48 lines
1.9 KiB
TypeScript
48 lines
1.9 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server'
|
|
import { getDb } from '@/lib/db'
|
|
import { initDatabase } from '@/lib/db-schema'
|
|
import { getCurrentUser } from '@/lib/auth'
|
|
import { hasPermission } from '@/lib/permissions'
|
|
|
|
export async function GET() {
|
|
try {
|
|
initDatabase()
|
|
const user = await getCurrentUser()
|
|
if (!user) return NextResponse.json({ error: '未登录' }, { status: 401 })
|
|
|
|
const db = getDb()
|
|
const roles = db.prepare('SELECT * FROM roles ORDER BY id').all()
|
|
return NextResponse.json({ roles })
|
|
} catch (e) {
|
|
const msg = e instanceof Error ? e.message : '查询失败'
|
|
return NextResponse.json({ error: msg }, { status: 500 })
|
|
}
|
|
}
|
|
|
|
export async function POST(request: NextRequest) {
|
|
try {
|
|
initDatabase()
|
|
const user = await getCurrentUser()
|
|
if (!user) return NextResponse.json({ error: '未登录' }, { status: 401 })
|
|
if (!hasPermission(user, 'roles:write')) return NextResponse.json({ error: '权限不足' }, { status: 403 })
|
|
|
|
const body = await request.json()
|
|
const { name, display_name, permissions } = body
|
|
|
|
if (!name || !display_name) {
|
|
return NextResponse.json({ error: '角色名称和显示名称为必填项' }, { status: 400 })
|
|
}
|
|
|
|
const db = getDb()
|
|
const existing = db.prepare('SELECT id FROM roles WHERE name = ?').get(name)
|
|
if (existing) return NextResponse.json({ error: '角色名已存在' }, { status: 400 })
|
|
|
|
const result = db.prepare('INSERT INTO roles (name, display_name, permissions) VALUES (?, ?, ?)').run(name, display_name, JSON.stringify(permissions || []))
|
|
const role = db.prepare('SELECT * FROM roles WHERE id = ?').get(result.lastInsertRowid)
|
|
return NextResponse.json({ role }, { status: 201 })
|
|
} catch (e) {
|
|
const msg = e instanceof Error ? e.message : '创建失败'
|
|
return NextResponse.json({ error: msg }, { status: 500 })
|
|
}
|
|
}
|