feat: add Telegram album purchase bot
This commit is contained in:
@@ -10,7 +10,6 @@ import AdminLayout from '@/components/AdminLayout';
|
||||
|
||||
export default function AdminDashboard() {
|
||||
const { albums } = useAlbums();
|
||||
const [purchases, setPurchases] = useState<Purchase[]>([]);
|
||||
const [stats, setStats] = useState({
|
||||
totalAlbums: 0,
|
||||
totalPurchases: 0,
|
||||
@@ -19,33 +18,27 @@ export default function AdminDashboard() {
|
||||
});
|
||||
|
||||
useEffect(() => {
|
||||
// Load purchases from localStorage
|
||||
const savedPurchases = localStorage.getItem('purchases');
|
||||
if (savedPurchases) {
|
||||
const parsedPurchases = JSON.parse(savedPurchases);
|
||||
setPurchases(parsedPurchases);
|
||||
|
||||
// Calculate stats
|
||||
const totalRevenue = parsedPurchases.reduce((total: number, purchase: Purchase) => {
|
||||
const album = albums.find((a) => a.id === purchase.albumId);
|
||||
return total + (album?.price || 0);
|
||||
}, 0);
|
||||
|
||||
const loadStats = async () => {
|
||||
const response = await fetch('/api/purchases');
|
||||
if (!response.ok) return;
|
||||
const allPurchases = await response.json() as Purchase[];
|
||||
const totalRevenue = allPurchases
|
||||
.filter((purchase) => purchase.approvalStatus === 'approved')
|
||||
.reduce((total, purchase) => {
|
||||
const ids = purchase.albumIds || [purchase.albumId];
|
||||
return total + albums
|
||||
.filter((album) => ids.includes(album.id))
|
||||
.reduce((subtotal, album) => subtotal + album.price, 0);
|
||||
}, 0);
|
||||
setStats({
|
||||
totalAlbums: albums.length,
|
||||
totalPurchases: parsedPurchases.length,
|
||||
totalPurchases: allPurchases.length,
|
||||
totalRevenue,
|
||||
recentPurchases: parsedPurchases.slice(-5).reverse(),
|
||||
recentPurchases: allPurchases.slice(0, 5),
|
||||
});
|
||||
} else {
|
||||
setStats({
|
||||
totalAlbums: albums.length,
|
||||
totalPurchases: 0,
|
||||
totalRevenue: 0,
|
||||
recentPurchases: [],
|
||||
});
|
||||
}
|
||||
}, []);
|
||||
};
|
||||
void loadStats();
|
||||
}, [albums]);
|
||||
|
||||
const statCards = [
|
||||
{
|
||||
@@ -124,21 +117,26 @@ export default function AdminDashboard() {
|
||||
{stats.recentPurchases.length > 0 ? (
|
||||
<div className="space-y-3">
|
||||
{stats.recentPurchases.map((purchase) => {
|
||||
const album = albums.find((a) => a.id === purchase.albumId);
|
||||
const ids = purchase.albumIds || [purchase.albumId];
|
||||
const purchaseAlbums = albums.filter((album) => ids.includes(album.id));
|
||||
return (
|
||||
<div
|
||||
key={purchase.transactionId}
|
||||
className="flex items-center justify-between p-4 bg-paper-light border-2 border-paper-brown/30"
|
||||
>
|
||||
<div>
|
||||
<p className="text-paper-dark font-medium">{album?.title || 'Unknown Album'}</p>
|
||||
<p className="text-paper-dark font-medium">
|
||||
{purchaseAlbums.map((album) => album.title).join(', ') || 'Unknown Album'}
|
||||
</p>
|
||||
<p className="text-sm text-paper-gray">
|
||||
{new Date(purchase.purchaseDate).toLocaleDateString()} at{' '}
|
||||
{new Date(purchase.purchaseDate).toLocaleTimeString()}
|
||||
</p>
|
||||
</div>
|
||||
<div className="text-right">
|
||||
<p className="text-paper-brown font-bold">{formatPrice(album?.price || 0)}</p>
|
||||
<p className="text-paper-brown font-bold">
|
||||
{formatPrice(purchaseAlbums.reduce((total, album) => total + album.price, 0))}
|
||||
</p>
|
||||
<p className="text-xs text-paper-gray font-mono">{purchase.transactionId.slice(0, 12)}...</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
+249
-15
@@ -2,7 +2,7 @@
|
||||
|
||||
import { useEffect, useState } from 'react';
|
||||
import { motion } from 'framer-motion';
|
||||
import { FaDownload, FaSearch, FaCheck, FaTimes, FaClock } from 'react-icons/fa';
|
||||
import { FaDownload, FaSearch, FaCheck, FaTimes, FaClock, FaTelegramPlane, FaSave } from 'react-icons/fa';
|
||||
import { useAlbums } from '@/lib/AlbumsContext';
|
||||
import { Purchase } from '@/lib/types';
|
||||
import { formatPrice } from '@/lib/utils';
