기능구현중

This commit is contained in:
2026-01-11 17:01:01 +09:00
parent 375d5bf91a
commit 954ba21211
148 changed files with 2276 additions and 0 deletions

View File

@@ -1,180 +0,0 @@
import { query, execute, queryOne } from '../../utils/db'
import { requireAdmin } from '../../utils/session'
interface TaskInput {
description: string
hours: number
isCompleted?: boolean
}
interface ProjectInput {
projectId: number | null
projectName: string
workTasks: TaskInput[]
planTasks: TaskInput[]
}
interface ReportInput {
employeeId: number | null
employeeName: string
employeeEmail: string
projects: ProjectInput[]
issueDescription?: string
vacationDescription?: string
remarkDescription?: string
}
/**
* 주간보고 일괄 등록
* POST /api/admin/bulk-register
*/
export default defineEventHandler(async (event) => {
// 관리자 권한 체크
const userId = await requireAdmin(event)
const clientIp = getHeader(event, 'x-forwarded-for') || 'unknown'
// 관리자 이메일 조회
const currentUser = await queryOne<any>(`
SELECT employee_email FROM wr_employee_info WHERE employee_id = $1
`, [userId])
const adminEmail = currentUser?.employee_email || ''
const body = await readBody<{
reportYear: number
reportWeek: number
weekStartDate: string
weekEndDate: string
reports: ReportInput[]
}>(event)
const results: any[] = []
for (const report of body.reports) {
try {
let employeeId = report.employeeId
let isNewEmployee = false
const newProjects: string[] = []
// 신규 직원 생성
if (!employeeId && report.employeeName && report.employeeEmail) {
const newEmp = await queryOne<any>(`
INSERT INTO wr_employee_info (employee_name, employee_email, is_active, created_ip, created_email, updated_ip, updated_email)
VALUES ($1, $2, true, $3, $4, $3, $4)
RETURNING employee_id
`, [report.employeeName, report.employeeEmail, clientIp, adminEmail])
employeeId = newEmp.employee_id
isNewEmployee = true
}
if (!employeeId) {
results.push({
success: false,
employeeName: report.employeeName,
employeeEmail: report.employeeEmail,
error: '직원 정보가 없습니다.'
})
continue
}
// 기존 보고서 확인 및 삭제 (덮어쓰기)
const existing = await queryOne<any>(`
SELECT report_id FROM wr_weekly_report
WHERE author_id = $1 AND report_year = $2 AND report_week = $3
`, [employeeId, body.reportYear, body.reportWeek])
let isUpdate = false
if (existing) {
await execute(`DELETE FROM wr_weekly_report_task WHERE report_id = $1`, [existing.report_id])
await execute(`DELETE FROM wr_weekly_report WHERE report_id = $1`, [existing.report_id])
isUpdate = true
}
// 주간보고 마스터 등록
const newReport = await queryOne<any>(`
INSERT INTO wr_weekly_report (
author_id, report_year, report_week, week_start_date, week_end_date,
issue_description, vacation_description, remark_description,
report_status, submitted_at, created_ip, created_email, updated_ip, updated_email
) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, 'SUBMITTED', NOW(), $9, $10, $9, $10)
RETURNING report_id
`, [
employeeId, body.reportYear, body.reportWeek, body.weekStartDate, body.weekEndDate,
report.issueDescription || null, report.vacationDescription || null, report.remarkDescription || null,
clientIp, adminEmail
])
const reportId = newReport.report_id
// 프로젝트별 Task 등록
for (const proj of report.projects) {
let projectId = proj.projectId
// 신규 프로젝트 생성
if (!projectId && proj.projectName) {
const year = new Date().getFullYear()
const codeResult = await queryOne<any>(`
SELECT COALESCE(MAX(CAST(SUBSTRING(project_code FROM 6) AS INTEGER)), 0) + 1 as next_num
FROM wr_project_info WHERE project_code LIKE $1
`, [`${year}-%`])
const projectCode = `${year}-${String(codeResult.next_num).padStart(3, '0')}`
const newProj = await queryOne<any>(`
INSERT INTO wr_project_info (project_code, project_name, project_status, created_ip, created_email, updated_ip, updated_email)
VALUES ($1, $2, 'IN_PROGRESS', $3, $4, $3, $4)
RETURNING project_id
`, [projectCode, proj.projectName, clientIp, adminEmail])
projectId = newProj.project_id
newProjects.push(proj.projectName)
}
if (!projectId) continue
// 금주실적 Task 등록
for (const task of proj.workTasks || []) {
await execute(`
INSERT INTO wr_weekly_report_task (
report_id, project_id, task_type, task_description, task_hours, is_completed,
created_ip, created_email, updated_ip, updated_email
) VALUES ($1, $2, 'WORK', $3, $4, $5, $6, $7, $6, $7)
`, [reportId, projectId, task.description, task.hours || 0, task.isCompleted !== false, clientIp, adminEmail])
}
// 차주계획 Task 등록
for (const task of proj.planTasks || []) {
await execute(`
INSERT INTO wr_weekly_report_task (
report_id, project_id, task_type, task_description, task_hours,
created_ip, created_email, updated_ip, updated_email
) VALUES ($1, $2, 'PLAN', $3, $4, $5, $6, $5, $6)
`, [reportId, projectId, task.description, task.hours || 0, clientIp, adminEmail])
}
}
results.push({
success: true,
employeeId,
employeeName: report.employeeName,
employeeEmail: report.employeeEmail,
reportId,
isUpdate,
isNewEmployee,
newProjects
})
} catch (e: any) {
results.push({
success: false,
employeeName: report.employeeName,
employeeEmail: report.employeeEmail,
error: e.message
})
}
}
return {
totalCount: results.length,
successCount: results.filter(r => r.success).length,
results
}
})

