rename endpoint to retrieve roles for Coadmin and Account_manager

serverless.yml

@@ -271,7 +271,7 @@ functions:
 
     events:
       - httpApi:
-          path: /minglaradmin/prepopulate-teammate
+          path: /minglaradmin/prepopulate-Roles
           method: get
 
 

src/modules/minglaradmin/handlers/prepopulateTeammate.ts

@@ -1,35 +1,67 @@
-import { APIGatewayProxyEvent, APIGatewayProxyResult, Context } from 'aws-lambda';
+import {
+  APIGatewayProxyEvent,
+  APIGatewayProxyResult,
+  Context,
+} from 'aws-lambda';
 import { safeHandler } from '../../../common/utils/handlers/safeHandler';
 import { PrismaService } from '../../../common/database/prisma.service';
 import ApiError from '../../../common/utils/helper/ApiError';
 import { ROLE } from '../../../common/utils/constants/common.constant';
+import { verifyMinglarAdminToken } from '../../../common/middlewares/jwt/authForMinglarAdmin';
 
 const prismaService = new PrismaService();
 
 /**
  * Get prepopulated roles for Coadmin and Account_manager
  * Returns an array of role objects with their IDs
+ * Only accessible by MINGLAR_ADMIN (role_xid = 1)
  */
-export const handler = safeHandler(async (
+export const handler = safeHandler(
+  async (
     event: APIGatewayProxyEvent,
-  context?: Context
-): Promise<APIGatewayProxyResult> => {
+    context?: Context,
+  ): Promise<APIGatewayProxyResult> => {
+    const token =
+      event.headers['x-auth-token'] || event.headers['X-Auth-Token'];
+    if (!token) {
+      throw new ApiError(
+        401,
+        'This is a protected route. Please provide a valid token.',
+      );
+    }
+
+    // Verify token and get user info
+    const userInfo = await verifyMinglarAdminToken(token);
+    console.log('User Info:', userInfo);
+    // Check if user has Minglar Admin role (role_xid = 1)
+    const user = await prismaService.user.findUnique({
+      where: { id: userInfo.id },
+      select: { roleXid: true },
+    });
+
+    if (!user || user.roleXid !== ROLE.MINGLAR_ADMIN) {
+      throw new ApiError(
+        403,
+        'Access denied. Only Minglar Admin can access this route.',
+      );
+    }
+
     // Fetch Coadmin and Account_Manager roles
     const roles = await prismaService.roles.findMany({
       where: {
         id: {
-                in: [ROLE.CO_ADMIN, ROLE.ACCOUNT_MANAGER]
+          in: [ROLE.CO_ADMIN, ROLE.ACCOUNT_MANAGER],
         },
         isActive: true,
-            deletedAt: null
+        deletedAt: null,
       },
       select: {
         id: true,
-            roleName: true
+        roleName: true,
       },
       orderBy: {
-            id: 'asc'
-        }
+        id: 'asc',
+      },
     });
 
     if (!roles || roles.length === 0) {
@@ -46,7 +78,8 @@ export const handler = safeHandler(async (
         success: true,
         message: 'Roles retrieved successfully',
         data: roles,
-            count: roles.length
+        count: roles.length,
       }),
     };
-});
+  },
+);