120 lines
3.9 KiB
TypeScript
120 lines
3.9 KiB
TypeScript
// app/api/my/rigs/route.ts
|
||
import { NextResponse } from "next/server";
|
||
import { dxGET, dxPOST, dxDELETE } from "@/lib/directus";
|
||
import { requireBearer } from "@/app/api/_lib/auth";
|
||
|
||
export const runtime = "nodejs";
|
||
|
||
function bad(msg: string, code = 400) {
|
||
return NextResponse.json({ error: msg }, { status: code });
|
||
}
|
||
|
||
export async function GET(req: Request) {
|
||
try {
|
||
const bearer = requireBearer(req);
|
||
const me = await dxGET<{ id: string }>("/users/me?fields=id", bearer);
|
||
|
||
const q = new URL(req.url).searchParams;
|
||
const limit = Math.min(parseInt(q.get("limit") || "50", 10), 100);
|
||
|
||
const fields = [
|
||
"id",
|
||
"name",
|
||
"notes",
|
||
"rig_type.id",
|
||
"rig_type.name",
|
||
"laser_source.submission_id",
|
||
"laser_source.make",
|
||
"laser_source.model",
|
||
"laser_scan_lens.id",
|
||
"laser_scan_lens.field_size",
|
||
"laser_scan_lens.focal_length",
|
||
"laser_focus_lens.id",
|
||
"laser_focus_lens.name",
|
||
"laser_software.id",
|
||
"laser_software.name",
|
||
"date_created",
|
||
"date_updated",
|
||
].join(",");
|
||
|
||
const path =
|
||
`/items/user_rigs?filter[owner][_eq]=${encodeURIComponent(me.id)}` +
|
||
`&fields=${encodeURIComponent(fields)}` +
|
||
`&sort=-date_updated` +
|
||
`&limit=${limit}`;
|
||
|
||
// ⬇️ dxGET already returns the unwrapped `data`
|
||
const rows = await dxGET<any[]>(path, bearer);
|
||
|
||
return NextResponse.json(rows ?? []);
|
||
} catch (e: any) {
|
||
return bad(e?.message || "Failed to load rigs", e?.status || 500);
|
||
}
|
||
}
|
||
|
||
export async function POST(req: Request) {
|
||
try {
|
||
const bearer = requireBearer(req);
|
||
const body = await req.json().catch(() => ({}));
|
||
|
||
const name = (body?.name || "").trim();
|
||
const rig_type = body?.rig_type; // id
|
||
const laser_source = body?.laser_source; // submission_id
|
||
const laser_scan_lens = body?.laser_scan_lens || null;
|
||
const laser_focus_lens = body?.laser_focus_lens || null;
|
||
const laser_software = body?.laser_software || null;
|
||
const notes = (body?.notes || "").trim();
|
||
|
||
if (!name) return bad("Missing: name");
|
||
if (!rig_type) return bad("Missing: rig_type");
|
||
if (!laser_source) return bad("Missing: laser_source");
|
||
|
||
// Derive owner from auth’d user; ignore any spoofed owner in body
|
||
const me = await dxGET<{ id: string }>("/users/me?fields=id", bearer);
|
||
|
||
const payload: any = {
|
||
owner: me.id,
|
||
name,
|
||
rig_type,
|
||
laser_source,
|
||
laser_scan_lens,
|
||
laser_focus_lens,
|
||
laser_software,
|
||
notes,
|
||
};
|
||
|
||
const res = await dxPOST<{ data: { id: string } }>(
|
||
"/items/user_rigs",
|
||
bearer,
|
||
payload
|
||
);
|
||
|
||
return NextResponse.json({ ok: true, id: String(res?.data?.id) });
|
||
} catch (e: any) {
|
||
return bad(e?.message || "Failed to create rig", e?.status || 500);
|
||
}
|
||
}
|
||
|
||
export async function DELETE(req: Request) {
|
||
try {
|
||
const bearer = requireBearer(req);
|
||
const url = new URL(req.url);
|
||
const id = url.searchParams.get("id");
|
||
if (!id) return bad("Missing: id");
|
||
|
||
// Hard-guard: ensure the rig belongs to the current user
|
||
const me = await dxGET<{ id: string }>("/users/me?fields=id", bearer);
|
||
const rig = await dxGET<any>(
|
||
`/items/user_rigs/${encodeURIComponent(id)}?fields=id,owner`,
|
||
bearer
|
||
);
|
||
if (!rig || String(rig.owner) !== String(me.id)) {
|
||
return bad("Not your rig", 403);
|
||
}
|
||
|
||
await dxDELETE(`/items/user_rigs/${encodeURIComponent(id)}`, bearer);
|
||
return NextResponse.json({ ok: true });
|
||
} catch (e: any) {
|
||
return bad(e?.message || "Failed to delete rig", e?.status || 500);
|
||
}
|
||
}
|