View File

@@ -1,44 +0,0 @@
import { queryOne, execute } from '../../../../utils/db'
import { requireAdmin } from '../../../../utils/session'
/**
* 메뉴 권한 토글
* POST /api/admin/menu/[id]/toggle-role
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const menuId = getRouterParam(event, 'id')
const body = await readBody(event)
const { roleId, enabled } = body
if (!roleId) {
throw createError({ statusCode: 400, message: '권한 ID가 필요합니다.' })
}
// 메뉴 존재 확인
const menu = await queryOne<any>(`
SELECT menu_id FROM wr_menu WHERE menu_id = $1
`, [menuId])
if (!menu) {
throw createError({ statusCode: 404, message: '메뉴를 찾을 수 없습니다.' })
}
if (enabled) {
// 권한 추가
await execute(`
INSERT INTO wr_menu_role (menu_id, role_id)
VALUES ($1, $2)
ON CONFLICT (menu_id, role_id) DO NOTHING
`, [menuId, roleId])
} else {
// 권한 제거
await execute(`
DELETE FROM wr_menu_role
WHERE menu_id = $1 AND role_id = $2
`, [menuId, roleId])
}
return { success: true }
})

View File

@@ -1,73 +0,0 @@
import { query } from '../../../utils/db'
import { requireAdmin } from '../../../utils/session'
/**
* 메뉴 목록 조회 (권한 포함)
* GET /api/admin/menu/list
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
// 메뉴 목록 조회
const menus = await query<any>(`
SELECT
m.menu_id,
m.menu_code,
m.menu_name,
m.menu_path,
m.menu_icon,
m.parent_menu_id,
m.sort_order,
m.is_active,
m.created_at,
m.updated_at,
pm.menu_name AS parent_menu_name
FROM wr_menu m
LEFT JOIN wr_menu pm ON m.parent_menu_id = pm.menu_id
ORDER BY m.parent_menu_id NULLS FIRST, m.sort_order
`)
// 권한 목록 조회
const roles = await query<any>(`
SELECT role_id, role_code, role_name
FROM wr_role
ORDER BY role_id
`)
// 메뉴-권한 매핑 조회
const menuRoles = await query<any>(`
SELECT menu_id, role_id
FROM wr_menu_role
`)
// 메뉴별 권한 매핑 정리
const menuRoleMap: Record<number, number[]> = {}
for (const mr of menuRoles) {
if (!menuRoleMap[mr.menu_id]) {
menuRoleMap[mr.menu_id] = []
}
menuRoleMap[mr.menu_id].push(mr.role_id)
}
return {
menus: menus.map(m => ({
menuId: m.menu_id,
menuCode: m.menu_code,
menuName: m.menu_name,
menuPath: m.menu_path,
menuIcon: m.menu_icon,
parentMenuId: m.parent_menu_id,
parentMenuName: m.parent_menu_name,
sortOrder: m.sort_order,
isActive: m.is_active,
createdAt: m.created_at,
updatedAt: m.updated_at,
roleIds: menuRoleMap[m.menu_id] || []
})),
roles: roles.map((r: any) => ({
roleId: r.role_id,
roleCode: r.role_code,
roleName: r.role_name
}))
}
})

