Add user management system with approval workflow and role assignment
This commit is contained in:
37
server/api/cms/users/list.get.js
Normal file
37
server/api/cms/users/list.get.js
Normal file
@@ -0,0 +1,37 @@
|
||||
import { getUserFromToken, readUsers } from '../../../utils/auth.js'
|
||||
|
||||
export default defineEventHandler(async (event) => {
|
||||
try {
|
||||
const token = getCookie(event, 'auth_token')
|
||||
const currentUser = await getUserFromToken(token)
|
||||
|
||||
if (!currentUser || (currentUser.role !== 'admin' && currentUser.role !== 'vorstand')) {
|
||||
throw createError({
|
||||
statusCode: 403,
|
||||
message: 'Zugriff verweigert'
|
||||
})
|
||||
}
|
||||
|
||||
const users = await readUsers()
|
||||
|
||||
// Return users without passwords
|
||||
const safeUsers = users.map(u => ({
|
||||
id: u.id,
|
||||
email: u.email,
|
||||
name: u.name,
|
||||
role: u.role,
|
||||
phone: u.phone || '',
|
||||
active: u.active,
|
||||
created: u.created,
|
||||
lastLogin: u.lastLogin
|
||||
}))
|
||||
|
||||
return {
|
||||
users: safeUsers
|
||||
}
|
||||
} catch (error) {
|
||||
console.error('Fehler beim Laden der Benutzer:', error)
|
||||
throw error
|
||||
}
|
||||
})
|
||||
|
||||
Reference in New Issue
Block a user