|
||||
@@ -14,9 +14,20 @@ export default function AdminPurchasesPage() {
|
||||
const [searchTerm, setSearchTerm] = useState('');
|
||||
const [filterStatus, setFilterStatus] = useState<'all' | 'pending' | 'approved' | 'rejected'>('all');
|
||||
const [loading, setLoading] = useState(false);
|
||||
const [telegramIds, setTelegramIds] = useState('');
|
||||
const [telegramBaseUrl, setTelegramBaseUrl] = useState('https://api.telegram.org');
|
||||
const [telegramBotToken, setTelegramBotToken] = useState('');
|
||||
const [telegramGreeting, setTelegramGreeting] = useState('Welcome! Choose albums from the catalog below.');
|
||||
const [telegramCardNumber, setTelegramCardNumber] = useState('');
|
||||
const [telegramCardHolder, setTelegramCardHolder] = useState('');
|
||||
const [telegramConfigured, setTelegramConfigured] = useState(false);
|
||||
const [telegramWebhookSecretConfigured, setTelegramWebhookSecretConfigured] = useState(false);
|
||||
const [telegramSaving, setTelegramSaving] = useState(false);
|
||||
const [telegramRegistering, setTelegramRegistering] = useState(false);
|
||||
const [telegramMessage, setTelegramMessage] = useState('');
|
||||
|
||||
const fetchPurchases = async () => {
|
||||
setLoading(true);
|
||||
const fetchPurchases = async (showLoading = true) => {
|
||||
if (showLoading) setLoading(true);
|
||||
try {
|
||||
const response = await fetch('/api/purchases');
|
||||
if (response.ok) {
|
||||
@@ -26,14 +37,93 @@ export default function AdminPurchasesPage() {
|
||||
} catch (error) {
|
||||
console.error('Error fetching purchases:', error);
|
||||
} finally {
|
||||
setLoading(false);
|
||||
if (showLoading) setLoading(false);
|
||||
}
|
||||
};
|
||||
|
||||
useEffect(() => {
|
||||
fetchPurchases();
|
||||
const refreshTimer = window.setInterval(() => fetchPurchases(false), 10_000);
|
||||
fetch('/api/telegram/settings')
|
||||
.then(async (response) => {
|
||||
if (!response.ok) throw new Error('Failed to load Telegram settings');
|
||||
return response.json();
|
||||
})
|
||||
.then((data) => {
|
||||
setTelegramIds(data.approvers.map((item: { userId: string }) => item.userId).join(', '));
|
||||
setTelegramBaseUrl(data.baseUrl || 'https://api.telegram.org');
|
||||
setTelegramGreeting(data.greetingText || 'Welcome! Choose albums from the catalog below.');
|
||||
setTelegramCardNumber(data.cardNumber || '');
|
||||
setTelegramCardHolder(data.cardHolderName || '');
|
||||
setTelegramConfigured(Boolean(data.botConfigured));
|
||||
setTelegramWebhookSecretConfigured(Boolean(data.webhookSecretConfigured));
|
||||
})
|
||||
.catch((error) => {
|
||||
console.error('Error fetching Telegram settings:', error);
|
||||
setTelegramMessage('Could not load Telegram settings.');
|
||||
});
|
||||
return () => window.clearInterval(refreshTimer);
|
||||
}, []);
|
||||
|
||||
const saveTelegramSettings = async () => {
|
||||
const ids = telegramIds
|
||||
.split(/[\s,]+/)
|
||||
.map((id) => id.trim())
|
||||
.filter(Boolean);
|
||||
|
||||
if (ids.some((id) => !/^\d+$/.test(id))) {
|
||||
setTelegramMessage('Telegram user IDs must contain digits only.');
|
||||
return;
|
||||
}
|
||||
|
||||
setTelegramSaving(true);
|
||||
setTelegramMessage('');
|
||||
try {
|
||||
const response = await fetch('/api/telegram/settings', {
|
||||
method: 'PUT',
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
body: JSON.stringify({
|
||||
approvers: ids.map((userId) => ({ userId })),
|
||||
baseUrl: telegramBaseUrl,
|
||||
greetingText: telegramGreeting,
|
||||
cardNumber: telegramCardNumber,
|
||||
cardHolderName: telegramCardHolder,
|
||||
...(telegramBotToken.trim() ? { botToken: telegramBotToken.trim() } : {}),
|
||||
}),
|
||||
});
|
||||
const data = await response.json();
|
||||
if (!response.ok) throw new Error(data.error || 'Failed to save Telegram approvers');
|
||||
setTelegramIds(data.approvers.map((item: { userId: string }) => item.userId).join(', '));
|
||||
setTelegramBaseUrl(data.baseUrl);
|
||||
setTelegramGreeting(data.greetingText);
|
||||
setTelegramCardNumber(data.cardNumber);
