03a4a29150
- GET/POST /api/service-plans — list with activeOnly filter, create with validation - PUT /api/service-plans/[id] — partial update via closure pattern - GET/POST /api/subscribers — list/search with status/plan/name filters, paginated; create returns 201 - GET/PUT /api/subscribers/[id] — get with servicePlan relation, profile update - PATCH /api/subscribers/[id]/status — full status lifecycle transitions - All dynamic routes use closure pattern (withPermission HOF + params closure) - 41 tests covering ServicePlan CRUD, Subscriber CRUD, search/filter, status lifecycle, tenant isolation - 162 total tests pass (41 new + 121 existing)
77 lines
2.7 KiB
TypeScript
77 lines
2.7 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { withPermission } from "@/lib/middleware/authorize";
|
|
import { withTenantContext } from "@/lib/prisma-tenant";
|
|
import { updateServicePlan } from "@/lib/services/service-plan-service";
|
|
import { BillingType } from "@prisma/client";
|
|
|
|
/**
|
|
* PUT /api/service-plans/[id]
|
|
*
|
|
* Partially update a service plan.
|
|
* Accepts: { name?, speed?, monthlyPrice?, billingType?, description?, isActive? }
|
|
*
|
|
* Requires: manage on Subscriber subject.
|
|
*
|
|
* Response:
|
|
* 200 OK — updated service plan object
|
|
* 400 Bad Request — validation error
|
|
* 401 Unauthorized — no session
|
|
* 403 Forbidden — insufficient role
|
|
* 404 Not Found — plan not found in tenant scope
|
|
*/
|
|
export function PUT(req: NextRequest, { params }: { params: Promise<{ id: string }> }) {
|
|
return withPermission("manage", "Subscriber")(
|
|
async (req: NextRequest, { user }) => {
|
|
if (!user.tenantId) {
|
|
return NextResponse.json(
|
|
{ error: "No tenant context — super-admins must use the admin API" },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
const { id } = await params;
|
|
|
|
let body: unknown;
|
|
try {
|
|
body = await req.json();
|
|
} catch {
|
|
return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
|
|
}
|
|
|
|
const updates = body as Record<string, unknown>;
|
|
|
|
// Validate billingType if provided
|
|
if (
|
|
updates.billingType !== undefined &&
|
|
!Object.values(BillingType).includes(updates.billingType as BillingType)
|
|
) {
|
|
return NextResponse.json(
|
|
{ error: `billingType must be one of: ${Object.values(BillingType).join(", ")}` },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
const tenantPrisma = withTenantContext(user.tenantId);
|
|
|
|
try {
|
|
const plan = await updateServicePlan(tenantPrisma, id, {
|
|
name: updates.name as string | undefined,
|
|
speed: updates.speed as string | undefined,
|
|
monthlyPrice: updates.monthlyPrice as number | undefined,
|
|
billingType: updates.billingType as BillingType | undefined,
|
|
description: updates.description as string | undefined,
|
|
isActive: updates.isActive as boolean | undefined,
|
|
});
|
|
return NextResponse.json(plan);
|
|
} catch (err) {
|
|
const message = err instanceof Error ? err.message : "Failed to update service plan";
|
|
// Prisma throws P2025 for record not found
|
|
if (message.includes("Record to update not found") || message.includes("P2025")) {
|
|
return NextResponse.json({ error: "Service plan not found" }, { status: 404 });
|
|
}
|
|
return NextResponse.json({ error: message }, { status: 400 });
|
|
}
|
|
}
|
|
)(req);
|
|
}
|