85 lines
2.8 KiB
TypeScript
85 lines
2.8 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server"
|
|
import { getSessionUser } from "@/lib/auth"
|
|
import { query } from "@/lib/db"
|
|
|
|
export async function GET() {
|
|
try {
|
|
const user = await getSessionUser()
|
|
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
|
if (user.role !== "admin" && user.role !== "super_admin") {
|
|
return NextResponse.json({ error: "Forbidden" }, { status: 403 })
|
|
}
|
|
|
|
const result = await query(`SELECT * FROM company_settings ORDER BY updated_at DESC LIMIT 1`)
|
|
const row = result.rows[0]
|
|
|
|
if (!row) {
|
|
return NextResponse.json({
|
|
companyName: "Coastal IT Solutions",
|
|
companyEmail: "info@coastalit.com",
|
|
companyPhone: "(555) 123-4567",
|
|
companyWebsite: "https://coastalit.com",
|
|
companyAddress: "123 Business Ave, Suite 100, San Francisco, CA 94105",
|
|
})
|
|
}
|
|
|
|
return NextResponse.json({
|
|
companyName: row.company_name || "",
|
|
companyEmail: row.company_email || "",
|
|
companyPhone: row.company_phone || "",
|
|
companyWebsite: row.company_website || "",
|
|
companyAddress: row.company_address || "",
|
|
})
|
|
} catch (error) {
|
|
console.error("Company settings GET error:", error)
|
|
return NextResponse.json({ error: "Failed to load company settings" }, { status: 500 })
|
|
}
|
|
}
|
|
|
|
export async function PATCH(request: NextRequest) {
|
|
try {
|
|
const user = await getSessionUser()
|
|
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
|
if (user.role !== "admin" && user.role !== "super_admin") {
|
|
return NextResponse.json({ error: "Forbidden" }, { status: 403 })
|
|
}
|
|
|
|
const body = await request.json()
|
|
|
|
const result = await query(
|
|
`UPDATE company_settings SET
|
|
company_name = $1, company_email = $2, company_phone = $3,
|
|
company_website = $4, company_address = $5, updated_by = $6, updated_at = NOW()
|
|
WHERE id = (SELECT id FROM company_settings ORDER BY updated_at DESC LIMIT 1)`,
|
|
[
|
|
body.companyName || "",
|
|
body.companyEmail || "",
|
|
body.companyPhone || "",
|
|
body.companyWebsite || "",
|
|
body.companyAddress || "",
|
|
user.id,
|
|
],
|
|
)
|
|
|
|
if (result.rowCount === 0) {
|
|
await query(
|
|
`INSERT INTO company_settings (company_name, company_email, company_phone, company_website, company_address, updated_by)
|
|
VALUES ($1, $2, $3, $4, $5, $6)`,
|
|
[
|
|
body.companyName || "",
|
|
body.companyEmail || "",
|
|
body.companyPhone || "",
|
|
body.companyWebsite || "",
|
|
body.companyAddress || "",
|
|
user.id,
|
|
],
|
|
)
|
|
}
|
|
|
|
return NextResponse.json({ success: true })
|
|
} catch (error) {
|
|
console.error("Company settings PATCH error:", error)
|
|
return NextResponse.json({ error: "Failed to save company settings" }, { status: 500 })
|
|
}
|
|
}
|