julienfroidefond/peakskills
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: secu migrate to user uuid

Browse Source
This commit is contained in:
Julien Froidefond
2025-08-21 13:54:13 +02:00
parent ef16c73625
commit 578f0858e8
12 changed files with 532 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
app/api/evaluations/route.ts
View File

@@ -7,11 +7,10 @@ import { COOKIE_NAME } from "@/lib/auth-utils";
export async function GET(request: NextRequest) {
try {
const cookieStore = await cookies();
const userId = cookieStore.get(COOKIE_NAME)?.value;
const userIdNum = userId ? parseInt(userId) : null;
const userUuid = cookieStore.get(COOKIE_NAME)?.value;
// Support pour l'ancien mode avec paramètres (pour la compatibilité)
if (!userIdNum) {
if (!userUuid) {
const { searchParams } = new URL(request.url);
const firstName = searchParams.get("firstName");
const lastName = searchParams.get("lastName");
@@ -29,8 +28,8 @@ export async function GET(request: NextRequest) {
return NextResponse.json({ evaluation });
}
// Mode authentifié par cookie
const userProfile = await evaluationService.getUserById(userIdNum);
// Mode authentifié par cookie UUID
const userProfile = await evaluationService.getUserByUuid(userUuid);
if (!userProfile) {
return NextResponse.json(
{ error: "Utilisateur non trouvé" },

18
app/api/evaluations/skills/route.ts
View File

@@ -7,18 +7,18 @@ const COOKIE_NAME = "peakSkills_userId";
export async function PUT(request: NextRequest) {
try {
// Récupérer l'utilisateur depuis le cookie
// Récupérer l'utilisateur depuis le cookie (maintenant un UUID)
const cookieStore = await cookies();
const userId = cookieStore.get(COOKIE_NAME)?.value;
const userUuid = cookieStore.get(COOKIE_NAME)?.value;
if (!userId) {
if (!userUuid) {
return NextResponse.json(
{ error: "Utilisateur non authentifié" },
{ status: 401 }
);
}
const userProfile = await evaluationService.getUserById(parseInt(userId));
const userProfile = await evaluationService.getUserByUuid(userUuid);
if (!userProfile) {
return NextResponse.json(
{ error: "Utilisateur introuvable" },
@@ -44,7 +44,7 @@ export async function PUT(request: NextRequest) {
{ status: 400 }
);
}
await evaluationService.updateSkillLevel(
await evaluationService.updateSkillLevelUuid(
userProfile,
category,
skillId,
@@ -59,7 +59,7 @@ export async function PUT(request: NextRequest) {
{ status: 400 }
);
}
await evaluationService.updateSkillMentorStatus(
await evaluationService.updateSkillMentorStatusUuid(
userProfile,
category,
skillId,
@@ -74,7 +74,7 @@ export async function PUT(request: NextRequest) {
{ status: 400 }
);
}
await evaluationService.updateSkillLearningStatus(
await evaluationService.updateSkillLearningStatusUuid(
userProfile,
category,
skillId,
@@ -83,7 +83,7 @@ export async function PUT(request: NextRequest) {
break;
case "addSkill":
await evaluationService.addSkillToEvaluation(
await evaluationService.addSkillToEvaluationUuid(
userProfile,
category,
skillId
@@ -91,7 +91,7 @@ export async function PUT(request: NextRequest) {
break;
case "removeSkill":
await evaluationService.removeSkillFromEvaluation(
await evaluationService.removeSkillFromEvaluationUuid(
userProfile,
category,
skillId