first commit

app/api/users/route.ts

@@ -0,0 +1,155 @@
+import { NextResponse } from "next/server";
+import { auth } from "@/lib/auth";
+import { userDb } from "@/lib/db";
+import bcrypt from "bcryptjs";
+import { randomUUID } from "crypto";
+import { emailService } from '@/lib/email-service';
+
+// GET /api/users - List all users (admin only)
+export async function GET() {
+  try {
+    const session = await auth();
+
+    if (!session?.user) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+
+    // Only admins can view users
+    if ((session.user as any).role !== 'ADMIN') {
+      return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+    }
+
+    const currentUsername = session.user.name || '';
+    const currentUserId = (session.user as any).id || '';
+
+    // Only the "admin" user can see all users
+    // Other ADMIN users see only their created viewers (parent-child relationship)
+    let users: any[];
+
+    if (currentUsername === 'admin') {
+      // Super admin sees all users
+      users = userDb.findAll();
+    } else if ((session.user as any).role === 'ADMIN') {
+      // ADMIN users see only their child viewers
+      users = userDb.findAll({ parentUserId: currentUserId });
+    } else {
+      // VIEWER users see nobody
+      users = [];
+    }
+
+    // Remove password hashes from response
+    const safeUsers = users.map(({ passwordHash, ...user }) => user);
+
+    return NextResponse.json({ users: safeUsers });
+  } catch (error) {
+    console.error("Error fetching users:", error);
+    return NextResponse.json(
+      { error: "Failed to fetch users" },
+      { status: 500 }
+    );
+  }
+}
+
+// POST /api/users - Create new user (admin only)
+export async function POST(request: Request) {
+  try {
+    const session = await auth();
+
+    if (!session?.user) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+
+    // Only admins can create users
+    if ((session.user as any).role !== 'ADMIN') {
+      return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+    }
+
+    const body = await request.json();
+    const { username, email, password, role } = body;
+
+    // Validation
+    if (!username || !password) {
+      return NextResponse.json(
+        { error: "Missing required fields: username, password" },
+        { status: 400 }
+      );
+    }
+
+    if (role && !['ADMIN', 'VIEWER'].includes(role)) {
+      return NextResponse.json(
+        { error: "Invalid role. Must be ADMIN or VIEWER" },
+        { status: 400 }
+      );
+    }
+
+    // Check if username already exists
+    const existing = userDb.findByUsername(username);
+    if (existing) {
+      return NextResponse.json(
+        { error: "Username already exists" },
+        { status: 409 }
+      );
+    }
+
+    // Hash password
+    const passwordHash = await bcrypt.hash(password, 10);
+
+    // Determine parent_user_id
+    // If current user is not "admin", set parent_user_id to current user's ID
+    // If creating a VIEWER, set parent_user_id to current user's ID
+    const currentUsername = session.user.name || '';
+    const currentUserId = (session.user as any).id || '';
+    let parent_user_id: string | null = null;
+
+    if (currentUsername !== 'admin') {
+      // Non-admin ADMIN users create viewers that belong to them
+      parent_user_id = currentUserId;
+
+      // Force role to VIEWER for non-admin ADMIN users
+      if (role && role !== 'VIEWER') {
+        return NextResponse.json(
+          { error: 'You can only create VIEWER users' },
+          { status: 403 }
+        );
+      }
+    }
+
+    // Create user
+    const user = userDb.create({
+      id: randomUUID(),
+      username,
+      email: email || null,
+      passwordHash,
+      role: role || 'VIEWER',
+      parent_user_id,
+    });
+
+    // Send welcome email (don't fail if email fails)
+    if (email) {
+      try {
+        const baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000';
+        await emailService.sendWelcomeEmail({
+          email,
+          username,
+          loginUrl: `${baseUrl}/login`,
+          temporaryPassword: password, // Send the original password
+        });
+        console.log('[UserCreate] Welcome email sent to:', email);
+      } catch (emailError) {
+        console.error('[UserCreate] Failed to send welcome email:', emailError);
+        // Don't fail user creation if email fails
+      }
+    }
+
+    // Remove password hash from response
+    const { passwordHash: _, ...safeUser } = user;
+
+    return NextResponse.json({ user: safeUser }, { status: 201 });
+  } catch (error) {
+    console.error("Error creating user:", error);
+    return NextResponse.json(
+      { error: "Failed to create user" },
+      { status: 500 }
+    );
+  }
+}