|
||||
setTelegramCardHolder(data.cardHolderName);
|
||||
setTelegramBotToken('');
|
||||
setTelegramConfigured(Boolean(data.botConfigured));
|
||||
setTelegramWebhookSecretConfigured(Boolean(data.webhookSecretConfigured));
|
||||
setTelegramMessage('Telegram settings saved.');
|
||||
} catch (error) {
|
||||
setTelegramMessage(error instanceof Error ? error.message : 'Failed to save Telegram approvers.');
|
||||
} finally {
|
||||
setTelegramSaving(false);
|
||||
}
|
||||
};
|
||||
|
||||
const registerTelegramWebhook = async () => {
|
||||
setTelegramRegistering(true);
|
||||
setTelegramMessage('');
|
||||
try {
|
||||
const response = await fetch('/api/telegram/settings', { method: 'POST' });
|
||||
const data = await response.json();
|
||||
if (!response.ok) throw new Error(data.error || 'Failed to register Telegram webhook');
|
||||
setTelegramMessage(data.message);
|
||||
} catch (error) {
|
||||
setTelegramMessage(error instanceof Error ? error.message : 'Failed to register Telegram webhook.');
|
||||
} finally {
|
||||
setTelegramRegistering(false);
|
||||
}
|
||||
};
|
||||
|
||||
const handleApprove = async (purchaseId: number) => {
|
||||
try {
|
||||
const response = await fetch(`/api/purchases/${purchaseId}/approve`, {
|
||||
@@ -63,9 +153,10 @@ export default function AdminPurchasesPage() {
|
||||
};
|
||||
|
||||
const filteredPurchases = purchases.filter((purchase) => {
|
||||
const album = albums.find((a) => a.id === purchase.albumId);
|
||||
const purchaseAlbumIds = purchase.albumIds || [purchase.albumId];
|
||||
const purchaseAlbums = albums.filter((album) => purchaseAlbumIds.includes(album.id));
|
||||
const matchesSearch =
|
||||
album?.title.toLowerCase().includes(searchTerm.toLowerCase()) ||
|
||||
purchaseAlbums.some((album) => album.title.toLowerCase().includes(searchTerm.toLowerCase())) ||
|
||||
purchase.transactionId.toLowerCase().includes(searchTerm.toLowerCase()) ||
|
||||
purchase.customerName?.toLowerCase().includes(searchTerm.toLowerCase()) ||
|
||||
purchase.email?.toLowerCase().includes(searchTerm.toLowerCase());
|
||||
@@ -79,21 +170,24 @@ export default function AdminPurchasesPage() {
|
||||
const approvedPurchases = purchases.filter(p => p.approvalStatus === 'approved');
|
||||
|
||||
const totalRevenue = approvedPurchases.reduce((total, purchase) => {
|
||||
const album = albums.find((a) => a.id === purchase.albumId);
|
||||
return total + (album?.price || 0);
|
||||
const purchaseAlbumIds = purchase.albumIds || [purchase.albumId];
|
||||
return total + albums
|
||||
.filter((album) => purchaseAlbumIds.includes(album.id))
|
||||
.reduce((subtotal, album) => subtotal + album.price, 0);
|
||||
}, 0);
|
||||
|
||||
const exportToCSV = () => {
|
||||
const headers = ['Date', 'Time', 'Transaction ID', 'Album', 'Price', 'Customer', 'Email', 'Phone', 'Status', 'Payment Method'];
|
||||
const rows = purchases.map((purchase) => {
|
||||
const album = albums.find((a) => a.id === purchase.albumId);
|
||||
const purchaseAlbumIds = purchase.albumIds || [purchase.albumId];
|
||||
const purchaseAlbums = albums.filter((album) => purchaseAlbumIds.includes(album.id));
|
||||
const date = new Date(purchase.purchaseDate);
|
||||
return [
|
||||
date.toLocaleDateString(),
|
||||
date.toLocaleTimeString(),
|
||||
purchase.transactionId,
|
||||
album?.title || 'Unknown',
|
||||
album?.price || 0,
|
||||
purchaseAlbums.map((album) => album.title).join(' + ') || 'Unknown',
|
||||
purchaseAlbums.reduce((total, album) => total + album.price, 0),
|
||||
purchase.customerName || '',
|
||||
purchase.email || '',
|
||||
purchase.phoneNumber || '',
|
||||
@@ -161,6 +255,133 @@ export default function AdminPurchasesPage() {
|
||||
</motion.button>
|
||||
</div>
|
||||
|
||||
<div className="paper-card p-5 mb-6">
|
||||
<div className="space-y-4">
|
||||
<div className="flex-1">
|
||||
<div className="flex items-center gap-2 mb-2">
|
||||
<FaTelegramPlane className="text-paper-brown" />
|
||||
<label htmlFor="telegram-approvers" className="font-semibold text-paper-dark">
|
