Continued creating the entity system

src/pages/api/entities/index.ts

@@ -0,0 +1,48 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type {NextApiRequest, NextApiResponse} from "next";
+import {withIronSessionApiRoute} from "iron-session/next";
+import {sessionOptions} from "@/lib/session";
+import {getEntities, getEntitiesWithRoles} from "@/utils/entities.be";
+import {Entity} from "@/interfaces/entity";
+import {v4} from "uuid";
+
+export default withIronSessionApiRoute(handler, sessionOptions);
+
+async function handler(req: NextApiRequest, res: NextApiResponse) {
+	if (req.method === "GET") return await get(req, res);
+	if (req.method === "POST") return await post(req, res);
+}
+
+async function get(req: NextApiRequest, res: NextApiResponse) {
+	if (!req.session.user) {
+		res.status(401).json({ok: false});
+		return;
+	}
+
+	const user = req.session.user;
+	const {showRoles} = req.query as {showRoles: string};
+
+	const getFn = showRoles ? getEntitiesWithRoles : getEntities;
+
+	if (["admin", "developer"].includes(user.type)) return res.status(200).json(await getFn());
+	res.status(200).json(await getFn(user.entities.map((x) => x.id)));
+}
+
+async function post(req: NextApiRequest, res: NextApiResponse) {
+	if (!req.session.user) {
+		res.status(401).json({ok: false});
+		return;
+	}
+
+	const user = req.session.user;
+	if (!["admin", "developer"].includes(user.type)) {
+		return res.status(403).json({ok: false});
+	}
+
+	const entity: Entity = {
+		id: v4(),
+		label: req.body.label,
+	};
+
+	return res.status(200).json(entity);
+}