View File

@@ -1,157 +0,0 @@
import { query } from '../../utils/db'
import { callOpenAIVision, REPORT_PARSE_SYSTEM_PROMPT } from '../../utils/openai'
import { requireAdmin } from '../../utils/session'
interface ParsedTask {
description: string
hours: number
}
interface ParsedProject {
projectName: string
workTasks: ParsedTask[]
planTasks: ParsedTask[]
}
interface ParsedReport {
employeeName: string
employeeEmail: string | null
projects: ParsedProject[]
issueDescription: string | null
vacationDescription: string | null
remarkDescription: string | null
}
interface ParsedResult {
reportYear: number
reportWeek: number
weekStartDate: string
weekEndDate: string
reports: ParsedReport[]
}
/**
* 이미지에서 주간보고 분석 (OpenAI Vision)
* POST /api/admin/parse-image
*/
export default defineEventHandler(async (event) => {
// 관리자 권한 체크
await requireAdmin(event)
const body = await readBody<{ images: string[] }>(event)
if (!body.images || body.images.length === 0) {
throw createError({ statusCode: 400, message: '분석할 이미지를 업로드해주세요.' })
}
if (body.images.length > 10) {
throw createError({ statusCode: 400, message: '이미지는 최대 10장까지 업로드 가능합니다.' })
}
// OpenAI Vision 분석
const aiResponse = await callOpenAIVision(REPORT_PARSE_SYSTEM_PROMPT, body.images)
let parsed: ParsedResult
try {
parsed = JSON.parse(aiResponse)
} catch (e) {
throw createError({ statusCode: 500, message: 'AI 응답 파싱 실패' })
}
// 주차 정보 기본값 설정 (AI가 파싱 못한 경우)
const now = new Date()
if (!parsed.reportYear) {
parsed.reportYear = now.getFullYear()
}
if (!parsed.reportWeek) {
// ISO 주차 계산
const startOfYear = new Date(now.getFullYear(), 0, 1)
const days = Math.floor((now.getTime() - startOfYear.getTime()) / (24 * 60 * 60 * 1000))
parsed.reportWeek = Math.ceil((days + startOfYear.getDay() + 1) / 7)
}
if (!parsed.weekStartDate || !parsed.weekEndDate) {
// 현재 주의 월요일~일요일 계산
const day = now.getDay()
const monday = new Date(now)
monday.setDate(now.getDate() - (day === 0 ? 6 : day - 1))
const sunday = new Date(monday)
sunday.setDate(monday.getDate() + 6)
parsed.weekStartDate = monday.toISOString().split('T')[0]
parsed.weekEndDate = sunday.toISOString().split('T')[0]
}
// 기존 직원 목록 조회
const employees = await query<any>(`
SELECT employee_id, employee_name, employee_email
FROM wr_employee_info
WHERE is_active = true
`)
// 기존 프로젝트 목록 조회
const projects = await query<any>(`
SELECT project_id, project_code, project_name
FROM wr_project_info
WHERE project_status != 'COMPLETED'
`)
// 직원 및 프로젝트 매칭
const matchedReports = parsed.reports.map(report => {
let matchedEmployee = null
if (report.employeeEmail) {
matchedEmployee = employees.find(
(e: any) => e.employee_email.toLowerCase() === report.employeeEmail?.toLowerCase()
)
}
if (!matchedEmployee) {
matchedEmployee = employees.find(
(e: any) => e.employee_name === report.employeeName
)
}
const matchedProjects = report.projects.map(proj => {
const existingProject = projects.find((p: any) =>
p.project_name.includes(proj.projectName) ||
proj.projectName.includes(p.project_name)
)
return {
...proj,
matchedProjectId: existingProject?.project_id || null,
matchedProjectCode: existingProject?.project_code || null,
matchedProjectName: existingProject?.project_name || null,
isNewProject: !existingProject
}
})
return {
...report,
matchedEmployeeId: matchedEmployee?.employee_id || null,
matchedEmployeeName: matchedEmployee?.employee_name || null,
matchedEmployeeEmail: matchedEmployee?.employee_email || null,
isEmployeeMatched: !!matchedEmployee,
isNewEmployee: !matchedEmployee && !!report.employeeEmail,
projects: matchedProjects
}
})
return {
success: true,
parsed: {
reportYear: parsed.reportYear,
reportWeek: parsed.reportWeek,
weekStartDate: parsed.weekStartDate,
weekEndDate: parsed.weekEndDate,
reports: matchedReports
},
employees: employees.map((e: any) => ({
employeeId: e.employee_id,
employeeName: e.employee_name,
employeeEmail: e.employee_email
})),
projects: projects.map((p: any) => ({
projectId: p.project_id,
projectCode: p.project_code,
projectName: p.project_name
}))
}
})

