35 lines
1.2 KiB
TypeScript
35 lines
1.2 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import prisma from '@/lib/prisma';
|
|
import { getAuthUser, USER_SAFE_SELECT } from '@/lib/auth-utils';
|
|
|
|
export async function GET(request: NextRequest) {
|
|
const authUser = await getAuthUser(request);
|
|
if (!authUser) {
|
|
return NextResponse.json({ error: 'Authentification requise' }, { status: 401 });
|
|
}
|
|
|
|
const { searchParams } = new URL(request.url);
|
|
const email = searchParams.get('email')?.toLowerCase().trim() || authUser.email.toLowerCase();
|
|
|
|
// Seul l'utilisateur lui-même ou un administrateur peut consulter ce profil par email
|
|
if (authUser.role !== 'ADMIN' && authUser.email.toLowerCase() !== email) {
|
|
return NextResponse.json({ error: 'Accès non autorisé' }, { status: 403 });
|
|
}
|
|
|
|
try {
|
|
const user = await prisma.user.findUnique({
|
|
where: { email },
|
|
select: USER_SAFE_SELECT
|
|
});
|
|
|
|
if (!user) {
|
|
return NextResponse.json({ error: 'Utilisateur introuvable' }, { status: 404 });
|
|
}
|
|
|
|
return NextResponse.json(user);
|
|
} catch (error) {
|
|
console.error('Error fetching user profile:', error);
|
|
return NextResponse.json({ error: 'Erreur serveur' }, { status: 500 });
|
|
}
|
|
}
|