admin.schubert/funktechnik-schubert-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(admin): repair media upload redirect

Browse source
This commit is contained in:
Schubert Ferenc 2026-07-03 23:15:25 +02:00
parent c35bd5877e
commit 203c94b128
12 changed files with 248 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

36
app/api/admin/media/route.ts
View file

@ -1,38 +1,34 @@
import { mkdir, readdir, writeFile } from "fs/promises";
import path from "path";
import { NextResponse } from "next/server";
import { requireAdminSession } from "@/lib/admin/auth";
import { listMediaFiles, saveMediaFile } from "@/lib/admin/media";
const uploadDir = path.join(process.cwd(), "public", "uploads", "images");
const allowedTypes = new Set(["image/jpeg", "image/png", "image/webp", "application/pdf"]);
async function ensureUploadDir() {
await mkdir(uploadDir, { recursive: true });
function relativeRedirect(target: string) {
return new NextResponse(null, {
status: 303,
headers: { Location: target },
});
}
export async function GET() {
if (!await requireAdminSession()) return NextResponse.json({ message: "Nicht autorisiert." }, { status: 401 });
await ensureUploadDir();
const files = await readdir(uploadDir);
return NextResponse.json({
files: files.map((file) => ({ name: file, url: `/uploads/images/${file}` })),
});
return NextResponse.json({ files: await listMediaFiles() });
}
export async function POST(request: Request) {
if (!await requireAdminSession()) return NextResponse.json({ message: "Nicht autorisiert." }, { status: 401 });
await ensureUploadDir();
const form = await request.formData();
const file = form.get("file");
if (!(file instanceof File) || !allowedTypes.has(file.type) || file.size > 5 * 1024 * 1024) {
return NextResponse.json({ message: "Bitte eine JPG-, PNG-, WebP- oder PDF-Datei bis 5 MB hochladen." }, { status: 400 });
if (!(file instanceof File)) {
return relativeRedirect("/admin/medien?error=missing-file");
}
const extension = path.extname(file.name).toLowerCase();
const safeName = `${Date.now()}-${file.name.toLowerCase().replace(/[^a-z0-9.-]/g, "-")}`;
const target = safeName.endsWith(extension) ? safeName : `${safeName}${extension}`;
await writeFile(path.join(uploadDir, target), Buffer.from(await file.arrayBuffer()));
try {
const result = await saveMediaFile(file);
if (result.error) return relativeRedirect(`/admin/medien?error=${encodeURIComponent(result.error)}`);
} catch {
return relativeRedirect("/admin/medien?error=storage");
}
return NextResponse.redirect(new URL("/admin/medien?uploaded=1", request.url));
return relativeRedirect("/admin/medien?uploaded=1");
}

2
app/api/admin/settings/route.ts
View file

@ -5,5 +5,5 @@ import { saveSiteSettings } from "@/lib/admin/store";
export async function POST(request: Request) {
if (!await requireAdminSession()) return NextResponse.json({ message: "Nicht autorisiert." }, { status: 401 });
await saveSiteSettings(await request.formData());
return NextResponse.redirect(new URL("/admin/einstellungen?saved=1", request.url));
return new NextResponse(null, { status: 303, headers: { Location: "/admin/einstellungen?saved=1" } });
}

2
app/api/admin/smtp/route.ts
View file

@ -5,5 +5,5 @@ import { saveSmtpSettings } from "@/lib/admin/store";
export async function POST(request: Request) {
if (!await requireAdminSession()) return NextResponse.json({ message: "Nicht autorisiert." }, { status: 401 });
await saveSmtpSettings(await request.formData());
return NextResponse.redirect(new URL("/admin/smtp?saved=1", request.url));
return new NextResponse(null, { status: 303, headers: { Location: "/admin/smtp?saved=1" } });
}