Files
accounted/app/api/settings/invoice-font/route.ts
T
Mattsson e11f70b347 Bug/gh issues fiz (#1103)
* refactor: optimize page loading and data fetching

* fix: resolve recurring production runtime errors

* feat: add MCP company and customer updates

* fix: handle year-end tax adjustments

* feat: harden annual report compliance

* fix: expand invoice logo and font support

* fix: sanitize API route error responses

* fix: sanitize user-facing error messages

* feat: persist onboarding and tax assessment notices

* fix: reduce cloud backup audit churn

* feat: refine invoice editor layout

* fix: show saved tax adjustments in INK2

* fix: complete annual report API mappings

* docs: record operational safeguards and decisions

* fix: harden annual report review findings

* fix: adjust column span for description based on VAT registration

* New css class name
2026-07-21 23:00:15 +02:00

152 lines
4.8 KiB
TypeScript

import { NextResponse } from 'next/server'
import { withRouteContext } from '@/lib/api/with-route-context'
import { createServiceClient } from '@/lib/supabase/server'
import {
INVOICE_FONT_UPLOAD_MAX_BYTES,
INVOICE_FONT_UPLOAD_MAX_MB,
} from '@/lib/invoices/branding-constants'
import {
detectInvoiceFontFileFormat,
getInvoiceFontContentType,
} from '@/lib/invoices/font-files'
import { getErrorMessage as getUserErrorMessage } from '@/lib/errors/get-error-message'
const ALLOWED_EXTENSIONS = new Set(['ttf', 'woff'])
function safeDisplayName(fileName: string, extension: string): string {
const baseName = fileName.split(/[\\/]/).pop() ?? `invoice-font.${extension}`
const cleaned = baseName.replace(/[\u0000-\u001f\u007f]/g, '').trim()
return (cleaned || `invoice-font.${extension}`).slice(0, 200)
}
export const POST = withRouteContext(
'settings.invoice-font.upload',
async (request, { supabase, companyId }) => {
const formData = await request.formData()
const file = formData.get('file')
if (!(file instanceof File)) {
return NextResponse.json({ error: 'Ingen typsnittsfil angiven.' }, { status: 400 })
}
const extension = file.name.split('.').pop()?.toLowerCase() ?? ''
if (!ALLOWED_EXTENSIONS.has(extension)) {
return NextResponse.json(
{ error: 'Otillåten filtyp. Tillåtna format är TTF och WOFF.' },
{ status: 400 },
)
}
if (file.size > INVOICE_FONT_UPLOAD_MAX_BYTES) {
return NextResponse.json(
{ error: `Filen är för stor (max ${INVOICE_FONT_UPLOAD_MAX_MB} MB).` },
{ status: 400 },
)
}
const bytes = Buffer.from(await file.arrayBuffer())
const format = detectInvoiceFontFileFormat(bytes)
if (!format || format !== extension) {
return NextResponse.json(
{ error: 'Filen är inte ett giltigt TTF- eller WOFF-typsnitt.' },
{ status: 400 },
)
}
const fileName = `invoice-font-${Date.now()}.${format}`
const storagePath = `${companyId}/${fileName}`
const serviceClient = createServiceClient()
const bucket = serviceClient.storage.from('invoice-fonts')
const { error: uploadError } = await bucket.upload(storagePath, bytes, {
contentType: getInvoiceFontContentType(format),
upsert: false,
})
if (uploadError) {
return NextResponse.json(
{ error: `Uppladdning misslyckades: ${getUserErrorMessage(uploadError)}` },
{ status: 500 },
)
}
const displayName = safeDisplayName(file.name, format)
const { error: updateError } = await supabase
.from('company_settings')
.update({
invoice_font_family: 'Custom',
invoice_custom_font_path: storagePath,
invoice_custom_font_name: displayName,
})
.eq('company_id', companyId)
.select('company_id')
.single()
if (updateError) {
await bucket.remove([storagePath])
if (updateError.code === 'PGRST116') {
return NextResponse.json({ error: 'Inställningarna hittades inte.' }, { status: 404 })
}
return NextResponse.json(
{ error: getUserErrorMessage(updateError) },
{ status: 500 },
)
}
const { data: existing } = await bucket.list(companyId)
const obsoletePaths = (existing ?? [])
.filter((stored) => stored.name !== fileName)
.map((stored) => `${companyId}/${stored.name}`)
if (obsoletePaths.length > 0) await bucket.remove(obsoletePaths)
return NextResponse.json({
data: {
invoice_font_family: 'Custom',
invoice_custom_font_path: storagePath,
invoice_custom_font_name: displayName,
},
})
},
{ requireWrite: true },
)
export const DELETE = withRouteContext(
'settings.invoice-font.delete',
async (_request, { supabase, companyId }) => {
const { error: updateError } = await supabase
.from('company_settings')
.update({
invoice_font_family: 'Helvetica',
invoice_custom_font_path: null,
invoice_custom_font_name: null,
})
.eq('company_id', companyId)
.select('company_id')
.single()
if (updateError) {
if (updateError.code === 'PGRST116') {
return NextResponse.json({ error: 'Inställningarna hittades inte.' }, { status: 404 })
}
return NextResponse.json(
{ error: getUserErrorMessage(updateError) },
{ status: 500 },
)
}
const serviceClient = createServiceClient()
const bucket = serviceClient.storage.from('invoice-fonts')
const { data: existing } = await bucket.list(companyId)
if (existing && existing.length > 0) {
await bucket.remove(existing.map((stored) => `${companyId}/${stored.name}`))
}
return NextResponse.json({
data: {
invoice_font_family: 'Helvetica',
invoice_custom_font_path: null,
invoice_custom_font_name: null,
},
})
},
{ requireWrite: true },
)