import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth";

export async function GET() {
  const testimonials = await prisma.testimonial.findMany({
    orderBy: { createdAt: "desc" },
  });
  return NextResponse.json(testimonials);
}

export async function POST(request: Request) {
  const session = await getServerSession(authOptions);
  if (!session) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });

  const body = await request.json();
  const testimonial = await prisma.testimonial.create({
    data: {
      clientName: body.clientName,
      company: body.company,
      photo: body.photo,
      contentId: body.contentId,
      contentEn: body.contentEn,
      rating: body.rating || 5,
      isActive: body.isActive ?? true,
    },
  });
  return NextResponse.json(testimonial, { status: 201 });
}