bb709d9c5
Some checks failed
CI / checks (push) Has been cancelled
chore: fix audit alerts and formatting
2026-02-04 12:43:03 +02:00

56 lines
1.7 KiB
TypeScript

import { NextResponse } from "next/server";
import { Role } from "@prisma/client";
import { requireAuth } from "../../../../lib/jwt";
import { getSiteSettings, updateSiteSettings } from "../../../../lib/settings";
export async function GET(req: Request) {
try {
const auth = await requireAuth(req);
if (auth.role !== Role.ADMIN) {
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
}
const settings = await getSiteSettings();
return NextResponse.json({ settings });
} catch (error) {
if (String(error).includes("Unauthorized")) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}
console.error("Load settings error", error);
return NextResponse.json(
{ error: "Failed to load settings" },
{ status: 500 },
);
}
}
export async function POST(req: Request) {
try {
const auth = await requireAuth(req);
if (auth.role !== Role.ADMIN) {
return NextResponse.json({ error: "Forbidden" }, { status: 403 });
}
const body = await req.json();
const payload: Parameters<typeof updateSiteSettings>[0] = {};
if (body.requireLoginForContactDetails !== undefined) {
payload.requireLoginForContactDetails = Boolean(
body.requireLoginForContactDetails,
);
}
const settings = await updateSiteSettings(payload);
return NextResponse.json({ settings });
} catch (error) {
if (String(error).includes("Unauthorized")) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}
console.error("Save settings error", error);
return NextResponse.json(
{ error: "Failed to save settings" },
{ status: 500 },
);
}
}
export const dynamic = "force-dynamic";