realtimex-crm 0.5.1 → 0.5.3

package/dist/edge-functions/users.ts

@@ -1,240 +0,0 @@
-// RealTimeX CRM - Users Edge Function
-// This function handles creating and updating CRM users (sales team members)
-//
-// To deploy:
-// 1. Go to Supabase Dashboard → Edge Functions
-// 2. Click "Deploy a new function"
-// 3. Name it: users
-// 4. Copy and paste this entire file
-// 5. Click "Deploy"
-
-import { createClient } from "jsr:@supabase/supabase-js@2";
-
-// CORS headers for API access
-const corsHeaders = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Headers":
-    "authorization, x-client-info, apikey, content-type",
-  "Access-Control-Allow-Methods": "POST, PATCH, DELETE",
-};
-
-function createErrorResponse(status: number, message: string) {
-  return new Response(JSON.stringify({ status, message }), {
-    headers: { "Content-Type": "application/json", ...corsHeaders },
-    status,
-  });
-}
-
-// Initialize Supabase Admin client (uses service_role key automatically)
-const supabaseAdmin = createClient(
-  Deno.env.get("SUPABASE_URL") ?? "",
-  Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "",
-  {
-    auth: {
-      autoRefreshToken: false,
-      persistSession: false,
-    },
-  }
-);
-
-async function updateSaleDisabled(user_id: string, disabled: boolean) {
-  return await supabaseAdmin
-    .from("sales")
-    .update({ disabled: disabled ?? false })
-    .eq("user_id", user_id);
-}
-
-async function updateSaleAdministrator(
-  user_id: string,
-  administrator: boolean
-) {
-  const { data: sales, error: salesError } = await supabaseAdmin
-    .from("sales")
-    .update({ administrator })
-    .eq("user_id", user_id)
-    .select("*");
-
-  if (!sales?.length || salesError) {
-    console.error("Error updating user:", salesError);
-    throw salesError ?? new Error("Failed to update sale");
-  }
-  return sales.at(0);
-}
-
-async function updateSaleAvatar(user_id: string, avatar: string) {
-  const { data: sales, error: salesError } = await supabaseAdmin
-    .from("sales")
-    .update({ avatar })
-    .eq("user_id", user_id)
-    .select("*");
-
-  if (!sales?.length || salesError) {
-    console.error("Error updating user:", salesError);
-    throw salesError ?? new Error("Failed to update sale");
-  }
-  return sales.at(0);
-}
-
-async function inviteUser(req: Request, currentUserSale: any) {
-  const { email, password, first_name, last_name, disabled, administrator } =
-    await req.json();
-
-  if (!currentUserSale.administrator) {
-    return createErrorResponse(401, "Not Authorized");
-  }
-
-  const { data, error: userError } = await supabaseAdmin.auth.admin.createUser({
-    email,
-    password,
-    user_metadata: { first_name, last_name },
-  });
-
-  const { error: emailError } =
-    await supabaseAdmin.auth.admin.inviteUserByEmail(email);
-
-  if (!data?.user || userError) {
-    console.error(`Error inviting user: user_error=${userError}`);
-    return createErrorResponse(500, "Internal Server Error");
-  }
-
-  if (!data?.user || userError || emailError) {
-    console.error(`Error inviting user, email_error=${emailError}`);
-    return createErrorResponse(500, "Failed to send invitation mail");
-  }
-
-  try {
-    await updateSaleDisabled(data.user.id, disabled);
-    const sale = await updateSaleAdministrator(data.user.id, administrator);
-
-    return new Response(
-      JSON.stringify({
-        data: sale,
-      }),
-      {
-        headers: { "Content-Type": "application/json", ...corsHeaders },
-      }
-    );
-  } catch (e) {
-    console.error("Error patching sale:", e);
-    return createErrorResponse(500, "Internal Server Error");
-  }
-}
-
-async function patchUser(req: Request, currentUserSale: any) {
-  const {
-    sales_id,
-    email,
-    first_name,
-    last_name,
-    avatar,
-    administrator,
-    disabled,
-  } = await req.json();
-  const { data: sale } = await supabaseAdmin
-    .from("sales")
-    .select("*")
-    .eq("id", sales_id)
-    .single();
-
-  if (!sale) {
-    return createErrorResponse(404, "Not Found");
-  }
-
-  // Users can only update their own profile unless they are an administrator
-  if (!currentUserSale.administrator && currentUserSale.id !== sale.id) {
-    return createErrorResponse(401, "Not Authorized");
-  }
-
-  const { data, error: userError } =
-    await supabaseAdmin.auth.admin.updateUserById(sale.user_id, {
-      email,
-      ban_duration: disabled ? "87600h" : "none",
-      user_metadata: { first_name, last_name },
-    });
-
-  if (!data?.user || userError) {
-    console.error("Error patching user:", userError);
-    return createErrorResponse(500, "Internal Server Error");
-  }
-
-  if (avatar) {
-    await updateSaleAvatar(data.user.id, avatar);
-  }
-
-  // Only administrators can update the administrator and disabled status
-  if (!currentUserSale.administrator) {
-    const { data: new_sale } = await supabaseAdmin
-      .from("sales")
-      .select("*")
-      .eq("id", sales_id)
-      .single();
-    return new Response(
-      JSON.stringify({
-        data: new_sale,
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  }
-
-  try {
-    await updateSaleDisabled(data.user.id, disabled);
-    const sale = await updateSaleAdministrator(data.user.id, administrator);
-    return new Response(
-      JSON.stringify({
-        data: sale,
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (e) {
-    console.error("Error patching sale:", e);
-    return createErrorResponse(500, "Internal Server Error");
-  }
-}
-
-Deno.serve(async (req: Request) => {
-  if (req.method === "OPTIONS") {
-    return new Response(null, {
-      status: 204,
-      headers: corsHeaders,
-    });
-  }
-
-  const authHeader = req.headers.get("Authorization")!;
-  const localClient = createClient(
-    Deno.env.get("SUPABASE_URL") ?? "",
-    Deno.env.get("SUPABASE_ANON_KEY") ?? "",
-    { global: { headers: { Authorization: authHeader } } }
-  );
-  const { data } = await localClient.auth.getUser();
-  if (!data?.user) {
-    return createErrorResponse(401, "Unauthorized");
-  }
-  const currentUserSale = await supabaseAdmin
-    .from("sales")
-    .select("*")
-    .eq("user_id", data.user.id)
-    .single();
-
-  if (!currentUserSale?.data) {
-    return createErrorResponse(401, "Unauthorized");
-  }
-  if (req.method === "POST") {
-    return inviteUser(req, currentUserSale.data);
-  }
-
-  if (req.method === "PATCH") {
-    return patchUser(req, currentUserSale.data);
-  }
-
-  return createErrorResponse(405, "Method Not Allowed");
-});