monacousa-portal/server/api/admin/nocodb-config.get.ts

63 lines
2.0 KiB
TypeScript
Raw Normal View History

import type { NocoDBSettings } from '~/utils/types';
export default defineEventHandler(async (event) => {
console.log('[api/admin/nocodb-config.get] =========================');
console.log('[api/admin/nocodb-config.get] GET /api/admin/nocodb-config');
console.log('[api/admin/nocodb-config.get] Request from:', getClientIP(event));
try {
// Check admin authorization
const sessionManager = createSessionManager();
const cookieHeader = getHeader(event, 'cookie');
const session = sessionManager.getSession(cookieHeader);
if (!session?.user) {
throw createError({
statusCode: 401,
statusMessage: 'Authentication required'
});
}
// Check if user is admin
if (session.user.tier !== 'admin') {
throw createError({
statusCode: 403,
statusMessage: 'Admin access required'
});
}
console.log('[api/admin/nocodb-config.get] Admin access confirmed for:', session.user.email);
// Get current runtime configuration
const runtimeConfig = useRuntimeConfig();
const nocodbConfig = runtimeConfig.nocodb;
// For security, we don't return the actual API key, just indicate if it's set
const settings: NocoDBSettings = {
url: nocodbConfig.url || 'https://database.monacousa.org',
apiKey: nocodbConfig.token ? '••••••••••••••••' : '', // Masked for security
baseId: nocodbConfig.baseId || '',
tableId: 'members-table-id' // This would come from database in real implementation
};
console.log('[api/admin/nocodb-config.get] ✅ Settings retrieved successfully');
return {
success: true,
data: settings
};
} catch (error: any) {
console.error('[api/admin/nocodb-config.get] ❌ Error:', error);
if (error.statusCode) {
throw error; // Re-throw HTTP errors
}
throw createError({
statusCode: 500,
statusMessage: 'Failed to retrieve NocoDB configuration'
});
}
});