route.ts

Go to the documentation of this file.

import { NextRequest, NextResponse } from 'next/server';
import { fieldpineServerApi } from '@/lib/server/fieldpineApi';
import { cookies } from 'next/headers';
 
// Verify session middleware
async function verifySession(request: NextRequest) {
  const cookieStore = await cookies();
  const sessionCookie = cookieStore.get('fieldpine-session');
  
  if (!sessionCookie) {
    return null;
  }
  
  try {
    const session = JSON.parse(sessionCookie.value);
    const now = Date.now();
    const sessionAge = now - session.timestamp;
    const maxAge = 8 * 60 * 60 * 1000; // 8 hours
    
    if (sessionAge > maxAge || !session.authenticated) {
      return null;
    }
    
    return session;
  } catch {
    return null;
  }
}
 
export async function GET(request: NextRequest) {
  try {
    // Verify authentication
    const session = await verifySession(request);
    if (!session) {
      return NextResponse.json(
        { error: 'Unauthorized' },
        { status: 401 }
      );
    }
 
    // Rate limiting - Get client IP from headers
    const clientId = request.headers.get('x-forwarded-for') || 
                    request.headers.get('x-real-ip') || 
                    request.headers.get('cf-connecting-ip') || 
                    session.userId || 
                    'unknown';
    if (!fieldpineServerApi.checkClientRateLimit(clientId)) {
      return NextResponse.json(
        { error: 'Rate limit exceeded' },
        { status: 429 }
      );
    }
 
    // Parse query parameters
    const { searchParams } = new URL(request.url);
    const params = {
      limit: searchParams.get('limit') ? parseInt(searchParams.get('limit')!) : undefined
    };
 
    // Return demo locations data for now
    const locations = {
      locations: [
        { id: 1, name: "Main Store", address: "123 Main St", city: "Sydney" },
        { id: 2, name: "Mall Location", address: "456 Shopping Ave", city: "Melbourne" }
      ]
    };
    
    return NextResponse.json({ success: true, data: locations });
    
  } catch (error) {
    console.error('Locations API error:', error);
    return NextResponse.json(
      { error: 'Failed to fetch locations' },
      { status: 500 }
    );
  }
}
 
export async function POST(request: NextRequest) {
  return NextResponse.json(
    { error: 'Method not allowed' },
    { status: 405 }
  );
}