View File

@@ -1,157 +0,0 @@
import { query } from '../../utils/db'
import { callOpenAI, buildParseReportPrompt } from '../../utils/openai'
import { requireAdmin } from '../../utils/session'
interface ParsedTask {
description: string
hours: number
}
interface ParsedProject {
projectName: string
workTasks: ParsedTask[]
planTasks: ParsedTask[]
}
interface ParsedReport {
employeeName: string
employeeEmail: string | null
projects: ParsedProject[]
issueDescription: string | null
vacationDescription: string | null
remarkDescription: string | null
}
interface ParsedResult {
reportYear: number
reportWeek: number
weekStartDate: string
weekEndDate: string
reports: ParsedReport[]
}
/**
* 주간보고 텍스트 분석 (OpenAI)
* POST /api/admin/parse-report
*/
export default defineEventHandler(async (event) => {
// 관리자 권한 체크
await requireAdmin(event)
const body = await readBody<{ rawText: string }>(event)
if (!body.rawText || body.rawText.trim().length < 10) {
throw createError({ statusCode: 400, message: '분석할 텍스트를 입력해주세요.' })
}
// OpenAI 분석
const messages = buildParseReportPrompt(body.rawText)
const aiResponse = await callOpenAI(messages, true)
let parsed: ParsedResult
try {
parsed = JSON.parse(aiResponse)
} catch (e) {
throw createError({ statusCode: 500, message: 'AI 응답 파싱 실패' })
}
// 주차 정보 기본값 설정 (AI가 파싱 못한 경우)
const now = new Date()
if (!parsed.reportYear) {
parsed.reportYear = now.getFullYear()
}
if (!parsed.reportWeek) {
// ISO 주차 계산
const startOfYear = new Date(now.getFullYear(), 0, 1)
const days = Math.floor((now.getTime() - startOfYear.getTime()) / (24 * 60 * 60 * 1000))
parsed.reportWeek = Math.ceil((days + startOfYear.getDay() + 1) / 7)
}
if (!parsed.weekStartDate || !parsed.weekEndDate) {
// 현재 주의 월요일~일요일 계산
const day = now.getDay()
const monday = new Date(now)
monday.setDate(now.getDate() - (day === 0 ? 6 : day - 1))
const sunday = new Date(monday)
sunday.setDate(monday.getDate() + 6)
parsed.weekStartDate = monday.toISOString().split('T')[0]
parsed.weekEndDate = sunday.toISOString().split('T')[0]
}
// 기존 직원 목록 조회
const employees = await query<any>(`
SELECT employee_id, employee_name, employee_email
FROM wr_employee_info
WHERE is_active = true
`)
// 기존 프로젝트 목록 조회
const projects = await query<any>(`
SELECT project_id, project_code, project_name
FROM wr_project_info
WHERE project_status != 'COMPLETED'
`)
// 직원 및 프로젝트 매칭
const matchedReports = parsed.reports.map(report => {
// 이메일로 정확 매칭 시도
let matchedEmployee = null
if (report.employeeEmail) {
matchedEmployee = employees.find(
(e: any) => e.employee_email.toLowerCase() === report.employeeEmail?.toLowerCase()
)
}
// 이메일 매칭 실패시 이름으로 매칭
if (!matchedEmployee) {
matchedEmployee = employees.find(
(e: any) => e.employee_name === report.employeeName
)
}
// 프로젝트 매칭
const matchedProjects = report.projects.map(proj => {
const existingProject = projects.find((p: any) =>
p.project_name.includes(proj.projectName) ||
proj.projectName.includes(p.project_name)
)
return {
...proj,
matchedProjectId: existingProject?.project_id || null,
matchedProjectCode: existingProject?.project_code || null,
matchedProjectName: existingProject?.project_name || null,
isNewProject: !existingProject
}
})
return {
...report,
matchedEmployeeId: matchedEmployee?.employee_id || null,
matchedEmployeeName: matchedEmployee?.employee_name || null,
matchedEmployeeEmail: matchedEmployee?.employee_email || null,
isEmployeeMatched: !!matchedEmployee,
isNewEmployee: !matchedEmployee && !!report.employeeEmail,
projects: matchedProjects
}
})
return {
success: true,
parsed: {
reportYear: parsed.reportYear,
reportWeek: parsed.reportWeek,
weekStartDate: parsed.weekStartDate,
weekEndDate: parsed.weekEndDate,
reports: matchedReports
},
employees: employees.map((e: any) => ({
employeeId: e.employee_id,
employeeName: e.employee_name,
employeeEmail: e.employee_email
})),
projects: projects.map((p: any) => ({
projectId: p.project_id,
projectCode: p.project_code,
projectName: p.project_name
}))
}
})

