since3-portal/modules/admin/actions/client.ts

"use server";
import { createAdminClient } from "@/lib/supabase/admin";
import { verifySession } from "@/lib/supabase/dal";
import { generatePassword } from "@/lib/generate-password";
import * as z from "zod";



const CreateClientSchema = z.object({
    name: z.string().min(3, {error: "Mindestens drei Zeichen eingeben"}),
    email: z.email({  error: "Bitte eine gültige Email eingeben." })
})

export type CreateClientState =
    | { error: string }
    | { success: true; email: string; password: string }
    | undefined;

export async function createClient(
    _prevState: CreateClientState,
    formData: FormData
): Promise<CreateClientState> {

    const session = await verifySession();
    if (!session.isAdmin) {
        return { error: "Keine Berechtigung." }
    }

    const validatedFields = CreateClientSchema.safeParse({
        name: formData.get("name"),
        email: formData.get("email")
    });

    if (!validatedFields.success) {
        const { fieldErrors } = z.flattenError(validatedFields.error);
        const message = fieldErrors.email?.[0] ?? fieldErrors.name?.[0] ?? "Bitte Name und Email ausfüllen.";
        return { error: message }
    }

    const { name, email } = validatedFields.data;
    const password = generatePassword();

    const supabase = createAdminClient();
    const { error } = await supabase.auth.admin.createUser({
        email,
        password,
        email_confirm: true,
        user_metadata: { name },
    });

    if (error) {
        return { error: error.code === "email_exists" ? "Diese Email ist bereits vergeben." : "Client konnte nicht angelegt werden." }
    }

    return { success: true, email, password }
}