||||
Telegram purchase approvers
|
||||
</label>
|
||||
<span className={`text-xs px-2 py-1 border ${
|
||||
telegramConfigured
|
||||
? 'bg-green-100 border-green-400 text-green-700'
|
||||
: 'bg-orange-100 border-orange-400 text-orange-700'
|
||||
}`}>
|
||||
{telegramConfigured ? 'Bot configured' : 'Bot token missing'}
|
||||
</span>
|
||||
</div>
|
||||
<div className="grid md:grid-cols-2 gap-4 mb-4">
|
||||
<div>
|
||||
<label htmlFor="telegram-base-url" className="block text-sm font-medium text-paper-dark mb-1">
|
||||
Telegram API base URL
|
||||
</label>
|
||||
<input
|
||||
id="telegram-base-url"
|
||||
type="url"
|
||||
value={telegramBaseUrl}
|
||||
onChange={(event) => setTelegramBaseUrl(event.target.value)}
|
||||
placeholder="https://api.telegram.org"
|
||||
className="w-full px-4 py-3 bg-paper-light border-2 border-paper-brown focus:border-paper-dark focus:outline-none text-paper-dark placeholder-paper-gray shadow-paper"
|
||||
/>
|
||||
</div>
|
||||
<div>
|
||||
<label htmlFor="telegram-bot-token" className="block text-sm font-medium text-paper-dark mb-1">
|
||||
Bot token
|
||||
</label>
|
||||
<input
|
||||
id="telegram-bot-token"
|
||||
type="password"
|
||||
value={telegramBotToken}
|
||||
onChange={(event) => setTelegramBotToken(event.target.value)}
|
||||
placeholder={telegramConfigured ? 'Saved — leave blank to keep it' : 'Paste the BotFather token'}
|
||||
autoComplete="new-password"
|
||||
className="w-full px-4 py-3 bg-paper-light border-2 border-paper-brown focus:border-paper-dark focus:outline-none text-paper-dark placeholder-paper-gray shadow-paper"
|
||||
/>
|
||||
</div>
|
||||
</div>
|
||||
<div className="mb-4">
|
||||
<label htmlFor="telegram-greeting" className="block text-sm font-medium text-paper-dark mb-1">
|
||||
Greeting message
|
||||
</label>
|
||||
<textarea
|
||||
id="telegram-greeting"
|
||||
value={telegramGreeting}
|
||||
onChange={(event) => setTelegramGreeting(event.target.value)}
|
||||
rows={3}
|
||||
className="w-full px-4 py-3 bg-paper-light border-2 border-paper-brown focus:border-paper-dark focus:outline-none text-paper-dark placeholder-paper-gray shadow-paper"
|
||||
/>
|
||||
</div>
|
||||
<div className="grid md:grid-cols-2 gap-4 mb-4">
|
||||
<div>
|
||||
<label htmlFor="telegram-card-number" className="block text-sm font-medium text-paper-dark mb-1">
|
||||
Payment card number
|
||||
</label>
|
||||
<input
|
||||
id="telegram-card-number"
|
||||
type="text"
|
||||
value={telegramCardNumber}
|
||||
onChange={(event) => setTelegramCardNumber(event.target.value)}
|
||||
placeholder="6037 9975 1234 5678"
|
||||
className="w-full px-4 py-3 bg-paper-light border-2 border-paper-brown focus:border-paper-dark focus:outline-none text-paper-dark placeholder-paper-gray shadow-paper"
|
||||
/>
|
||||
</div>
|
||||
<div>
|
||||
<label htmlFor="telegram-card-holder" className="block text-sm font-medium text-paper-dark mb-1">
|
||||
Cardholder name
|
||||
</label>
|
||||
<input
|
||||
id="telegram-card-holder"
|
||||
type="text"
|
||||
value={telegramCardHolder}
|
||||
onChange={(event) => setTelegramCardHolder(event.target.value)}
|
||||
placeholder="Account holder name"
|
||||
className="w-full px-4 py-3 bg-paper-light border-2 border-paper-brown focus:border-paper-dark focus:outline-none text-paper-dark placeholder-paper-gray shadow-paper"
|
||||
/>
|
||||
</div>
|
||||
</div>
|
||||
<label htmlFor="telegram-approvers" className="block text-sm font-medium text-paper-dark mb-1">
|
||||
Authorized Telegram user IDs
|
||||
</label>
|
||||
<input
|
||||
id="telegram-approvers"
|
||||
type="text"
|
||||
value={telegramIds}
|
||||
onChange={(event) => setTelegramIds(event.target.value)}
|
||||
placeholder="123456789, 987654321"
|
||||
className="w-full px-4 py-3 bg-paper-light border-2 border-paper-brown focus:border-paper-dark focus:outline-none text-paper-dark placeholder-paper-gray shadow-paper"
|
||||
/>
|
||||
<p className="text-xs text-paper-gray mt-2">
|
||||
Comma-separated Telegram user IDs. A user can send /id to the bot to find their ID.