View File

@@ -1,46 +0,0 @@
import { queryOne, execute } from '../../../../utils/db'
import { requireAdmin } from '../../../../utils/session'
/**
* 권한 삭제
* DELETE /api/admin/role/[id]/delete
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const roleId = getRouterParam(event, 'id')
if (!roleId) {
throw createError({ statusCode: 400, message: '권한 ID가 필요합니다.' })
}
// 존재 여부 확인
const existing = await queryOne<any>(`
SELECT role_id, role_code FROM wr_role WHERE role_id = $1
`, [roleId])
if (!existing) {
throw createError({ statusCode: 404, message: '권한을 찾을 수 없습니다.' })
}
// 기본 권한은 삭제 불가
const protectedCodes = ['ROLE_ADMIN', 'ROLE_MANAGER', 'ROLE_USER']
if (protectedCodes.includes(existing.role_code)) {
throw createError({ statusCode: 400, message: '기본 권한은 삭제할 수 없습니다.' })
}
// 사용 중인 권한인지 확인
const usageCount = await queryOne<any>(`
SELECT COUNT(*) as cnt FROM wr_employee_role WHERE role_id = $1
`, [roleId])
if (parseInt(usageCount.cnt) > 0) {
throw createError({
statusCode: 400,
message: `${usageCount.cnt}명의 사용자가 이 권한을 사용 중입니다. 먼저 권한을 해제해주세요.`
})
}
await execute(`DELETE FROM wr_role WHERE role_id = $1`, [roleId])
return { success: true }
})

View File

@@ -1,54 +0,0 @@
import { queryOne, execute } from '../../../../utils/db'
import { requireAdmin } from '../../../../utils/session'
/**
* 권한 수정
* PUT /api/admin/role/[id]/update
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const roleId = getRouterParam(event, 'id')
if (!roleId) {
throw createError({ statusCode: 400, message: '권한 ID가 필요합니다.' })
}
const body = await readBody<{
roleName?: string
roleDescription?: string
isInternalIpOnly?: boolean
sortOrder?: number
isActive?: boolean
}>(event)
// 존재 여부 확인
const existing = await queryOne<any>(`
SELECT role_id, role_code FROM wr_role WHERE role_id = $1
`, [roleId])
if (!existing) {
throw createError({ statusCode: 404, message: '권한을 찾을 수 없습니다.' })
}
await execute(`
UPDATE wr_role SET
role_name = COALESCE($2, role_name),
role_description = COALESCE($3, role_description),
is_internal_ip_only = COALESCE($4, is_internal_ip_only),
sort_order = COALESCE($5, sort_order),
is_active = COALESCE($6, is_active),
updated_at = NOW()
WHERE role_id = $1
`, [
roleId,
body.roleName,
body.roleDescription,
body.isInternalIpOnly,
body.sortOrder,
body.isActive
])
const updated = await queryOne<any>(`SELECT * FROM wr_role WHERE role_id = $1`, [roleId])
return { success: true, role: updated }
})

