Files
mrp-qrcode/app/op/scan/[token]/page.tsx
T
jason fc5bce4868
Build and Push Docker Image / build (push) Successful in 1m6s
stage 4
2026-04-21 09:29:44 -05:00

102 lines
3.3 KiB
TypeScript

import { redirect } from "next/navigation";
import Link from "next/link";
import { prisma } from "@/lib/prisma";
import { getCurrentUser } from "@/lib/auth";
import ScanClient, { type ScanOp } from "./ScanClient";
/**
* Entry point for a QR scan. Resolves the token server-side so we can:
* 1. Redirect unauthenticated visitors to /login/operator with ?next=<here>,
* so they land back on this same page after PIN entry.
* 2. Show a clean "unknown token" page for bad scans (old card, typo) instead
* of the generic 404.
* 3. Render the interactive ScanClient with everything the operator needs
* to read the work card and claim / pause / complete.
*
* Admins who scan get a read-only preview — we don't let them claim because
* the claim holder is supposed to be the one running the machine.
*/
export default async function ScanPage({ params }: { params: Promise<{ token: string }> }) {
const { token } = await params;
const user = await getCurrentUser();
if (!user) {
redirect(`/login/operator?next=${encodeURIComponent(`/op/scan/${token}`)}`);
}
const op = await prisma.operation.findUnique({
where: { qrToken: token },
include: {
machine: { select: { id: true, name: true, kind: true } },
part: {
select: {
id: true,
code: true,
name: true,
material: true,
qty: true,
assembly: {
select: {
id: true,
code: true,
name: true,
project: { select: { id: true, code: true, name: true } },
},
},
},
},
claimedBy: { select: { id: true, name: true } },
},
});
if (!op) {
return (
<div className="mx-auto max-w-xl px-4 py-10">
<div className="rounded-xl bg-white border border-slate-200 p-6 text-center">
<h1 className="text-xl font-semibold">QR code not recognised</h1>
<p className="text-slate-600 mt-2 text-sm">
This card might be from an older print, or the operation was deleted. Ask your supervisor
to reprint the traveler.
</p>
<Link
href="/op"
className="inline-block mt-4 rounded-md bg-slate-900 text-white px-4 py-2 text-sm"
>
Back to dashboard
</Link>
</div>
</div>
);
}
if (user.role !== "operator") {
// Admin preview: render a read-only summary, no action buttons.
return (
<div className="mx-auto max-w-xl px-4 py-8">
<p className="text-xs uppercase tracking-wide text-slate-500 mb-2">Admin preview</p>
<ScanClient
initialOp={serialise(op)}
viewer={{ id: user.id, role: "admin", claimedByMe: false }}
/>
</div>
);
}
const claimedByMe = op.claimedByUserId === user.id;
return (
<div className="mx-auto max-w-xl px-4 py-6">
<ScanClient
initialOp={serialise(op)}
viewer={{ id: user.id, role: "operator", claimedByMe }}
/>
</div>
);
}
// Date fields come back as JS Date objects from Prisma; convert for the client
// component payload so it can be serialised into the RSC stream without tripping
// on non-plain objects. We widen to `ScanOp` which types the dates as strings.
function serialise(obj: unknown): ScanOp {
return JSON.parse(JSON.stringify(obj)) as ScanOp;
}