|
||||
</p>
|
||||
{!telegramWebhookSecretConfigured && (
|
||||
<p className="text-xs text-orange-700 mt-2">
|
||||
TELEGRAM_WEBHOOK_SECRET must be set on the server before registering the webhook.
|
||||
</p>
|
||||
)}
|
||||
{telegramMessage && <p className="text-sm text-paper-dark mt-2">{telegramMessage}</p>}
|
||||
</div>
|
||||
<div className="flex flex-wrap gap-3">
|
||||
<button
|
||||
onClick={saveTelegramSettings}
|
||||
disabled={telegramSaving}
|
||||
className="px-5 py-3 bg-paper-brown hover:bg-paper-dark border-2 border-paper-dark text-paper-light font-semibold disabled:opacity-50 flex items-center justify-center gap-2"
|
||||
>
|
||||
<FaSave />
|
||||
{telegramSaving ? 'Saving...' : 'Save Telegram settings'}
|
||||
</button>
|
||||
<button
|
||||
onClick={registerTelegramWebhook}
|
||||
disabled={telegramRegistering || !telegramConfigured || !telegramWebhookSecretConfigured}
|
||||
className="px-5 py-3 bg-paper-light hover:bg-paper-sand border-2 border-paper-brown text-paper-dark font-semibold disabled:opacity-50 flex items-center justify-center gap-2"
|
||||
>
|
||||
<FaTelegramPlane />
|
||||
{telegramRegistering ? 'Registering...' : 'Register webhook'}
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Filters */}
|
||||
<div className="mb-6 space-y-4">
|
||||
<div className="flex gap-2">
|
||||
@@ -218,7 +439,8 @@ export default function AdminPurchasesPage() {
|
||||
</thead>
|
||||
<tbody>
|
||||
{filteredPurchases.map((purchase, index) => {
|
||||
const album = albums.find((a) => a.id === purchase.albumId);
|
||||
const purchaseAlbumIds = purchase.albumIds || [purchase.albumId];
|
||||
const purchaseAlbums = albums.filter((album) => purchaseAlbumIds.includes(album.id));
|
||||
const date = new Date(purchase.purchaseDate);
|
||||
|
||||
return (
|
||||
@@ -249,8 +471,13 @@ export default function AdminPurchasesPage() {
|
||||
<div className="text-xs text-paper-gray">{purchase.phoneNumber}</div>
|
||||
</td>
|
||||
<td className="p-4">
|
||||
<div className="text-paper-dark font-medium">{album?.title || 'Unknown'}</div>
|
||||
<div className="text-xs text-paper-gray">{album?.songs.length} tracks</div>
|
||||
<div className="text-paper-dark font-medium">
|
||||
{purchaseAlbums.map((album) => album.title).join(', ') || 'Unknown'}
|
||||
</div>
|
||||
<div className="text-xs text-paper-gray">
|
||||
{purchaseAlbums.length} album{purchaseAlbums.length === 1 ? '' : 's'} • {' '}
|
||||
{purchaseAlbums.reduce((total, album) => total + album.songs.length, 0)} tracks
|
||||
</div>
|
||||
</td>
|
||||
<td className="p-4 text-center">
|
||||
<span className="text-xs text-paper-brown bg-paper-brown/10 px-2 py-1 border border-paper-brown">
|
||||
@@ -259,9 +486,16 @@ export default function AdminPurchasesPage() {
|
||||
</td>
|
||||
<td className="p-4 text-center">
|
||||
{getStatusBadge(purchase.approvalStatus)}
|
||||
{purchase.reviewedByTelegramId && (
|
||||
<div className="text-xs text-paper-gray mt-1">
|
||||
Telegram: {purchase.reviewedByTelegramId}
|
||||
</div>
|
||||
)}
|
||||
</td>
|
||||
<td className="p-4 text-right">
|
||||
<span className="text-paper-brown font-bold">{formatPrice(album?.price || 0)}</span>
|
||||
<span className="text-paper-brown font-bold">
|
||||
{formatPrice(purchaseAlbums.reduce((total, album) => total + album.price, 0))}
|
||||
</span>
|
||||
</td>
|
||||
<td className="p-4">
|
||||
{purchase.approvalStatus === 'pending' && (
|
||||
|
||||
@@ -47,7 +47,7 @@ export default function AlbumDetailPage() {
|
||||
const apiPurchases = await response.json();
|
||||
// Only include approved purchases for determining access
|
||||
const approvedPurchases = apiPurchases.filter((p: Purchase) => p.approvalStatus === 'approved');
|
||||
setPurchasedAlbums(approvedPurchases.map((p: Purchase) => p.albumId));
|
||||
setPurchasedAlbums(approvedPurchases.flatMap((p: Purchase) => p.albumIds || [p.albumId]));
|
||||
}
|
||||
} catch (error) {
|
||||
console.error('Error fetching purchases:', error);
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
import { NextRequest, NextResponse } from 'next/server';
|
||||
import { getDatabase } from '@/lib/db';
|
||||
import { purchaseDb } from '@/lib/db';
|
||||
import { notifyCustomerOfDecision } from '@/lib/telegram';
|
||||
|
||||
export async function PATCH(
|
||||
request: NextRequest,
|
||||
@@ -16,25 +17,32 @@ export async function PATCH(
|
||||
);
|
||||
}
|
||||
|
||||
const db = getDatabase();
|
||||
|
||||
// Update purchase status to approved
|
||||
const result = db.prepare(`
|
||||
UPDATE purchases
|
||||
SET approvalStatus = 'approved'
|
||||
WHERE id = ?
