113 lines
3.2 KiB
TypeScript
113 lines
3.2 KiB
TypeScript
// 切换用户激活状态API
|
||
import { NextRequest, NextResponse } from 'next/server';
|
||
import { getServerSession } from 'next-auth';
|
||
import { authOptions } from '@/lib/auth';
|
||
import { prisma } from '@/lib/prisma';
|
||
import { isSystemAdmin } from '@/lib/department-permission';
|
||
|
||
// POST - 切换用户激活状态（仅管理员）
|
||
export async function POST(request: NextRequest) {
|
||
try {
|
||
const session = await getServerSession(authOptions);
|
||
if (!session?.user || !(session.user as any).id) {
|
||
return NextResponse.json(
|
||
{ error: '未登录' },
|
||
{ status: 401 }
|
||
);
|
||
}
|
||
|
||
const userRole = (session.user as any).role;
|
||
if (!isSystemAdmin(userRole)) {
|
||
return NextResponse.json(
|
||
{ error: '无权限' },
|
||
{ status: 403 }
|
||
);
|
||
}
|
||
|
||
const { userId, isActive, status } = await request.json();
|
||
|
||
// 支持新旧两种参数格式
|
||
let targetStatus: string;
|
||
let targetIsActive: boolean;
|
||
|
||
if (status !== undefined) {
|
||
// 新格式：使用 status 参数
|
||
if (!['pending', 'active', 'suspended', 'archived'].includes(status)) {
|
||
return NextResponse.json(
|
||
{ error: '无效的状态值' },
|
||
{ status: 400 }
|
||
);
|
||
}
|
||
targetStatus = status;
|
||
targetIsActive = status === 'active';
|
||
} else if (isActive !== undefined) {
|
||
// 旧格式：使用 isActive 参数（向后兼容）
|
||
if (typeof isActive !== 'boolean') {
|
||
return NextResponse.json(
|
||
{ error: '参数错误' },
|
||
{ status: 400 }
|
||
);
|
||
}
|
||
targetIsActive = isActive;
|
||
targetStatus = isActive ? 'active' : 'pending';
|
||
} else {
|
||
return NextResponse.json(
|
||
{ error: '缺少参数：需要 isActive 或 status' },
|
||
{ status: 400 }
|
||
);
|
||
}
|
||
|
||
if (!userId) {
|
||
return NextResponse.json(
|
||
{ error: '缺少用户ID' },
|
||
{ status: 400 }
|
||
);
|
||
}
|
||
|
||
const sessionUserId = (session.user as any).id;
|
||
// 不能禁用自己
|
||
if (userId === sessionUserId) {
|
||
return NextResponse.json(
|
||
{ error: '不能禁用自己' },
|
||
{ status: 400 }
|
||
);
|
||
}
|
||
|
||
// 双写：同时更新 status 和 isActive
|
||
const updateData: any = {
|
||
isActive: targetIsActive, // 旧字段（向后兼容）
|
||
status: targetStatus, // 新字段（阶段一新增）
|
||
};
|
||
|
||
// 如果状态为 archived，设置 archivedAt
|
||
if (targetStatus === 'archived') {
|
||
updateData.archivedAt = new Date();
|
||
} else if (targetStatus !== 'archived') {
|
||
// 如果从 archived 状态恢复，清除 archivedAt
|
||
updateData.archivedAt = null;
|
||
}
|
||
|
||
await prisma.user.update({
|
||
where: { id: userId },
|
||
data: updateData,
|
||
});
|
||
|
||
const statusMessages: Record<string, string> = {
|
||
'pending': '用户已设置为待激活',
|
||
'active': '用户已激活',
|
||
'suspended': '用户已暂停',
|
||
'archived': '用户已归档',
|
||
};
|
||
|
||
return NextResponse.json({
|
||
message: statusMessages[targetStatus] || (targetIsActive ? '用户已激活' : '用户已禁用'),
|
||
});
|
||
} catch (error) {
|
||
console.error('Toggle active error:', error);
|
||
return NextResponse.json(
|
||
{ error: '操作失败' },
|
||
{ status: 500 }
|
||
);
|
||
}
|
||
}
|