lomavuokraus/app/api/admin/settings/route.ts

48 lines
1.7 KiB
TypeScript

import { NextResponse } from 'next/server';
import { Role } from '@prisma/client';
import { requireAuth } from '../../../../lib/jwt';
import { getSiteSettings, updateSiteSettings } from '../../../../lib/settings';
export async function GET(req: Request) {
try {
const auth = await requireAuth(req);
if (auth.role !== Role.ADMIN) {
return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
}
const settings = await getSiteSettings();
return NextResponse.json({ settings });
} catch (error) {
if (String(error).includes('Unauthorized')) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
console.error('Load settings error', error);
return NextResponse.json({ error: 'Failed to load settings' }, { status: 500 });
}
}
export async function POST(req: Request) {
try {
const auth = await requireAuth(req);
if (auth.role !== Role.ADMIN) {
return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
}
const body = await req.json();
const payload: Parameters<typeof updateSiteSettings>[0] = {};
if (body.requireLoginForContactDetails !== undefined) {
payload.requireLoginForContactDetails = Boolean(body.requireLoginForContactDetails);
}
const settings = await updateSiteSettings(payload);
return NextResponse.json({ settings });
} catch (error) {
if (String(error).includes('Unauthorized')) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
console.error('Save settings error', error);
return NextResponse.json({ error: 'Failed to save settings' }, { status: 500 });
}
}
export const dynamic = 'force-dynamic';