|
||||
`).run(purchaseId);
|
||||
|
||||
if (result.changes === 0) {
|
||||
const existing = purchaseDb.getById(purchaseId);
|
||||
if (!existing) {
|
||||
return NextResponse.json(
|
||||
{ error: 'Purchase not found' },
|
||||
{ status: 404 }
|
||||
);
|
||||
}
|
||||
if (existing.approvalStatus !== 'pending') {
|
||||
return NextResponse.json(
|
||||
{ error: `Purchase is already ${existing.approvalStatus}` },
|
||||
{ status: 409 }
|
||||
);
|
||||
}
|
||||
|
||||
const purchase = purchaseDb.setStatus(purchaseId, 'approved');
|
||||
if (!purchase) {
|
||||
return NextResponse.json({ error: 'Purchase was reviewed concurrently' }, { status: 409 });
|
||||
}
|
||||
void notifyCustomerOfDecision(purchase).catch((error) => {
|
||||
console.error('Failed to notify Telegram customer:', error);
|
||||
});
|
||||
|
||||
return NextResponse.json({
|
||||
success: true,
|
||||
message: 'Purchase approved successfully'
|
||||
message: 'Purchase approved successfully',
|
||||
purchase,
|
||||
});
|
||||
} catch (error: any) {
|
||||
console.error('Error approving purchase:', error);
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
import { NextRequest, NextResponse } from 'next/server';
|
||||
import { getDatabase } from '@/lib/db';
|
||||
import { purchaseDb } from '@/lib/db';
|
||||
import { notifyCustomerOfDecision } from '@/lib/telegram';
|
||||
|
||||
export async function PATCH(
|
||||
request: NextRequest,
|
||||
@@ -16,25 +17,32 @@ export async function PATCH(
|
||||
);
|
||||
}
|
||||
|
||||
const db = getDatabase();
|
||||
|
||||
// Update purchase status to rejected
|
||||
const result = db.prepare(`
|
||||
UPDATE purchases
|
||||
SET approvalStatus = 'rejected'
|
||||
WHERE id = ?
|
||||
`).run(purchaseId);
|
||||
|
||||
if (result.changes === 0) {
|
||||
const existing = purchaseDb.getById(purchaseId);
|
||||
if (!existing) {
|
||||
return NextResponse.json(
|
||||
{ error: 'Purchase not found' },
|
||||
{ status: 404 }
|
||||
);
|
||||
}
|
||||
if (existing.approvalStatus !== 'pending') {
|
||||
return NextResponse.json(
|
||||
{ error: `Purchase is already ${existing.approvalStatus}` },
|
||||
{ status: 409 }
|
||||
);
|
||||
}
|
||||
|
||||
const purchase = purchaseDb.setStatus(purchaseId, 'rejected');
|
||||
if (!purchase) {
|
||||
return NextResponse.json({ error: 'Purchase was reviewed concurrently' }, { status: 409 });
|
||||
}
|
||||
void notifyCustomerOfDecision(purchase).catch((error) => {
|
||||
console.error('Failed to notify Telegram customer:', error);
|
||||
});
|
||||
|
||||
return NextResponse.json({
|
||||
success: true,
|
||||
message: 'Purchase rejected successfully'
|
||||
message: 'Purchase rejected successfully',
|
||||
purchase,
|
||||
});
|
||||
} catch (error: any) {
|
||||
console.error('Error rejecting purchase:', error);
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
import { NextRequest, NextResponse } from 'next/server';
|
||||
import { purchaseDb } from '@/lib/db';
|
||||
import { Purchase } from '@/lib/types';
|
||||
import { notifyPurchaseApprovers } from '@/lib/telegram';
|
||||
|
||||
// GET - Get all purchases
|
||||
export async function GET(request: NextRequest) {
|
||||
@@ -54,6 +55,10 @@ export async function POST(request: NextRequest) {
|
||||
};
|
||||
|
||||
const created = purchaseDb.create(purchase);
|
||||
// Telegram delivery must not make a successfully recorded purchase fail.
