Extract backend team routes

2026-05-29 10:56:02 -03:00
parent 40c6587312
commit 34c64bda9a
2 changed files with 96 additions and 88 deletions
--- a/backend/routes/teamsRoutes.js
+++ b/backend/routes/teamsRoutes.js
@@ -0,0 +1,93 @@
+const express = require('express');
+const crypto = require('crypto');
+const { requireRole } = require('../middleware/auth');
+
+const createTeamsRouter = ({ pool }) => {
+  const router = express.Router();
+
+  router.get('/teams', async (req, res) => {
+    try {
+      const { tenantId } = req.query;
+      const effectiveTenantId = req.user.role === 'super_admin' ? tenantId : req.user.tenant_id;
+
+      let q = 'SELECT * FROM teams';
+      const params = [];
+      if (effectiveTenantId && effectiveTenantId !== 'all') {
+        q += ' WHERE tenant_id = ?';
+        params.push(effectiveTenantId);
+      }
+
+      if (req.user.role === 'manager') {
+        if (req.user.team_id) {
+          q += (params.length > 0 ? ' AND' : ' WHERE') + ' id = ?';
+          params.push(req.user.team_id);
+        } else {
+          q += (params.length > 0 ? ' AND' : ' WHERE') + ' 1=0';
+        }
+      }
+
+      const [rows] = await pool.query(q, params);
+      res.json(rows);
+    } catch (error) {
+      res.status(500).json({ error: error.message });
+    }
+  });
+
+  router.post('/teams', requireRole(['admin', 'super_admin']), async (req, res) => {
+    const { name, description, tenantId } = req.body;
+    const effectiveTenantId = req.user.role === 'super_admin' ? tenantId : req.user.tenant_id;
+    try {
+      const tid = `team_${crypto.randomUUID().split('-')[0]}`;
+      await pool.query(
+        'INSERT INTO teams (id, tenant_id, name, description) VALUES (?, ?, ?, ?)',
+        [tid, effectiveTenantId, name, description || null]
+      );
+      res.status(201).json({ id: tid, message: 'Time criado com sucesso.' });
+    } catch (error) {
+      console.error('Create team error:', error);
+      res.status(500).json({ error: error.message });
+    }
+  });
+
+  router.put('/teams/:id', requireRole(['admin', 'super_admin']), async (req, res) => {
+    const { name, description } = req.body;
+    try {
+      const [existing] = await pool.query('SELECT tenant_id FROM teams WHERE id = ?', [req.params.id]);
+      if (existing.length === 0) return res.status(404).json({ error: 'Not found' });
+      if (req.user.role !== 'super_admin' && existing[0].tenant_id !== req.user.tenant_id) {
+        return res.status(403).json({ error: 'Acesso negado.' });
+      }
+
+      await pool.query(
+        'UPDATE teams SET name = ?, description = ? WHERE id = ?',
+        [name, description || null, req.params.id]
+      );
+      res.json({ message: 'Team updated successfully.' });
+    } catch (error) {
+      console.error('Update team error:', error);
+      res.status(500).json({ error: error.message });
+    }
+  });
+
+  router.delete('/teams/:id', requireRole(['admin', 'super_admin']), async (req, res) => {
+    try {
+      const [existing] = await pool.query('SELECT tenant_id FROM teams WHERE id = ?', [req.params.id]);
+      if (existing.length === 0) return res.status(404).json({ error: 'Not found' });
+      if (req.user.role !== 'super_admin' && existing[0].tenant_id !== req.user.tenant_id) {
+        return res.status(403).json({ error: 'Acesso negado.' });
+      }
+
+      await pool.query('UPDATE users SET team_id = NULL WHERE team_id = ?', [req.params.id]);
+      await pool.query('DELETE FROM teams WHERE id = ?', [req.params.id]);
+
+      res.json({ message: 'Team deleted successfully.' });
+    } catch (error) {
+      console.error('Delete team error:', error);
+      res.status(500).json({ error: error.message });
+    }
+  });
+
+  return router;
+};
+
+module.exports = { createTeamsRouter };