`app/api/social/accounts/route.ts`

48 lines
import { NextRequest, NextResponse } from 'next/server';
import { query } from '@/lib/db';
import { requireRole } from '@/lib/require-role';

/**
 * GET /api/social/accounts
 * Returns all connected social accounts.
 */
export async function GET(request: NextRequest) {
  const auth = requireRole(request, 'admin', 'staff');
  if (auth instanceof NextResponse) return auth;

  const result = await query(
    `SELECT id, platform, account_name, display_name, avatar_url,
            profile_url, follower_count, following_count, post_count,
            status, last_synced_at, created_at
     FROM social_accounts
     ORDER BY platform`
  );

  return NextResponse.json({ accounts: result.rows });
}

/**
 * PATCH /api/social/accounts
 * Update account status (connect/disconnect).
 */
export async function PATCH(request: NextRequest) {
  const auth = requireRole(request, 'admin');
  if (auth instanceof NextResponse) return auth;

  const { id, status } = await request.json();
  if (!id || !status) {
    return NextResponse.json({ error: 'id and status required' }, { status: 400 });
  }

  const result = await query(
    `UPDATE social_accounts SET status = $1, updated_at = NOW() WHERE id = $2 RETURNING *`,
    [status, id]
  );

  if (result.rows.length === 0) {
    return NextResponse.json({ error: 'Account not found' }, { status: 404 });
  }

  return NextResponse.json({ account: result.rows[0] });
}