105 lines
3.2 KiB
TypeScript

import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
import { getExternalAppointments } from "../_shared/external.ts";
const corsHeaders = {
"Access-Control-Allow-Origin": "*",
"Access-Control-Allow-Headers":
"authorization, x-client-info, apikey, content-type",
};
Deno.serve(async (req) => {
if (req.method === "OPTIONS")
return new Response("ok", { headers: corsHeaders });
try {
// External JWT comes in custom header (bypass Edge Runtime validation)
const externalJwt = req.headers.get("x-external-jwt");
if (!externalJwt) throw new Error("Missing x-external-jwt header");
// Validar JWT no Supabase EXTERNO (source of truth for authentication)
const externalSupabase = createClient(
Deno.env.get("EXTERNAL_SUPABASE_URL")!,
Deno.env.get("EXTERNAL_SUPABASE_ANON_KEY")!,
{ global: { headers: { Authorization: `Bearer ${externalJwt}` } } }
);
const {
data: { user },
error: authError,
} = await externalSupabase.auth.getUser();
if (authError || !user) {
return new Response(
JSON.stringify({
success: false,
error: "Invalid external JWT",
details: authError?.message,
}),
{
status: 401,
headers: { ...corsHeaders, "Content-Type": "application/json" },
}
);
}
// Cliente para NOSSO Supabase (service_role = sem validação de JWT)
const supabase = createClient(
Deno.env.get("SUPABASE_URL")!,
Deno.env.get("SUPABASE_SERVICE_ROLE_KEY")!
);
const { doctor_id } = await req.json();
if (!doctor_id) throw new Error("doctor_id required");
// 1. Buscar appointments de HOJE do Supabase EXTERNO
const today = new Date().toISOString().split("T")[0];
const externalAppointments = await getExternalAppointments(
{ doctor_id, date: today },
`Bearer ${externalJwt}`
);
// 2. Buscar stats do NOSSO Supabase
const { data: stats } = await supabase
.from("doctor_stats")
.select("*")
.eq("external_doctor_id", doctor_id)
.single();
// 3. Buscar badges do NOSSO Supabase
const { data: badges } = await supabase
.from("doctor_badges")
.select("*")
.eq("external_doctor_id", doctor_id);
// 4. Mesclar dados
const summary = {
doctor_id,
today: {
total_appointments: externalAppointments.length,
completed: externalAppointments.filter(
(a: any) => a.status === "completed"
).length,
pending: externalAppointments.filter(
(a: any) => a.status === "scheduled"
).length,
no_show: externalAppointments.filter((a: any) => a.status === "no_show")
.length,
},
stats: stats || {},
badges: badges || [],
appointments: externalAppointments,
};
return new Response(JSON.stringify({ success: true, data: summary }), {
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
} catch (error: any) {
return new Response(
JSON.stringify({ success: false, error: error.message }),
{
status: 400,
headers: { ...corsHeaders, "Content-Type": "application/json" },
}
);
}
});