route.ts

Go to the documentation of this file.

import { NextRequest, NextResponse } from 'next/server';
import { fieldpineServerApi } from '@/lib/server/fieldpineApi';
import { getStoredAuth } from '@/lib/server/auth';
 
export async function GET(request: NextRequest) {
  try {
    const authData = await getStoredAuth();
    if (!authData || !authData.authenticated) {
      return NextResponse.json(
        { error: 'Authentication required' },
        { status: 401 }
      );
    }
 
    const clientId = request.headers.get('x-forwarded-for') || 
                    request.headers.get('x-real-ip') || 
                    authData.userId || 
                    'unknown';
    if (!fieldpineServerApi.checkClientRateLimit(clientId)) {
      return NextResponse.json(
        { error: 'Rate limit exceeded' },
        { status: 429 }
      );
    }
 
    const { searchParams } = new URL(request.url);
    const employeeId = searchParams.get('id');
 
    try {
      let buckParams: Record<string, string> = {
        "3": "retailmax.elink.employee.list",
        "10": "113", // Extended fields
        "8": "50000",
      };
 
      if (employeeId) {
        buckParams["9"] = `f100,0,${employeeId}`;
      }
 
      const employees = await fieldpineServerApi.buckApiCall(buckParams, authData.apiKey);
      
      return NextResponse.json({ 
        success: true, 
        data: employees,
        source: 'elink'
      });
      
    } catch (error) {
      console.error('eLink employee error:', error);
      return NextResponse.json(
        { error: 'eLink endpoint unavailable', source: 'elink' },
        { status: 503 }
      );
    }
 
  } catch (error) {
    console.error('eLink employee error:', error);
    return NextResponse.json(
      { error: 'Failed to fetch employees' },
      { status: 500 }
    );
  }
}
 
export async function POST(request: NextRequest) {
  try {
    const authData = await getStoredAuth();
    if (!authData || !authData.authenticated) {
      return NextResponse.json(
        { error: 'Authentication required' },
        { status: 401 }
      );
    }
 
    const body = await request.json();
    
    // Build DATI XML for employee creation/update
    const datiFields: any = {
      f8_s: 'retailmax.elink.employee.edit',
      f11_B: body.id ? 'E' : 'I', // Edit or Insert
    };
 
    if (body.id) datiFields.f100_E = body.id.toString();
    if (body.shortName !== undefined) datiFields.f101_s = body.shortName;
    if (body.fullName !== undefined) datiFields.f102_s = body.fullName;
    if (body.posLoginId !== undefined) datiFields.f103_s = body.posLoginId;
    if (body.startDate !== undefined) datiFields.f104_s = body.startDate;
    if (body.endDate !== undefined) datiFields.f105_s = body.endDate;
    if (body.mainLocation !== undefined) datiFields.f106_s = body.mainLocation;
    if (body.jobTitle !== undefined) datiFields.f107_s = body.jobTitle;
    if (body.jobCode !== undefined) datiFields.f108_s = body.jobCode;
    if (body.departmentId !== undefined) datiFields.f109_s = body.departmentId;
    if (body.externalId !== undefined) datiFields.f110_s = body.externalId;
    if (body.nztaUid !== undefined) datiFields.f114_s = body.nztaUid;
 
    // Build XML
    const xmlLines = ['<DATI>'];
    for (const [key, value] of Object.entries(datiFields)) {
      xmlLines.push(`  <${key}>${escapeXml(value as string)}</${key}>`);
    }
    xmlLines.push('</DATI>');
    const xml = xmlLines.join('\n');
 
    console.log('Creating/Updating employee with XML:', xml);
 
    const response = await fieldpineServerApi.datiApiCall(xml, authData.apiKey);
 
    if (response.success) {
      return NextResponse.json({
        success: true,
        data: response.data,
        message: body.id ? 'Employee updated successfully' : 'Employee created successfully',
      });
    } else {
      return NextResponse.json(
        { success: false, error: response.error || 'Operation failed' },
        { status: 500 }
      );
    }
  } catch (error: any) {
    console.error('Error saving employee:', error);
    return NextResponse.json(
      { success: false, error: error.message || 'Failed to save employee' },
      { status: 500 }
    );
  }
}
 
function escapeXml(str: string): string {
  if (!str) return '';
  return str
    .replace(/&/g, '&amp;')
    .replace(/</g, '&lt;')
    .replace(/>/g, '&gt;')
    .replace(/"/g, '&quot;')
    .replace(/'/g, '&apos;');
}