route.ts

Go to the documentation of this file.

import { NextRequest, NextResponse } from "next/server";
import { getRequestContext, validateApiAccess } from "@/lib/server/sessionUtils";
import { fieldpineServerApi } from "@/lib/server/fieldpineApi";
 
/**
 * GET /api/v1/elink/sales-report
 * POS Sales Report - uses ELINK retailmax.elink.saleflat.list
 * 
 * Security: Retail stores can access this (ELINK only)
 */
export async function GET(request: NextRequest) {
  try {
    // 1. Get session and store context
    const context = await getRequestContext(request);
    
    if (!context) {
      return NextResponse.json(
        { success: false, error: "Unauthorized - Please log in" },
        { status: 401 }
      );
    }
 
    // 2. SECURITY: Validate ELINK access (allowed for retail stores)
    const apiAccessValidation = validateApiAccess(context, 'elink');
    if (!apiAccessValidation.valid) {
      console.warn(`[API Security] ELINK access denied: ${apiAccessValidation.error}`);
      return NextResponse.json(
        { 
          success: false, 
          error: apiAccessValidation.error,
          code: apiAccessValidation.errorCode
        },
        { status: 403 }
      );
    }
 
    // 3. Get query parameters
    const { searchParams } = new URL(request.url);
    const fromDate = searchParams.get('fromDate') || new Date().toISOString().split('T')[0];
    const toDate = searchParams.get('toDate') || new Date().toISOString().split('T')[0];
    const limit = searchParams.get('limit') || '200';
 
    // 4. Format dates for Fieldpine API (DD-MM-YYYY)
    const formatDateForAPI = (dateStr: string) => {
      const [year, month, day] = dateStr.split("-");
      return `${day}-${month}-${year}`;
    };
 
    const fromDateAPI = formatDateForAPI(fromDate);
    const toDateAPI = formatDateForAPI(toDate);
 
    console.log(`[POS Sales Report] Loading sales for ${context.store.name} from ${fromDate} to ${toDate}`);
 
    // 5. Build ELINK BUCK parameters
    // retailmax.elink.saleflat.list - Returns flat list of sale items
    // Field predicates: f102,4,DATE = f102 >= DATE (greater than or equal)
    //                   f102,1,DATE = f102 != DATE (not equal - acts as less than for end date)
    const buckParams: Record<string, string | string[]> = {
      "3": "retailmax.elink.saleflat.list",
      "103": "1", // Include full product packet
      "104": "1", // Include customer packet
      "8": limit, // Max rows
      "99": Math.random().toString() // Cache buster
    };
 
    // Add date filters as array (multiple "9" parameters)
    buckParams["9"] = [
      `f102,4,${fromDateAPI}`, // f102 >= fromDate
      `f102,1,${toDateAPI}`    // f102 != toDate (effectively < toDate)
    ];
 
    // 6. Make ELINK API call using singleton
    // Use store-specific URL for API calls
    const response = await fieldpineServerApi.buckApiCall(buckParams, context.session.apiKey, context.store.url);
 
    // 7. Return the data
    return NextResponse.json({
      success: true,
      data: response,
      meta: {
        store: context.store.name,
        storeType: context.store.type,
        dateRange: { from: fromDate, to: toDate },
        endpoint: 'retailmax.elink.saleflat.list'
      }
    });
 
  } catch (error: any) {
    console.error("[POS Sales Report API] Error:", error);
    return NextResponse.json(
      { success: false, error: error.message || "Failed to fetch sales report" },
      { status: 500 }
    );
  }
}