route.ts

Go to the documentation of this file.

import { NextRequest, NextResponse } from 'next/server';
import { fieldpineServerApi } from '@/lib/server/fieldpineApi';
import { getRequestContext, validateApiAccess } from '@/lib/server/sessionUtils';
 
/**
 * Stocktakes List Endpoint (ELINK API)
 * GET /api/v1/buck/stocktakes?filter=current
 * 
 * Uses ELINK API (retailmax.elink.stocktake.list)
 * Security: Retail stores can access this (ELINK only)
 */
export async function GET(request: NextRequest) {
  try {
    // 1. Get session and store context
    const context = await getRequestContext(request);
    
    if (!context || !context.isAuthenticated) {
      return NextResponse.json(
        { error: 'Authentication required' },
        { status: 401 }
      );
    }
 
    // 2. SECURITY: Validate ELINK access
    const apiAccessValidation = validateApiAccess(context, 'elink');
    if (!apiAccessValidation.valid) {
      console.warn(`[API Security] ELINK access denied: ${apiAccessValidation.error}`);
      return NextResponse.json(
        { 
          error: apiAccessValidation.error,
          code: apiAccessValidation.errorCode
        },
        { status: 403 }
      );
    }
 
    // 3. Parse query parameters
    const { searchParams } = new URL(request.url);
    const filter = searchParams.get('filter') || 'current';
    
    // 4. Build BUCK parameters for stocktake list
    // Field reference: f116=stocktake status
    const buckParams: Record<string, string> = {
      '3': 'retailmax.elink.stocktake.list',
      '7': '200',
      '99': Math.random().toString()
    };
    
    if (filter === 'current') {
      buckParams['9'] = 'f116,0,current';
    } else if (filter === 'complete') {
      buckParams['9'] = 'f116,2,2';  // Flag bit 2 = complete
    }
 
    // 5. Make ELINK API call using singleton
    // Use store-specific URL for API calls
    const result = await fieldpineServerApi.buckApiCall(buckParams, context.session.apiKey, context.store.url);
 
    return NextResponse.json({
      success: true,
      data: result,
      source: 'elink'
    });
 
  } catch (error: any) {
    console.error('[Stocktakes API] Error:', error);
    return NextResponse.json(
      { error: error.message || 'Failed to fetch stocktakes' },
      { status: 500 }
    );
  }
}