View File

@@ -1,45 +0,0 @@
import { queryOne } from '../../../utils/db'
import { requireAdmin } from '../../../utils/session'
/**
* 권한 생성
* POST /api/admin/role/create
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const body = await readBody<{
roleCode: string
roleName: string
roleDescription?: string
isInternalIpOnly?: boolean
sortOrder?: number
}>(event)
if (!body.roleCode || !body.roleName) {
throw createError({ statusCode: 400, message: '권한코드와 권한명은 필수입니다.' })
}
// 코드 중복 체크
const existing = await queryOne<any>(`
SELECT role_id FROM wr_role WHERE role_code = $1
`, [body.roleCode])
if (existing) {
throw createError({ statusCode: 400, message: '이미 존재하는 권한코드입니다.' })
}
const role = await queryOne<any>(`
INSERT INTO wr_role (role_code, role_name, role_description, is_internal_ip_only, sort_order)
VALUES ($1, $2, $3, $4, $5)
RETURNING *
`, [
body.roleCode,
body.roleName,
body.roleDescription || null,
body.isInternalIpOnly || false,
body.sortOrder || 0
])
return { success: true, role }
})

View File

@@ -1,34 +0,0 @@
import { query } from '../../../utils/db'
import { requireAdmin } from '../../../utils/session'
/**
* 권한 목록 조회
* GET /api/admin/role/list
*/
export default defineEventHandler(async (event) => {
// 관리자 권한 체크
await requireAdmin(event)
const roles = await query<any>(`
SELECT
r.role_id,
r.role_code,
r.role_name,
r.role_description,
r.is_internal_ip_only,
r.sort_order,
r.is_active,
r.created_at,
r.updated_at,
COUNT(DISTINCT er.employee_id) as user_count
FROM wr_role r
LEFT JOIN wr_employee_role er ON r.role_id = er.role_id
GROUP BY r.role_id
ORDER BY r.sort_order, r.role_id
`)
return {
roles,
total: roles.length
}
})

View File

@@ -1,55 +0,0 @@
import { query, queryOne, execute } from '../../../../utils/db'
import { requireAdmin } from '../../../../utils/session'
/**
* 사용자 권한 변경
* PUT /api/admin/user/[id]/roles
*
* Body: { roleIds: number[] }
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const employeeId = getRouterParam(event, 'id')
if (!employeeId) {
throw createError({ statusCode: 400, message: '사용자 ID가 필요합니다.' })
}
const body = await readBody<{ roleIds: number[] }>(event)
const roleIds = body.roleIds || []
// 사용자 존재 확인
const user = await queryOne<any>(`
SELECT employee_id, employee_email FROM wr_employee_info WHERE employee_id = $1
`, [employeeId])
if (!user) {
throw createError({ statusCode: 404, message: '사용자를 찾을 수 없습니다.' })
}
// 기존 권한 모두 삭제
await execute(`DELETE FROM wr_employee_role WHERE employee_id = $1`, [employeeId])
// 새 권한 추가
for (const roleId of roleIds) {
await execute(`
INSERT INTO wr_employee_role (employee_id, role_id)
VALUES ($1, $2)
ON CONFLICT (employee_id, role_id) DO NOTHING
`, [employeeId, roleId])
}
// 변경된 권한 조회
const updatedRoles = await query<any>(`
SELECT r.role_id, r.role_code, r.role_name
FROM wr_employee_role er
JOIN wr_role r ON er.role_id = r.role_id
WHERE er.employee_id = $1
`, [employeeId])
return {
success: true,
employeeId: parseInt(employeeId as string),
roles: updatedRoles
}
})

