API Routes

// app/api/users/route.ts

import { NextRequest, NextResponse } from "next/server";
import { createClient } from "@supabase/supabase-js";

const supabase = createClient(
  process.env.SUPABASE_URL!,
  process.env.SUPABASE_SERVICE_KEY! // service key for server-side
);

// GET /api/users
// GET /api/users?role=admin  (with query params)
export async function GET(request: NextRequest) {
  const searchParams = request.nextUrl.searchParams;
  const role = searchParams.get("role"); // get query param

  let query = supabase.from("users").select("*");
  if (role) query = query.eq("role", role);

  const { data, error } = await query;

  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 });
  }

  return NextResponse.json(data); // { status: 200 } by default
}

// POST /api/users — create new user
export async function POST(request: NextRequest) {
  const body = await request.json(); // parse request body

  // Validation
  if (!body.name || !body.email) {
    return NextResponse.json(
      { error: "name and email are required" },
      { status: 400 }
    );
  }

  const { data, error } = await supabase
    .from("users")
    .insert({ name: body.name, email: body.email })
    .select()
    .single();

  if (error) {
    if (error.code === "23505") { // unique constraint violation
      return NextResponse.json({ error: "Email already exists" }, { status: 409 });
    }
    return NextResponse.json({ error: error.message }, { status: 500 });
  }

  return NextResponse.json(data, { status: 201 });
}

// ------------------------------------------------
// Dynamic route: app/api/users/[id]/route.ts
// ------------------------------------------------
export async function GET(
  request: NextRequest,
  { params }: { params: { id: string } }
) {
  const { data, error } = await supabase
    .from("users")
    .select("*")
    .eq("id", params.id)
    .single();

  if (!data) return NextResponse.json({ error: "Not found" }, { status: 404 });
  return NextResponse.json(data);
}

export async function PUT(
  request: NextRequest,
  { params }: { params: { id: string } }
) {
  const body = await request.json();
  const { data, error } = await supabase
    .from("users")
    .update(body)
    .eq("id", params.id)
    .select()
    .single();
  return NextResponse.json(data);
}

export async function DELETE(
  request: NextRequest,
  { params }: { params: { id: string } }
) {
  await supabase.from("users").delete().eq("id", params.id);
  return NextResponse.json({ success: true });
}