KrikoriosandClaude Opus 5
8807ff41c5
Driver onboarding now photographs the licence, ID card and vehicle
registration and reads the credential fields off them, plus a camera-only
profile selfie riders check the arriving driver against. Adds in-app chat
and WebRTC calls, push-backed ride offers, ratings, cancellation and
payment sheets, settlement, and the owner dashboard endpoints behind them.
Camera permission on Android:
- Declare CAMERA and READ_MEDIA_IMAGES in the manifest. expo-image-picker's
own plugin never declares CAMERA, and Android denies a request for an
undeclared permission instantly and silently — no dialog is ever shown,
which is indistinguishable from the app not asking at all.
- Handle canAskAgain: once Android stops showing the dialog, repeating why
we need it is a dead end, so offer Open Settings instead (lib/capture-
permission.ts), matching what the location flow already did.
Session: a 401 on a request that carried a token now ends the session
instead of being reinterpreted per-screen — driver-home had been reading it
as "this user has no driver profile" and showing an onboarding form to an
already-onboarded driver. Requests without a token are exempt so a failed
sign-in doesn't sign you out, and the notification is latched per token so
concurrent polls tear the session down once. (root) gains the auth guard
that turns that into the sign-in screen; app/index.tsx only guarded the way
in, leaving a session that ended mid-screen with nowhere to go.
Also ignore .uploads/ — it holds driver licence, ID and vehicle scans plus
profile photos, which are personal data and must not be committed.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
80 lines
2.2 KiB
TypeScript
80 lines
2.2 KiB
TypeScript
import { requireOwner, withCors, preflight } from "@/lib/admin";
|
|
import { sql } from "@/lib/db";
|
|
|
|
export async function OPTIONS(request: Request) {
|
|
return preflight(request);
|
|
}
|
|
|
|
export async function GET(request: Request) {
|
|
const auth = await requireOwner(request);
|
|
if ("error" in auth) return withCors(request, auth.error);
|
|
|
|
try {
|
|
const rows = await sql`
|
|
SELECT
|
|
d.*,
|
|
(SELECT COUNT(*)::int FROM rides r WHERE r.driver_id = d.id) AS total_rides,
|
|
COALESCE((
|
|
SELECT SUM(r.fare_price)::int FROM rides r
|
|
WHERE r.driver_id = d.id AND r.payment_status = 'paid'
|
|
), 0) AS revenue
|
|
FROM drivers d
|
|
ORDER BY d.id
|
|
`;
|
|
|
|
return withCors(request, Response.json({ data: rows }));
|
|
} catch (error) {
|
|
console.error("[ADMIN_DRIVERS]: ", error);
|
|
return withCors(request,
|
|
Response.json({ error: "Internal Server Error" }, { status: 500 }),
|
|
);
|
|
}
|
|
}
|
|
|
|
type DriverBody = {
|
|
first_name?: string;
|
|
last_name?: string;
|
|
profile_image_url?: string;
|
|
car_image_url?: string;
|
|
car_seats?: number;
|
|
rating?: number;
|
|
};
|
|
|
|
export async function POST(request: Request) {
|
|
const auth = await requireOwner(request);
|
|
if ("error" in auth) return withCors(request, auth.error);
|
|
|
|
try {
|
|
const body = (await request.json()) as DriverBody;
|
|
|
|
if (!body.first_name?.trim() || !body.last_name?.trim()) {
|
|
return withCors(request,
|
|
Response.json(
|
|
{ error: "first_name and last_name are required." },
|
|
{ status: 400 },
|
|
),
|
|
);
|
|
}
|
|
|
|
const [driver] = await sql`
|
|
INSERT INTO drivers
|
|
(first_name, last_name, profile_image_url, car_image_url, car_seats, rating)
|
|
VALUES
|
|
(${body.first_name.trim()},
|
|
${body.last_name.trim()},
|
|
${body.profile_image_url ?? null},
|
|
${body.car_image_url ?? null},
|
|
${body.car_seats ?? 4},
|
|
${body.rating ?? 4.5})
|
|
RETURNING *
|
|
`;
|
|
|
|
return withCors(request, Response.json({ data: driver }, { status: 201 }));
|
|
} catch (error) {
|
|
console.error("[ADMIN_DRIVER_CREATE]: ", error);
|
|
return withCors(request,
|
|
Response.json({ error: "Internal Server Error" }, { status: 500 }),
|
|
);
|
|
}
|
|
}
|