59 lines
2.2 KiB
TypeScript
59 lines
2.2 KiB
TypeScript
import { type NextRequest, NextResponse } from "next/server"
|
|
import { safeQuery } from "@/lib/database"
|
|
import { hashPassword } from "@/lib/auth"
|
|
import { type UserRole, DEPARTMENTS, TEAMS, FIELDS } from "@/types/user"
|
|
|
|
export async function POST(request: NextRequest) {
|
|
try {
|
|
const { name, isAdmin, field, department, team, role } = await request.json()
|
|
|
|
// Input validation
|
|
if (!name || !field || !department || !team) {
|
|
return NextResponse.json({ error: "נתונים חסרים" }, { status: 400 })
|
|
}
|
|
|
|
// Validate department, team, and field
|
|
if (!FIELDS.includes(field as any)) {
|
|
return NextResponse.json({ error: "תחום לא תקין" }, { status: 400 })
|
|
}
|
|
|
|
if (!DEPARTMENTS.includes(department as any)) {
|
|
return NextResponse.json({ error: "מסגרת לא תקינה" }, { status: 400 })
|
|
}
|
|
|
|
if (!TEAMS.includes(team as any)) {
|
|
return NextResponse.json({ error: "צוות לא תקין" }, { status: 400 })
|
|
}
|
|
|
|
const validRoles: UserRole[] = ["user", "team_admin", "department_admin", "field_admin", "global_admin"]
|
|
|
|
// Set role based on isAdmin flag or explicit role
|
|
const userRole: UserRole = (role as UserRole) || (isAdmin ? "global_admin" : "user")
|
|
|
|
if (!validRoles.includes(userRole)) {
|
|
return NextResponse.json({ error: "תפקיד לא תקין" }, { status: 400 })
|
|
}
|
|
|
|
// Generate unique Login ID
|
|
const { generateUniqueIsraeliID } = await import("@/lib/auth")
|
|
const nationalId = await generateUniqueIsraeliID()
|
|
|
|
// Hash default password "password123"
|
|
const hashedPassword = await hashPassword("password123")
|
|
|
|
await safeQuery(
|
|
"INSERT INTO users (national_id, password, name, is_admin, role, must_change_password, field, department, team) VALUES (?, ?, ?, ?, ?, TRUE, ?, ?, ?)",
|
|
[nationalId, hashedPassword, name, isAdmin, userRole, field, department, team],
|
|
)
|
|
|
|
return NextResponse.json({
|
|
success: true,
|
|
nationalId: nationalId,
|
|
message: `משתמש ${name} נוסף בהצלחה עם מזהה: ${nationalId}`,
|
|
})
|
|
} catch (error) {
|
|
console.error("Add user error:", error)
|
|
return NextResponse.json({ error: "שגיאה בהוספת משתמש" }, { status: 500 })
|
|
}
|
|
}
|