orders.js

Go to the documentation of this file.

/**
 * @file orders.js
 * @module OrdersRoutes
 * @description Order management API routes. Retrieves order records with tenant filtering. Basic endpoint for order history and tracking.
 * @see {@link ../services/db} for database connection
 * @see {@link ../middleware/auth} for authentication middleware
 * @see {@link ../middleware/tenant} for tenant context utilities
 * @apiDefine OrdersGroup Orders
 * @apiGroup Orders
 * @apiHeader {string} Authorization Bearer token required.
 * @apiError (Error 401) Unauthorized Missing or invalid token.
 * @apiError (Error 500) ServerError Internal server error.
 */
 
const express = require('express');
const router = express.Router();
const pool = require('../services/db');
const authenticateToken = require('../middleware/auth');
 
const { getTenantFilter } = require('../middleware/tenant');
 
// Define your routes for orders here
 
/**
 * @api {get} /orders List all orders
 * @apiName ListOrders
 * @apiGroup Orders
 * @apiDescription Retrieve all orders for the current tenant, ordered by creation date (newest first). Returns complete order records with tenant filtering applied automatically.
 * @apiSuccess {object[]} orders Array of order objects.
 * @apiSuccess {number} orders.order_id Order ID.
 * @apiSuccess {Date} orders.created_at Order creation timestamp.
 * @apiExample {curl} Example usage:
 *     curl -H "Authorization: Bearer <token>" https://api.example.com/orders
 */
router.get('/', authenticateToken, async (req, res) => {
  try {
    const { clause: tenantClause, params: tenantParams } = getTenantFilter(req);
    let query = `SELECT * FROM orders`;
    if (tenantClause) {
      query += ` WHERE ${tenantClause}`;
    }
    query += ' ORDER BY created_at DESC';
    const result = await pool.query(query, tenantParams);
    res.json(result.rows);
  } catch (err) {
    console.error('Error fetching orders:', err);
    res.status(500).send('Server error');
  }
});
 
 
module.exports = router;