66 lines
2.6 KiB
TypeScript
66 lines
2.6 KiB
TypeScript
// API route to send a test email – protected by Supabase admin check
|
||
import { NextResponse } from 'next/server';
|
||
import { sendMail } from '@/utils/mail';
|
||
import { createServerClient } from '@supabase/ssr';
|
||
import { cookies } from 'next/headers';
|
||
export async function POST(request: Request) {
|
||
const cookieStore = await cookies();
|
||
|
||
const supabaseUrl = process.env.SUPABASE_URL || process.env.NEXT_PUBLIC_SUPABASE_URL || '';
|
||
const supabase = createServerClient(
|
||
supabaseUrl,
|
||
process.env.SUPABASE_SERVICE_ROLE_KEY ?? '',
|
||
{
|
||
cookies: {
|
||
getAll() {
|
||
return cookieStore.getAll()
|
||
},
|
||
setAll(cookiesToSet) {
|
||
try {
|
||
cookiesToSet.forEach(({ name, value, options }) =>
|
||
cookieStore.set(name, value, options)
|
||
)
|
||
} catch {
|
||
// Kann in einer API-Route ignoriert werden, wenn nur gelesen wird
|
||
}
|
||
},
|
||
},
|
||
cookieOptions: {
|
||
name: "webshop-auth-token",
|
||
},
|
||
}
|
||
);
|
||
|
||
// Verify admin rights – expecting a user with role "admin" in the "users" table
|
||
const { data: { user: authUser }, error: authError } = await supabase.auth.getUser();
|
||
if (authError || !authUser) {
|
||
return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
|
||
}
|
||
const { data: user } = await supabase.from('users').select('role').eq('id', authUser.id).single();
|
||
if (!user || user.role !== 'admin') {
|
||
return NextResponse.json({ error: 'Insufficient permissions' }, { status: 403 });
|
||
}
|
||
|
||
const { to, subject, text, html } = await request.json();
|
||
try {
|
||
const { data: brandData } = await supabase.from('settings').select('primary_color').eq('id', 'branding').maybeSingle();
|
||
const primaryColor = brandData?.primary_color || '#2563eb';
|
||
|
||
const testHtml = html || `
|
||
<div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
|
||
<h2 style="color: ${primaryColor}; margin-bottom: 16px;">Test-E-Mail</h2>
|
||
<p style="color: #475569; font-size: 16px; line-height: 1.5;">${text || 'Dies ist eine automatische Test-E-Mail.'}</p>
|
||
<div style="margin-top: 24px; padding: 12px; background-color: #f8fafc; border-left: 4px solid ${primaryColor}; font-size: 14px; color: #334155;">
|
||
SMTP-Konfiguration & Branding-Farbe erfolgreich verifiziert.
|
||
</div>
|
||
</div>
|
||
`;
|
||
|
||
const info = await sendMail({ to, subject, text, html: testHtml });
|
||
return NextResponse.json({ message: 'Email sent', info });
|
||
} catch (err) {
|
||
console.error('Mail error', err);
|
||
return NextResponse.json({ error: 'Failed to send email' }, { status: 500 });
|
||
}
|
||
}
|