Initial commit

app/api/admin/add-user/route.ts

@@ -0,0 +1,58 @@
+import { type NextRequest, NextResponse } from "next/server"
+import { safeQuery } from "@/lib/database"
+import { hashPassword } from "@/lib/auth"
+import { type UserRole, DEPARTMENTS, TEAMS, FIELDS } from "@/types/user"
+
+export async function POST(request: NextRequest) {
+  try {
+    const { name, isAdmin, field, department, team, role } = await request.json()
+
+    // Input validation
+    if (!name || !field || !department || !team) {
+      return NextResponse.json({ error: "נתונים חסרים" }, { status: 400 })
+    }
+
+    // Validate department, team, and field
+    if (!FIELDS.includes(field as any)) {
+      return NextResponse.json({ error: "תחום לא תקין" }, { status: 400 })
+    }
+
+    if (!DEPARTMENTS.includes(department as any)) {
+      return NextResponse.json({ error: "מסגרת לא תקינה" }, { status: 400 })
+    }
+
+    if (!TEAMS.includes(team as any)) {
+      return NextResponse.json({ error: "צוות לא תקין" }, { status: 400 })
+    }
+
+    const validRoles: UserRole[] = ["user", "team_admin", "department_admin", "field_admin", "global_admin"]
+
+    // Set role based on isAdmin flag or explicit role
+    const userRole: UserRole = (role as UserRole) || (isAdmin ? "global_admin" : "user")
+
+    if (!validRoles.includes(userRole)) {
+      return NextResponse.json({ error: "תפקיד לא תקין" }, { status: 400 })
+    }
+
+    // Generate unique Login ID
+    const { generateUniqueIsraeliID } = await import("@/lib/auth")
+    const nationalId = await generateUniqueIsraeliID()
+
+    // Hash default password "password123"
+    const hashedPassword = await hashPassword("password123")
+
+    await safeQuery(
+      "INSERT INTO users (national_id, password, name, is_admin, role, must_change_password, field, department, team) VALUES (?, ?, ?, ?, ?, TRUE, ?, ?, ?)",
+      [nationalId, hashedPassword, name, isAdmin, userRole, field, department, team],
+    )
+
+    return NextResponse.json({
+      success: true,
+      nationalId: nationalId,
+      message: `משתמש ${name} נוסף בהצלחה עם מזהה: ${nationalId}`,
+    })
+  } catch (error) {
+    console.error("Add user error:", error)
+    return NextResponse.json({ error: "שגיאה בהוספת משתמש" }, { status: 500 })
+  }
+}