route.ts

Go to the documentation of this file.

import { NextRequest, NextResponse } from 'next/server';
import { fieldpineServerApi } from '@/lib/server/fieldpineApi';
import { getRequestContext, validateApiAccess } from '@/lib/server/sessionUtils';
 
/**
 * Sales/Invoices Endpoint (ELINK API)
 * GET /api/v1/openapi/sales - List sales/invoices
 * POST /api/v1/openapi/sales - Create new sale
 * 
 * Uses ELINK API (retailmax.elink.sale.list)
 * Security: Retail stores can access this (ELINK only)
 */
export async function GET(request: NextRequest) {
  try {
    // 1. Get session and store context
    const context = await getRequestContext(request);
    
    if (!context || !context.isAuthenticated) {
      return NextResponse.json(
        { error: 'Authentication required' },
        { status: 401 }
      );
    }
 
    // 2. SECURITY: Validate ELINK access
    const apiAccessValidation = validateApiAccess(context, 'elink');
    if (!apiAccessValidation.valid) {
      console.warn(`[API Security] ELINK access denied: ${apiAccessValidation.error}`);
      return NextResponse.json(
        { 
          error: apiAccessValidation.error,
          code: apiAccessValidation.errorCode
        },
        { status: 403 }
      );
    }
 
    // 3. Parse query parameters
    const { searchParams } = new URL(request.url);
    const limit = searchParams.get('$top') || searchParams.get('limit') || '100';
    const skip = searchParams.get('$skip') || searchParams.get('skip') || '0';
    const customerId = searchParams.get('customerId');
    const phase = searchParams.get('phase');
 
    console.log('[Sales API] Fetching sales with:', { limit, skip, customerId, phase });
 
    // 4. Build ELINK BUCK parameters
    // Field reference: f102=sale ID, f131/f132=completed date, f210=total, f300=phase, f301=customer ID
    const buckParams: Record<string, string> = {
      '3': 'retailmax.elink.sale.list',
      '10': '102,131,132,140,141,210,211,212,213,214,300,301,302,303,304,305',
      '13': 'completeddt', // Sort by completion date (descending)
      '20': limit,
      '21': skip,
      '99': Math.random().toString()
    };
 
    // Add filters if provided
    if (customerId) {
      buckParams['301'] = customerId;
    }
    
    if (phase) {
      buckParams['300'] = phase;
    }
 
    // 5. Make ELINK API call using singleton
    // Use store-specific URL for API calls
    const result = await fieldpineServerApi.buckApiCall(buckParams, context.session.apiKey, context.store.url);
    
    // 6. Transform BUCK response
    let sales: any[] = [];
    if (result && result.DATS && Array.isArray(result.DATS)) {
      sales = result.DATS.map((sale: any) => ({
        Sid: sale.f102_E || 0,
        ExternalId: sale.f140_s || sale.f141_s || null,
        CompletedDt: sale.f131_DT || sale.f132_DT || null,
        Total: parseFloat(sale.f210_$) || 0,
        Phase: parseInt(sale.f300_E) || 0,
        CustomerId: sale.f301_s || null,
        CustomerName: sale.f302_s || null,
        LocationId: parseInt(sale.f303_E) || null,
        LocationName: sale.f304_s || null,
        CreatedDt: sale.f305_DT || null
      }));
    }
 
    return NextResponse.json({
      success: true,
      data: {
        value: sales,
        '@odata.count': sales.length
      },
      source: 'elink'
    });
 
  } catch (error: any) {
    console.error('[Sales API] Error:', error);
    return NextResponse.json(
      { error: error.message || 'Failed to fetch sales' },
      { status: 500 }
    );
  }
}
 
/**
 * Create new sale/invoice
 */
export async function POST(request: NextRequest) {
  try {
    // 1. Get session and store context
    const context = await getRequestContext(request);
    
    if (!context || !context.isAuthenticated) {
      return NextResponse.json(
        { error: 'Authentication required' },
        { status: 401 }
      );
    }
 
    // 2. SECURITY: Validate ELINK access
    const apiAccessValidation = validateApiAccess(context, 'elink');
    if (!apiAccessValidation.valid) {
      return NextResponse.json(
        { 
          error: apiAccessValidation.error,
          code: apiAccessValidation.errorCode
        },
        { status: 403 }
      );
    }
 
    const saleData = await request.json();
    console.log('[Sales API] Creating sale:', saleData);
 
    const result = await fieldpineServerApi.createSale(saleData, context.session.apiKey);
 
    return NextResponse.json({
      success: true,
      data: result,
      source: 'elink'
    });
 
  } catch (error: any) {
    console.error('[Sales API] Create error:', error);
    return NextResponse.json(
      { error: error.message || 'Failed to create sale' },
      { status: 500 }
    );
  }
}