102 lines
3.5 KiB
TypeScript
102 lines
3.5 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server'
|
|
import prisma from '../../../../lib/prisma'
|
|
import { getAuthUser } from '@/lib/auth-utils'
|
|
|
|
// GET /api/offers/[id]
|
|
export async function GET(
|
|
_request: NextRequest,
|
|
context: { params: Promise<{ id: string }> }
|
|
): Promise<Response> {
|
|
try {
|
|
const { id } = await context.params
|
|
const offer = await prisma.offer.findUnique({
|
|
where: { id },
|
|
include: { business: true },
|
|
})
|
|
if (!offer) return NextResponse.json({ error: 'Non trouvé' }, { status: 404 })
|
|
return NextResponse.json(offer)
|
|
} catch (error) {
|
|
console.error('GET /api/offers/[id] error:', error)
|
|
return NextResponse.json({ error: 'Erreur serveur' }, { status: 500 })
|
|
}
|
|
}
|
|
|
|
// PATCH /api/offers/[id] (Owner or Admin only)
|
|
export async function PATCH(
|
|
request: NextRequest,
|
|
context: { params: Promise<{ id: string }> }
|
|
): Promise<Response> {
|
|
try {
|
|
const authUser = await getAuthUser(request)
|
|
if (!authUser) {
|
|
return NextResponse.json({ error: 'Authentification requise' }, { status: 401 })
|
|
}
|
|
|
|
const { id } = await context.params
|
|
const existing = await prisma.offer.findUnique({
|
|
where: { id },
|
|
include: { business: { select: { ownerId: true } } }
|
|
})
|
|
|
|
if (!existing) {
|
|
return NextResponse.json({ error: 'Offre non trouvée' }, { status: 404 })
|
|
}
|
|
|
|
if (existing.business.ownerId !== authUser.id && authUser.role !== 'ADMIN') {
|
|
return NextResponse.json({ error: 'Non autorisé' }, { status: 403 })
|
|
}
|
|
|
|
const body = await request.json()
|
|
const { title, description, price, type, imageUrl } = body
|
|
|
|
const offer = await prisma.offer.update({
|
|
where: { id },
|
|
data: {
|
|
...(title !== undefined ? { title } : {}),
|
|
...(description !== undefined ? { description } : {}),
|
|
...(price !== undefined ? { price } : {}),
|
|
...(type !== undefined ? { type } : {}),
|
|
...(imageUrl !== undefined ? { imageUrl } : {}),
|
|
},
|
|
include: { business: true },
|
|
})
|
|
return NextResponse.json(offer)
|
|
} catch (error) {
|
|
console.error('PATCH /api/offers/[id] error:', error)
|
|
return NextResponse.json({ error: 'Erreur lors de la mise à jour' }, { status: 500 })
|
|
}
|
|
}
|
|
|
|
// DELETE /api/offers/[id] (Owner or Admin only)
|
|
export async function DELETE(
|
|
request: NextRequest,
|
|
context: { params: Promise<{ id: string }> }
|
|
): Promise<Response> {
|
|
try {
|
|
const authUser = await getAuthUser(request)
|
|
if (!authUser) {
|
|
return NextResponse.json({ error: 'Authentification requise' }, { status: 401 })
|
|
}
|
|
|
|
const { id } = await context.params
|
|
const existing = await prisma.offer.findUnique({
|
|
where: { id },
|
|
include: { business: { select: { ownerId: true } } }
|
|
})
|
|
|
|
if (!existing) {
|
|
return NextResponse.json({ error: 'Offre non trouvée' }, { status: 404 })
|
|
}
|
|
|
|
if (existing.business.ownerId !== authUser.id && authUser.role !== 'ADMIN') {
|
|
return NextResponse.json({ error: 'Non autorisé' }, { status: 403 })
|
|
}
|
|
|
|
await prisma.offer.delete({ where: { id } })
|
|
return NextResponse.json({ success: true })
|
|
} catch (error) {
|
|
console.error('DELETE /api/offers/[id] error:', error)
|
|
return NextResponse.json({ error: 'Erreur lors de la suppression' }, { status: 500 })
|
|
}
|
|
}
|