|
||||
void notifyPurchaseApprovers(created).catch((error) => {
|
||||
console.error('Failed to notify Telegram approvers:', error);
|
||||
});
|
||||
return NextResponse.json(created, { status: 201 });
|
||||
} catch (error) {
|
||||
console.error('Error creating purchase:', error);
|
||||
|
||||
@@ -0,0 +1,99 @@
|
||||
import { NextRequest, NextResponse } from "next/server";
|
||||
import { telegramApproverDb, telegramSettingsDb } from "@/lib/db";
|
||||
import { isTelegramConfigured, registerTelegramWebhook } from "@/lib/telegram";
|
||||
import { TelegramApprover } from "@/lib/types";
|
||||
|
||||
export const dynamic = "force-dynamic";
|
||||
|
||||
export async function GET() {
|
||||
const settings = telegramSettingsDb.get();
|
||||
return NextResponse.json({
|
||||
approvers: telegramApproverDb.getAll(),
|
||||
baseUrl: settings.baseUrl,
|
||||
greetingText: settings.greetingText,
|
||||
cardNumber: settings.cardNumber,
|
||||
cardHolderName: settings.cardHolderName,
|
||||
botConfigured: isTelegramConfigured(),
|
||||
webhookSecretConfigured: Boolean(process.env.TELEGRAM_WEBHOOK_SECRET),
|
||||
});
|
||||
}
|
||||
|
||||
export async function PUT(request: NextRequest) {
|
||||
try {
|
||||
const body = (await request.json()) as {
|
||||
approvers?: TelegramApprover[];
|
||||
baseUrl?: string;
|
||||
botToken?: string;
|
||||
greetingText?: string;
|
||||
cardNumber?: string;
|
||||
cardHolderName?: string;
|
||||
};
|
||||
if (!Array.isArray(body.approvers)) {
|
||||
return NextResponse.json({ error: "approvers must be an array" }, { status: 400 });
|
||||
}
|
||||
|
||||
const seen = new Set<string>();
|
||||
const approvers: TelegramApprover[] = [];
|
||||
for (const item of body.approvers) {
|
||||
const userId = String(item.userId || "").trim();
|
||||
if (!/^\d+$/.test(userId)) {
|
||||
return NextResponse.json({ error: `Invalid Telegram user ID: ${userId}` }, { status: 400 });
|
||||
}
|
||||
if (!seen.has(userId)) {
|
||||
seen.add(userId);
|
||||
approvers.push({ userId, label: String(item.label || "").trim().slice(0, 100) });
|
||||
}
|
||||
}
|
||||
|
||||
const baseUrl = String(body.baseUrl || "https://api.telegram.org").trim().replace(/\/$/, "");
|
||||
let parsedUrl: URL;
|
||||
try {
|
||||
parsedUrl = new URL(baseUrl);
|
||||
} catch {
|
||||
return NextResponse.json({ error: "Invalid Telegram API base URL" }, { status: 400 });
|
||||
}
|
||||
if (!["http:", "https:"].includes(parsedUrl.protocol) || parsedUrl.username || parsedUrl.password) {
|
||||
return NextResponse.json({ error: "Telegram API base URL must use HTTP or HTTPS without credentials" }, { status: 400 });
|
||||
}
|
||||
|
||||
const botToken = body.botToken?.trim();
|
||||
const greetingText = String(body.greetingText || "").trim().slice(0, 1000);
|
||||
const cardNumber = String(body.cardNumber || "").trim().slice(0, 100);
|
||||
const cardHolderName = String(body.cardHolderName || "").trim().slice(0, 200);
|
||||
if (!greetingText) {
|
||||
return NextResponse.json({ error: "Greeting message is required" }, { status: 400 });
|
||||
}
|
||||
telegramApproverDb.replaceAll(approvers);
|
||||
telegramSettingsDb.update({
|
||||
baseUrl,
|
||||
greetingText,
|
||||
cardNumber,
|
||||
cardHolderName,
|
||||
...(botToken ? { botToken } : {}),
|
||||
});
|
||||
|
||||
return NextResponse.json({
|
||||
approvers: telegramApproverDb.getAll(),
|
||||
baseUrl: telegramSettingsDb.get().baseUrl,
|
||||
greetingText,
|
||||
cardNumber,
|
||||
cardHolderName,
|
||||
botConfigured: isTelegramConfigured(),
|
||||
webhookSecretConfigured: Boolean(process.env.TELEGRAM_WEBHOOK_SECRET),
|
||||
});
|
||||
} catch (error) {
|
||||
console.error("Telegram settings update failed:", error);
|
||||
return NextResponse.json({ error: "Failed to update Telegram settings" }, { status: 500 });
|
||||
}
|
||||
}
|
||||
|
||||
export async function POST() {
|
||||
try {
|
||||
