34 lines
1.1 KiB
TypeScript
34 lines
1.1 KiB
TypeScript
|
import { NextResponse } from 'next/server';
|
||
|
|
|
||
|
|
import { withAuth } from '@/lib/api/helpers';
|
||
|
|
import { parseBody } from '@/lib/api/route-helpers';
|
||
|
|
import { errorResponse } from '@/lib/errors';
|
||
|
|
import { sendBerthPdf } from '@/lib/services/document-sends.service';
|
||
|
|
import { sendBerthPdfSchema } from '@/lib/validators/document-sends';
|
||
|
|
|
||
|
|
/**
|
||
|
|
* POST /api/v1/document-sends/berth-pdf
|
||
|
|
*
|
||
|
|
* Sends the active per-berth PDF version to a client recipient. The body
|
||
|
|
* markdown goes through the merge-field expander + sanitizer
|
||
|
|
* (`renderEmailBody`) before reaching nodemailer (§14.7 critical mitigation:
|
||
|
|
* body XSS).
|
||
|
|
*/
|
||
|
|
export const POST = withAuth(async (req, ctx) => {
|
||
|
|
try {
|
||
|
|
const input = await parseBody(req, sendBerthPdfSchema);
|
||
|
|
const result = await sendBerthPdf({
|
||
|
|
portId: ctx.portId,
|
||
|
|
berthId: input.berthId,
|
||
|
|
recipient: input.recipient,
|
||
|
|
customBodyMarkdown: input.customBodyMarkdown,
|
||
|
|
sentBy: ctx.userId,
|
||
|
|
ipAddress: ctx.ipAddress,
|
||
|
|
userAgent: ctx.userAgent,
|
||
|
|
});
|
||
|
|
return NextResponse.json({ data: result });
|
||
|
|
} catch (error) {
|
||
|
|
return errorResponse(error);
|
||
|
|
}
|
||
|
|
});
|