32 lines
1.1 KiB
JavaScript
32 lines
1.1 KiB
JavaScript
|
import { getUserFromRequest } from '../../../lib/permission-middleware';
|
||
|
|
import { checkImportRateLimit } from '../../../lib/rate-limit.js';
|
||
|
|
import { runCatalogSync } from '../../../lib/card-import/sync-catalog.js';
|
||
|
|
|
||
|
|
export default async function handler(req, res) {
|
||
|
|
if (req.method !== 'POST') {
|
||
|
|
return res.status(405).json({ error: 'Method not allowed' });
|
||
|
|
}
|
||
|
|
|
||
|
|
const user = await getUserFromRequest(req);
|
||
|
|
if (!user) {
|
||
|
|
return res.status(401).json({ error: 'Authentication required' });
|
||
|
|
}
|
||
|
|
if (user.role !== 'admin') {
|
||
|
|
return res.status(403).json({ error: 'Admin access required' });
|
||
|
|
}
|
||
|
|
|
||
|
|
const { allowed, reset } = await checkImportRateLimit(req, user.userId);
|
||
|
|
if (!allowed) {
|
||
|
|
res.setHeader('Retry-After', Math.ceil((reset - Date.now()) / 1000));
|
||
|
|
return res.status(429).json({ error: 'Too many attempts. Try again later.' });
|
||
|
|
}
|
||
|
|
|
||
|
|
try {
|
||
|
|
const summary = await runCatalogSync();
|
||
|
|
return res.status(200).json({ success: true, ...summary });
|
||
|
|
} catch (error) {
|
||
|
|
console.error('[POST /api/admin/sync-catalog]', error);
|
||
|
|
return res.status(500).json({ error: 'Catalog sync failed', details: error.message });
|
||
|
|
}
|
||
|
|
}
|