38 lines
1.2 KiB
TypeScript
38 lines
1.2 KiB
TypeScript
|
import { NextResponse } from "next/server"
|
||
|
|
import { eq } from "drizzle-orm"
|
||
|
|
import { db } from "@/lib/db"
|
||
|
|
import { profiles } from "@/lib/db/schema"
|
||
|
|
import { getSessionUser } from "@/lib/session"
|
||
|
|
|
||
|
|
export async function GET() {
|
||
|
|
const user = await getSessionUser()
|
||
|
|
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
||
|
|
|
||
|
|
const profile = await db.query.profiles.findFirst({
|
||
|
|
where: eq(profiles.id, user.id),
|
||
|
|
})
|
||
|
|
|
||
|
|
return NextResponse.json({ profile: profile ?? null })
|
||
|
|
}
|
||
|
|
|
||
|
|
export async function PATCH(request: Request) {
|
||
|
|
const user = await getSessionUser()
|
||
|
|
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
||
|
|
|
||
|
|
const body = (await request.json()) as Record<string, unknown>
|
||
|
|
|
||
|
|
// Whitelist editable profile fields.
|
||
|
|
const update: Partial<typeof profiles.$inferInsert> = {}
|
||
|
|
if (typeof body.full_name === "string") update.full_name = body.full_name
|
||
|
|
if ("phone" in body) update.phone = (body.phone as string) || null
|
||
|
|
if ("company_name" in body) update.company_name = (body.company_name as string) || null
|
||
|
|
|
||
|
|
const [profile] = await db
|
||
|
|
.update(profiles)
|
||
|
|
.set(update)
|
||
|
|
.where(eq(profiles.id, user.id))
|
||
|
|
.returning()
|
||
|
|
|
||
|
|
return NextResponse.json({ profile })
|
||
|
|
}
|