Atlas/app/api/bookings/[id]/confirmation-pdf/route.ts

import { NextRequest, NextResponse } from 'next/server';
import { getServerSession } from 'next-auth';
import { authOptions } from '@/lib/auth';
import { prisma } from '@/lib/prisma';
import { lexofficeService } from '@/lib/lexoffice';

export async function GET(
  request: NextRequest,
  { params }: { params: { id: string } }
) {
  try {
    const session = await getServerSession(authOptions);

    if (!session || session.user.role !== 'ADMIN') {
      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
    }

    const bookingId = params.id;

    const booking = await prisma.booking.findUnique({
      where: { id: bookingId },
      select: {
        id: true,
        bookingNumber: true,
        lexofficeConfirmationId: true,
      },
    });

    if (!booking) {
      return NextResponse.json({ error: 'Buchung nicht gefunden' }, { status: 404 });
    }

    if (!booking.lexofficeConfirmationId) {
      return NextResponse.json({ error: 'Keine Auftragsbestätigung vorhanden' }, { status: 404 });
    }

    const pdfBuffer = await lexofficeService.getInvoicePDF(booking.lexofficeConfirmationId);

    return new NextResponse(pdfBuffer, {
      status: 200,
      headers: {
        'Content-Type': 'application/pdf',
        'Content-Disposition': `attachment; filename="Auftragsbestaetigung_${booking.bookingNumber}.pdf"`,
      },
    });

  } catch (error: any) {
    console.error('❌ PDF-Download Fehler:', error);
    return NextResponse.json(
      { error: error.message || 'PDF-Download fehlgeschlagen' },
      { status: 500 }
    );
  }
}