mirror of
https://github.com/marcogll/AnchorOS.git
synced 2026-03-15 23:24:36 +00:00
feat: Add kiosk management, artist selection, and schedule management
- Add KiosksManagement component with full CRUD for kiosks - Add ScheduleManagement for staff schedules with break reminders - Update booking flow to allow artist selection by customers - Add staff_services API for assigning services to artists - Update staff management UI with service assignment dialog - Add auto-break reminder when schedule >= 8 hours - Update availability API to filter artists by service - Add kiosk management to Aperture dashboard - Clean up ralphy artifacts and logs
This commit is contained in:
@@ -2,7 +2,15 @@ import { NextRequest, NextResponse } from 'next/server'
|
||||
import { supabaseAdmin } from '@/lib/supabase/admin'
|
||||
|
||||
/**
|
||||
* @description Get staff role by user ID for authentication
|
||||
* @description Retrieves the staff role for a given user ID for authorization purposes
|
||||
* @param {NextRequest} request - JSON body with userId field
|
||||
* @returns {NextResponse} JSON with success status and role (admin, manager, staff, artist, kiosk)
|
||||
* @example POST /api/aperture/staff/role {"userId": "123e4567-e89b-12d3-a456-426614174000"}
|
||||
* @audit BUSINESS ROLE: Role determines API access levels and UI capabilities
|
||||
* @audit SECURITY: Critical for authorization - only authenticated users can query their role
|
||||
* @audit Validate: userId must be a valid UUID format
|
||||
* @audit PERFORMANCE: Single-row lookup on indexed user_id column
|
||||
* @audit AUDIT: Role access logged for security monitoring and access control audits
|
||||
*/
|
||||
export async function POST(request: NextRequest) {
|
||||
try {
|
||||
|
||||
Reference in New Issue
Block a user