86 lines
2.7 KiB
TypeScript

import { NextRequest, NextResponse } from 'next/server'
import { getServerSession } from 'next-auth'
import { authOptions } from '@/lib/auth'
import { isSuperAdmin } from '@/lib/department-permission'
import {
buildExternalNotificationTargetAdminView,
createExternalNotificationTarget,
listExternalNotificationTargets,
} from '@/lib/external-auto-listing'
async function assertAdminPermission() {
const session = await getServerSession(authOptions)
if (!session?.user || !(session.user as any).id) {
return NextResponse.json({ success: false, error: '未登录' }, { status: 401 })
}
const userId = (session.user as any).id
if (!(await isSuperAdmin(userId))) {
return NextResponse.json({ success: false, error: '仅超级管理员可访问' }, { status: 403 })
}
return null
}
function toErrorResponse(error: unknown) {
const message = error instanceof Error ? error.message : '服务器错误'
const status =
message.includes('不能为空') ||
message.includes('格式不正确') ||
message.includes('仅支持') ||
message.includes('必须提供')
? 400
: 500
return NextResponse.json({ success: false, error: message }, { status })
}
export async function GET(request: NextRequest) {
try {
const authError = await assertAdminPermission()
if (authError) {
return authError
}
const targets = await listExternalNotificationTargets()
return NextResponse.json({
success: true,
data: targets.map(buildExternalNotificationTargetAdminView),
})
} catch (error) {
console.error('[admin/external-notification-targets] GET error:', error)
return toErrorResponse(error)
}
}
export async function POST(request: NextRequest) {
try {
const authError = await assertAdminPermission()
if (authError) {
return authError
}
const body = await request.json()
const target = await createExternalNotificationTarget({
name: typeof body?.name === 'string' ? body.name : '',
callbackUrl: typeof body?.callbackUrl === 'string' ? body.callbackUrl : '',
authType: typeof body?.authType === 'string' ? body.authType : undefined,
authConfig:
body?.authConfig && typeof body.authConfig === 'object' && !Array.isArray(body.authConfig)
? body.authConfig
: undefined,
eventTypes: Array.isArray(body?.eventTypes) ? body.eventTypes : undefined,
isActive: typeof body?.isActive === 'boolean' ? body.isActive : undefined,
})
return NextResponse.json({
success: true,
data: buildExternalNotificationTargetAdminView(target),
message: '通知目标创建成功',
})
} catch (error) {
console.error('[admin/external-notification-targets] POST error:', error)
return toErrorResponse(error)
}
}