View File

@@ -1,70 +0,0 @@
import { queryOne, execute } from '../../../../utils/db'
import { requireAdmin } from '../../../../utils/session'
/**
* 사용자 개별 권한 토글 (추가/제거)
* POST /api/admin/user/[id]/toggle-role
*
* Body: { roleId: number }
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const employeeId = getRouterParam(event, 'id')
if (!employeeId) {
throw createError({ statusCode: 400, message: '사용자 ID가 필요합니다.' })
}
const body = await readBody<{ roleId: number }>(event)
if (!body.roleId) {
throw createError({ statusCode: 400, message: '권한 ID가 필요합니다.' })
}
// 사용자 존재 확인
const user = await queryOne<any>(`
SELECT employee_id FROM wr_employee_info WHERE employee_id = $1
`, [employeeId])
if (!user) {
throw createError({ statusCode: 404, message: '사용자를 찾을 수 없습니다.' })
}
// 권한 존재 확인
const role = await queryOne<any>(`
SELECT role_id, role_code FROM wr_role WHERE role_id = $1
`, [body.roleId])
if (!role) {
throw createError({ statusCode: 404, message: '권한을 찾을 수 없습니다.' })
}
// 현재 권한 보유 여부 확인
const existing = await queryOne<any>(`
SELECT employee_role_id FROM wr_employee_role
WHERE employee_id = $1 AND role_id = $2
`, [employeeId, body.roleId])
let added: boolean
if (existing) {
// 권한 제거
await execute(`
DELETE FROM wr_employee_role WHERE employee_id = $1 AND role_id = $2
`, [employeeId, body.roleId])
added = false
} else {
// 권한 추가
await execute(`
INSERT INTO wr_employee_role (employee_id, role_id) VALUES ($1, $2)
`, [employeeId, body.roleId])
added = true
}
return {
success: true,
employeeId: parseInt(employeeId as string),
roleId: body.roleId,
roleCode: role.role_code,
added
}
})

View File

@@ -1,110 +0,0 @@
import { query } from '../../../utils/db'
import { requireAdmin } from '../../../utils/session'
/**
* 사용자 목록 조회 (권한 정보 + 최근 로그인 포함)
* GET /api/admin/user/list
*/
export default defineEventHandler(async (event) => {
await requireAdmin(event)
const queryParams = getQuery(event)
const company = queryParams.company as string || ''
const name = queryParams.name as string || ''
const email = queryParams.email as string || ''
const phone = queryParams.phone as string || ''
const status = queryParams.status as string || 'active' // 기본값: 활성
// 1. 사용자 목록 조회 (최근 로그인 포함)
let userQuery = `
SELECT
e.employee_id,
e.employee_name,
e.employee_email,
e.employee_phone,
e.employee_position,
e.company,
e.join_date,
e.is_active,
e.created_at,
(
SELECT MAX(login_at)
FROM wr_login_history
WHERE employee_id = e.employee_id
) as last_login_at
FROM wr_employee_info e
WHERE 1=1
`
const params: any[] = []
// 소속사 검색
if (company) {
params.push(`%${company}%`)
userQuery += ` AND e.company ILIKE $${params.length}`
}
// 이름 검색
if (name) {
params.push(`%${name}%`)
userQuery += ` AND e.employee_name ILIKE $${params.length}`
}
// 이메일 검색
if (email) {
params.push(`%${email}%`)
userQuery += ` AND e.employee_email ILIKE $${params.length}`
}
// 전화번호 검색
if (phone) {
params.push(`%${phone}%`)
userQuery += ` AND e.employee_phone ILIKE $${params.length}`
}
// 상태 검색
if (status === 'active') {
userQuery += ` AND e.is_active = true`
} else if (status === 'inactive') {
userQuery += ` AND e.is_active = false`
}
// status === 'all' 이면 조건 없음
userQuery += ` ORDER BY e.company, e.employee_position, e.employee_name`
const users = await query<any>(userQuery, params)
// 2. 모든 권한 목록 조회
const roles = await query<any>(`
SELECT role_id, role_code, role_name, sort_order
FROM wr_role
WHERE is_active = true
ORDER BY sort_order
`)
// 3. 사용자별 권한 매핑 조회
const userRoles = await query<any>(`
SELECT employee_id, role_id
FROM wr_employee_role
`)
// 4. 사용자별 권한 배열 생성
const userRoleMap = new Map<number, number[]>()
for (const ur of userRoles) {
if (!userRoleMap.has(ur.employee_id)) {
userRoleMap.set(ur.employee_id, [])
}
userRoleMap.get(ur.employee_id)!.push(ur.role_id)
}
// 5. 사용자 데이터에 권한 정보 추가
const usersWithRoles = users.map(u => ({
...u,
roleIds: userRoleMap.get(u.employee_id) || []
}))
return {
users: usersWithRoles,
roles,
total: users.length
}
})