56 lines
2 KiB
TypeScript
56 lines
2 KiB
TypeScript
import { NextResponse } from 'next/server';
|
|
import { prisma } from '../../../../lib/prisma';
|
|
import { requireAuth } from '../../../../lib/jwt';
|
|
import { Role, ListingStatus, UserStatus } from '@prisma/client';
|
|
|
|
export async function GET(req: Request) {
|
|
try {
|
|
const auth = await requireAuth(req);
|
|
const isAdmin = auth.role === Role.ADMIN;
|
|
const canUserMod = auth.role === Role.USER_MODERATOR;
|
|
const canListingMod = auth.role === Role.LISTING_MODERATOR;
|
|
if (!isAdmin && !canUserMod && !canListingMod) {
|
|
return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
|
|
}
|
|
|
|
const wantsUsers = isAdmin || canUserMod;
|
|
const wantsListings = isAdmin || canListingMod;
|
|
|
|
const [users, listings] = await Promise.all([
|
|
wantsUsers
|
|
? prisma.user.findMany({
|
|
where: { status: UserStatus.PENDING },
|
|
select: { id: true, email: true, status: true, emailVerifiedAt: true, approvedAt: true, role: true },
|
|
orderBy: { createdAt: 'asc' },
|
|
take: 50,
|
|
})
|
|
: Promise.resolve([]),
|
|
wantsListings
|
|
? prisma.listing.findMany({
|
|
where: { status: ListingStatus.PENDING, removedAt: null },
|
|
select: {
|
|
id: true,
|
|
status: true,
|
|
createdAt: true,
|
|
evChargingAvailable: true,
|
|
evChargingOnSite: true,
|
|
wheelchairAccessible: true,
|
|
owner: { select: { email: true } },
|
|
translations: { select: { title: true, slug: true, locale: true } },
|
|
},
|
|
orderBy: { createdAt: 'asc' },
|
|
take: 50,
|
|
})
|
|
: Promise.resolve([]),
|
|
]);
|
|
|
|
return NextResponse.json({ users, listings, role: auth.role });
|
|
} catch (error) {
|
|
console.error('List pending error', error);
|
|
if (String(error).includes('Unauthorized')) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
}
|
|
return NextResponse.json({ error: 'Failed to load pending items' }, { status: 500 });
|
|
}
|
|
}
|
|
export const dynamic = 'force-dynamic';
|