fixed a bit

This commit is contained in:
bobbert committed 2025-03-11 21:22:34 +00:00
1 parent e9d831c0a2
commit 9326f2845e
8 files changed
+990 -584

No files matched your search

+45 -29
View File
@@ -1,35 +1,51 @@
// app/api/teams/[teamId]/members/route.js
import { query } from '../../../../../lib/db';
import { getServerSession } from 'next-auth/next';
import { authOptions } from '../../../api/auth/[...nextauth]/route';
import { query } from "../../../../lib/db";
import { getServerSession } from "next-auth/next";
import { authOptions } from "../../auth/[...nextauth]/route";
export async function GET(request, { params }) {
const session = await getServerSession(authOptions);
export async function GET(request, context) {
const session = await getServerSession(authOptions);
if (!session) {
return Response.json({ error: 'Unauthorised' }, { status: 401 });
if (!session) {
return Response.json({ error: "Unauthorised" }, { status: 401 });
}
try {
const { teamId } = context.params;
// Convert teamId to number for proper comparison
const requestedTeamId = parseInt(teamId, 10);
const userTeamId = parseInt(session.user.teamId, 10);
// Log for debugging
console.log("Requested team:", requestedTeamId);
console.log("User team:", userTeamId);
console.log("User role:", session.user.role);
// Ensure the user is requesting their own team or is an admin
if (userTeamId !== requestedTeamId && session.user.role !== "admin") {
return Response.json(
{ error: "Not authorized to view this team" },
{ status: 403 }
);
}
try {
const { teamId } = params;
const teamMembers = await query("SELECT * FROM users WHERE team_id = ?", [
requestedTeamId,
]);
// Convert teamId to number for proper comparison
const requestedTeamId = parseInt(teamId, 10);
const userTeamId = parseInt(session.user.teamId, 10);
// Ensure the user is requesting their own team or is an admin
if (userTeamId !== requestedTeamId && session.user.role !== 'admin') {
return Response.json({ error: 'Not authorized to view this team' }, { status: 403 });
}
const members = await query(
'SELECT id, username FROM users WHERE team_id = ?',
[requestedTeamId]
);
return Response.json(members);
} catch (error) {
console.error('Team members fetch error:', error);
return Response.json({ error: 'Failed to fetch team members' }, { status: 500 });
if (!teamMembers) {
return Response.json(
{ error: "Team members not found" },
{ status: 404 }
);
}
}
return Response.json(teamMembers);
} catch (error) {
console.error("Team members fetch error:", error);
return Response.json(
{ error: "Failed to fetch team members" },
{ status: 500 }
);
}
}