import { NextResponse } from "next/server"; import { query, queryOne } from "@/lib/db"; import { loadTranslationsFor, replaceTranslations } from "@/lib/db/translations"; import { authErrorResponse, requireRole } from "@/lib/auth/session"; import { isSameOrigin } from "@/lib/origin"; import type { Section } from "@/lib/types"; interface SectionRow { key: string; label: string; time_range: string; sort: number; } async function withTranslations(rows: SectionRow[]): Promise { const translations = await loadTranslationsFor( "section_translations", rows.map((r) => r.key) ); return rows.map((r) => ({ ...r, translations: translations.get(r.key) ?? {} })); } export async function GET() { const rows = await query( "select key, label, time_range, sort from sections order by sort" ); return NextResponse.json(await withTranslations(rows)); } export async function POST(request: Request) { if (!isSameOrigin(request)) { return NextResponse.json({ error: "Nicht erlaubt." }, { status: 403 }); } try { await requireRole(["staff", "admin"]); const body = (await request.json()) as { label: string; time_range: string; translations?: Record; }; const maxRow = await queryOne<{ sort: number }>( "select sort from sections order by sort desc limit 1" ); const row = (await queryOne( `insert into sections (label, time_range, sort) values ($1, $2, $3) returning key, label, time_range, sort`, [body.label, body.time_range, (maxRow?.sort ?? 0) + 1] ))!; if (body.translations) { await replaceTranslations("section_translations", row.key, body.translations); } const [section] = await withTranslations([row]); return NextResponse.json(section, { status: 201 }); } catch (err) { const res = authErrorResponse(err); if (res) return res; throw err; } }