await registerTelegramWebhook();
|
||||
return NextResponse.json({ message: "Telegram webhook registered successfully" });
|
||||
} catch (error) {
|
||||
const message = error instanceof Error ? error.message : "Failed to register Telegram webhook";
|
||||
console.error("Telegram webhook registration failed:", error);
|
||||
return NextResponse.json({ error: message }, { status: 502 });
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,32 @@
|
||||
import { timingSafeEqual } from "node:crypto";
|
||||
import { NextRequest, NextResponse } from "next/server";
|
||||
import { handleTelegramUpdate, TelegramUpdate } from "@/lib/telegram";
|
||||
|
||||
export const dynamic = "force-dynamic";
|
||||
|
||||
function secretMatches(provided: string, expected: string): boolean {
|
||||
const left = Buffer.from(provided);
|
||||
const right = Buffer.from(expected);
|
||||
return left.length === right.length && timingSafeEqual(left, right);
|
||||
}
|
||||
|
||||
export async function POST(request: NextRequest) {
|
||||
const expectedSecret = process.env.TELEGRAM_WEBHOOK_SECRET;
|
||||
if (!expectedSecret) {
|
||||
return NextResponse.json({ error: "Telegram webhook is not configured" }, { status: 503 });
|
||||
}
|
||||
|
||||
const providedSecret = request.headers.get("x-telegram-bot-api-secret-token") || "";
|
||||
if (!secretMatches(providedSecret, expectedSecret)) {
|
||||
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
||||
}
|
||||
|
||||
try {
|
||||
const update = (await request.json()) as TelegramUpdate;
|
||||
await handleTelegramUpdate(update);
|
||||
return NextResponse.json({ ok: true });
|
||||
} catch (error) {
|
||||
console.error("Telegram webhook error:", error);
|
||||
return NextResponse.json({ error: "Failed to process Telegram update" }, { status: 500 });
|
||||
}
|
||||
}
|
||||
@@ -5,6 +5,7 @@
|
||||
@layer base {
|
||||
body {
|
||||
@apply bg-paper-light text-paper-dark min-h-screen;
|
||||
font-family: Vazirmatn, Tahoma, Arial, sans-serif;
|
||||
background-image:
|
||||
url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='100' height='100'%3E%3Cfilter id='noise'%3E%3CfeTurbulence type='fractalNoise' baseFrequency='0.9' numOctaves='4' /%3E%3C/filter%3E%3Crect width='100' height='100' filter='url(%23noise)' opacity='0.05'/%3E%3C/svg%3E");
|
||||
}
|
||||
|
||||
+1
-7
@@ -1,15 +1,9 @@
|
||||
import type { Metadata } from 'next';
|
||||
import { Vazirmatn } from 'next/font/google';
|
||||
import './globals.css';
|
||||
import { CartProvider } from '@/lib/CartContext';
|
||||
import { AdminProvider } from '@/lib/AdminContext';
|
||||
import { AlbumsProvider } from '@/lib/AlbumsContext';
|
||||
|
||||
const vazirmatn = Vazirmatn({
|
||||
subsets: ['latin', 'arabic'],
|
||||
display: 'swap',
|
||||
});
|
||||
|
||||
export const metadata: Metadata = {
|
||||
title: 'Podzahr - Parsa Sadatie Music',
|
||||
description: 'Explore progressive rock albums by composer and producer Parsa Sadatie (@parsadat). Intricate compositions, powerful instrumentation, and sonic landscapes.',
|
||||
@@ -23,7 +17,7 @@ export default function RootLayout({
|
||||
}>) {
|
||||
return (
|
||||
<html lang="en">
|
||||
<body className={vazirmatn.className}>
|
||||
<body>
|
||||
<AdminProvider>
|
||||
<AlbumsProvider>
|
||||
<CartProvider>{children}</CartProvider>
|
||||
|
||||
+1
-1
@@ -35,7 +35,7 @@ export default function Home() {
|
||||
const apiPurchases = await response.json();
|
||||
// Only include approved purchases for determining access
|
||||
const approvedPurchases = apiPurchases.filter((p: Purchase) => p.approvalStatus === 'approved');
|
||||
setPurchasedAlbums(approvedPurchases.map((p: Purchase) => p.albumId));
|
||||
setPurchasedAlbums(approvedPurchases.flatMap((p: Purchase) => p.albumIds || [p.albumId]));
|
||||
}
|
||||
} catch (error) {
|
||||
console.error('Error fetching purchases:', error);
|
||||
|
||||
Reference in New Issue
Block a user