fix vorgangPIN API endpoint

src/routes/api/list/+server.ts

@@ -0,0 +1,14 @@
+import { getVorgaenge } from '$lib/server/vorgangService';
+import { json } from '@sveltejs/kit';
+
+export async function GET({ locals }) {
+	if (!locals.user) {
+		return json({ error: 'Unauthorized' }, { status: 401 });
+	}
+
+	const vorgaenge = getVorgaenge();
+
+	return new Response(JSON.stringify(vorgaenge), {
+		status: 200
+	});
+}

src/routes/api/list/[vorgang]/+server.ts

@@ -1,5 +1,10 @@
 import { client } from '$lib/minio';
-import { deleteVorgangByToken, vorgangNameExists } from '$lib/server/vorgangService';
+import {
+	deleteVorgangByToken,
+	getVorgangByToken,
+	vorgangNameExists
+} from '$lib/server/vorgangService';
+import { json } from '@sveltejs/kit';
 
 export async function DELETE({ params }) {
 	const vorgangToken = params.vorgang;
@@ -38,3 +43,21 @@ export async function HEAD({ params }) {
 		return new Response(null, { status: 500 });
 	}
 }
+
+export async function GET({ params, locals }) {
+	if (!locals.user) {
+		return json({ error: 'Unauthorized' }, { status: 401 });
+	}
+
+	try {
+		const vorgangToken = params.vorgang;
+		const vorgang = getVorgangByToken(vorgangToken);
+
+		return new Response(JSON.stringify(vorgang), {
+			status: 200
+		});
+	} catch (err) {
+		console.error('Fehler im GET-Handler:', err);
+		return new Response(null, { status: 500 });
+	}
+}

src/routes/api/list/[vorgang]/vorgangPIN/+server.ts

@@ -2,10 +2,12 @@ import { db } from '$lib/server/dbService';
 
 /** @type {import('./$types').RequestHandler} */
 export async function GET({ params }) {
-	const vorgangName = params.vorgang;
+	const vorgangToken = params.vorgang;
 
-	const getPINSQLStatement = `SELECT pin FROM cases WHERE name = ?;`;
-	const row = db.prepare(getPINSQLStatement).get(vorgangName);
+	const getPINSQLStatement = `SELECT pin
+															FROM cases
+															WHERE token = ?;`;
+	const row = db.prepare(getPINSQLStatement).get(vorgangToken);
 	const vorgangPIN = row?.pin;
 
 	if (vorgangPIN) {