Arnaud
c8f4b50ef3
All literal "team" tier-value references renamed to "family" across API routes, admin UI, OpenAPI schemas, and lib/tiers.ts. The DB enum value itself is renamed in place via ALTER TYPE ... RENAME VALUE (migration 0044) rather than drizzle-kit's auto-generated drop-and-recreate-the-enum migration, which would have failed against any existing row still holding 'team' — RENAME VALUE preserves existing data with no cast/backfill needed. Also adds STRIPE_PLAN.md — a full Stripe billing integration plan (Checkout+Portal, tier→Price mapping, admin billing dashboard, and a multi-user Family-group design since Family is meant to cover several accounts under one subscription, not one payer). Planning only, no Stripe code yet. v0.47.0
58 lines
1.7 KiB
TypeScript
58 lines
1.7 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { requireAdmin } from "@/lib/api-auth";
|
|
import { db, auditLogs } from "@epicure/db";
|
|
import { createInvite, listInvites } from "@/lib/invites";
|
|
import { randomUUID } from "crypto";
|
|
|
|
const VALID_ROLES = ["user", "moderator", "admin"] as const;
|
|
const VALID_TIERS = ["free", "pro", "family"] as const;
|
|
|
|
export async function GET() {
|
|
const { response } = await requireAdmin();
|
|
if (response) return response;
|
|
|
|
const invites = await listInvites();
|
|
return NextResponse.json({ invites });
|
|
}
|
|
|
|
export async function POST(req: NextRequest) {
|
|
const { session, response } = await requireAdmin();
|
|
if (response) return response;
|
|
|
|
const body = (await req.json()) as {
|
|
email?: string;
|
|
role?: string;
|
|
tier?: string;
|
|
expiresInDays?: number;
|
|
};
|
|
|
|
const role = body.role ?? "user";
|
|
const tier = body.tier ?? "free";
|
|
if (!VALID_ROLES.includes(role as (typeof VALID_ROLES)[number])) {
|
|
return NextResponse.json({ error: "Invalid role" }, { status: 400 });
|
|
}
|
|
if (!VALID_TIERS.includes(tier as (typeof VALID_TIERS)[number])) {
|
|
return NextResponse.json({ error: "Invalid tier" }, { status: 400 });
|
|
}
|
|
|
|
const invite = await createInvite({
|
|
createdById: session!.user.id,
|
|
email: body.email,
|
|
role: role as (typeof VALID_ROLES)[number],
|
|
tier: tier as (typeof VALID_TIERS)[number],
|
|
expiresInDays: body.expiresInDays ?? 7,
|
|
});
|
|
|
|
await db.insert(auditLogs).values({
|
|
id: randomUUID(),
|
|
userId: session!.user.id,
|
|
action: "admin.invite.create",
|
|
targetType: "invite",
|
|
targetId: invite!.id,
|
|
metadata: JSON.stringify({ email: body.email, role, tier }),
|
|
createdAt: new Date(),
|
|
});
|
|
|
|
return NextResponse.json({ invite });
|
|
}
|