package router import ( "encoding/json" "net/http" "github.com/jmoiron/sqlx" "mgit.msbls.de/m/KanzlAI-mGMT/internal/auth" "mgit.msbls.de/m/KanzlAI-mGMT/internal/handlers" "mgit.msbls.de/m/KanzlAI-mGMT/internal/services" ) func New(db *sqlx.DB, authMW *auth.Middleware) http.Handler { mux := http.NewServeMux() // Services tenantSvc := services.NewTenantService(db) // Middleware tenantResolver := auth.NewTenantResolver(tenantSvc) // Handlers tenantH := handlers.NewTenantHandler(tenantSvc) // Public routes mux.HandleFunc("GET /health", handleHealth(db)) // Authenticated API routes api := http.NewServeMux() // Tenant management (no tenant resolver — these operate across tenants) api.HandleFunc("POST /api/tenants", tenantH.CreateTenant) api.HandleFunc("GET /api/tenants", tenantH.ListTenants) api.HandleFunc("GET /api/tenants/{id}", tenantH.GetTenant) api.HandleFunc("POST /api/tenants/{id}/invite", tenantH.InviteUser) api.HandleFunc("DELETE /api/tenants/{id}/members/{uid}", tenantH.RemoveMember) api.HandleFunc("GET /api/tenants/{id}/members", tenantH.ListMembers) // Tenant-scoped routes (require tenant context) scoped := http.NewServeMux() scoped.HandleFunc("GET /api/cases", placeholder("cases")) scoped.HandleFunc("GET /api/deadlines", placeholder("deadlines")) scoped.HandleFunc("GET /api/appointments", placeholder("appointments")) scoped.HandleFunc("GET /api/documents", placeholder("documents")) // Wire: auth -> tenant routes go directly, scoped routes get tenant resolver api.Handle("/api/", tenantResolver.Resolve(scoped)) mux.Handle("/api/", authMW.RequireAuth(api)) return mux } func handleHealth(db *sqlx.DB) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { if err := db.Ping(); err != nil { w.WriteHeader(http.StatusServiceUnavailable) json.NewEncoder(w).Encode(map[string]string{"status": "error", "error": err.Error()}) return } w.Header().Set("Content-Type", "application/json") json.NewEncoder(w).Encode(map[string]string{"status": "ok"}) } } func placeholder(resource string) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { w.Header().Set("Content-Type", "application/json") json.NewEncoder(w).Encode(map[string]string{ "status": "not_implemented", "resource": resource, }) } }