Lukas Davidovic
249a672cd7
- migrate from SQLite to PostgreSQL with Drizzle ORM - implement comprehensive AdminLayout with expandable sidebar navigation - create professional dashboard with real-time charts and metrics - add advanced monitoring, reporting, and export functionality - fix menu alignment and remove non-existent pages - eliminate duplicate headers and improve UI consistency - add Tailwind CSS v3 for professional styling - expand database schema from 6 to 15 tables - implement role-based access control and API key management - create comprehensive settings, monitoring, and system info pages
79 lines
2.3 KiB
TypeScript
79 lines
2.3 KiB
TypeScript
import type { NextApiRequest, NextApiResponse } from "next"
|
|
import { db, schema } from '../../../lib/db/connection'
|
|
import { desc, eq } from 'drizzle-orm'
|
|
import { generateApiKey, hashApiKey } from "../../../lib/api-auth"
|
|
|
|
export default async function handler(req: NextApiRequest, res: NextApiResponse) {
|
|
try {
|
|
if (req.method === "GET") {
|
|
const keys = await db
|
|
.select({
|
|
id: schema.apiKeys.id,
|
|
name: schema.apiKeys.name,
|
|
permissions: schema.apiKeys.permissions,
|
|
rateLimit: schema.apiKeys.rateLimit,
|
|
isActive: schema.apiKeys.isActive,
|
|
lastUsed: schema.apiKeys.lastUsed,
|
|
createdAt: schema.apiKeys.createdAt
|
|
})
|
|
.from(schema.apiKeys)
|
|
.orderBy(desc(schema.apiKeys.createdAt))
|
|
|
|
res.json({
|
|
keys: keys.map(key => ({
|
|
...key,
|
|
permissions: key.permissions ? JSON.parse(key.permissions) : [],
|
|
key_preview: '***...' + (key.id.toString().slice(-4))
|
|
}))
|
|
})
|
|
|
|
} else if (req.method === "POST") {
|
|
const { name, permissions = [], rate_limit = 1000 } = req.body
|
|
|
|
if (!name) {
|
|
return res.status(400).json({ error: "Name required" })
|
|
}
|
|
|
|
const apiKey = generateApiKey()
|
|
const keyHash = hashApiKey(apiKey)
|
|
|
|
const [result] = await db
|
|
.insert(schema.apiKeys)
|
|
.values({
|
|
keyHash: keyHash,
|
|
name: name,
|
|
ownerEmail: 'admin@hliadka.sk', // Default admin email
|
|
permissions: JSON.stringify(permissions),
|
|
rateLimit: rate_limit,
|
|
isActive: true
|
|
})
|
|
.returning({ id: schema.apiKeys.id })
|
|
|
|
res.json({
|
|
success: true,
|
|
id: result.id,
|
|
api_key: apiKey, // Only returned once during creation
|
|
name,
|
|
permissions,
|
|
rate_limit
|
|
})
|
|
|
|
} else if (req.method === "DELETE") {
|
|
const { id } = req.query
|
|
|
|
await db
|
|
.update(schema.apiKeys)
|
|
.set({ isActive: false })
|
|
.where(eq(schema.apiKeys.id, parseInt(id as string)))
|
|
|
|
res.json({ success: true })
|
|
|
|
} else {
|
|
res.status(405).json({ error: "Method not allowed" })
|
|
}
|
|
|
|
} catch (error) {
|
|
console.error('API keys error:', error)
|
|
res.status(500).json({ error: "Operation failed" })
|
|
}
|
|
} |