Initial commit: JuanitoSport - Muay Thai & Yog4Fight PWA

2026-09-08 08:25:33 +02:00
commit a69ca86330
70 changed files with 4301 additions and 0 deletions
@@ -0,0 +1,39 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAuth } from "@/lib/session";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  try {
+    const absences = await prisma.absence.findMany({
+      where: { userId: session.user.id },
+      orderBy: { date: "desc" },
+    });
+    return NextResponse.json(absences);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  const { date, reason } = await req.json();
+  if (!date) return NextResponse.json({ error: "Date requise" }, { status: 400 });
+
+  try {
+    const absence = await prisma.absence.create({
+      data: {
+        userId: session.user.id,
+        date: new Date(date),
+        reason: reason || null,
+      },
+    });
+    return NextResponse.json(absence, { status: 201 });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,41 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin } from "@/lib/session";
+
+export async function POST(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { title, content, category } = await req.json();
+  if (!title || !content) {
+    return NextResponse.json({ error: "Titre et contenu requis" }, { status: 400 });
+  }
+
+  try {
+    const message = await prisma.message.create({
+      data: {
+        title,
+        content,
+        category: category || null,
+      },
+    });
+    return NextResponse.json(message, { status: 201 });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function DELETE(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id } = await req.json();
+  if (!id) return NextResponse.json({ error: "id requis" }, { status: 400 });
+
+  try {
+    await prisma.message.delete({ where: { id } });
+    return NextResponse.json({ ok: true });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,64 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin } from "@/lib/session";
+
+export async function PATCH(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id, ...data } = await req.json();
+  if (!id) return NextResponse.json({ error: "id requis" }, { status: 400 });
+
+  const allowed = [
+    "name", "email", "isMuayThai", "isYoga", "role", "phone", "avatar"
+  ];
+
+  const updateData: any = {};
+  for (const key of allowed) {
+    if (data[key] !== undefined) updateData[key] = data[key];
+  }
+
+  if (updateData.email) updateData.email = updateData.email.toLowerCase();
+
+  try {
+    if (updateData.isMuayThai === true) {
+      await prisma.muayThaiProfile.upsert({
+        where: { userId: id },
+        update: {},
+        create: { userId: id },
+      });
+    }
+    if (updateData.isYoga === true) {
+      await prisma.yogaProfile.upsert({
+        where: { userId: id },
+        update: {},
+        create: { userId: id },
+      });
+    }
+
+    const user = await prisma.user.update({
+      where: { id },
+      data: updateData,
+    });
+    const { password: _, ...safeUser } = user;
+    return NextResponse.json(safeUser);
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function DELETE(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id } = await req.json();
+  if (!id) return NextResponse.json({ error: "id requis" }, { status: 400 });
+
+  try {
+    await prisma.user.delete({ where: { id } });
+    return NextResponse.json({ ok: true });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,62 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin } from "@/lib/session";
+import bcrypt from "bcryptjs";
+import { Role } from "@prisma/client";
+
+export async function GET(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  try {
+    const users = await prisma.user.findMany({
+      orderBy: { createdAt: "asc" },
+      include: {
+        muayThai: true,
+        yoga: true,
+        certificates: true,
+      },
+    });
+    return NextResponse.json(users);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { name, email, password, isMuayThai, isYoga, role } = await req.json();
+
+  if (!name || !email || !password) {
+    return NextResponse.json({ error: "Nom, email et mot de passe requis" }, { status: 400 });
+  }
+
+  const existing = await prisma.user.findUnique({ where: { email: email.toLowerCase() } });
+  if (existing) {
+    return NextResponse.json({ error: "Un compte avec cet email existe déjà" }, { status: 400 });
+  }
+
+  try {
+    const hashed = await bcrypt.hash(password, 10);
+    const user = await prisma.user.create({
+      data: {
+        name,
+        email: email.toLowerCase(),
+        password: hashed,
+        role: (role as Role) || "MEMBER",
+        isMuayThai: !!isMuayThai,
+        isYoga: !!isYoga,
+        muayThai: isMuayThai ? { create: {} } : undefined,
+        yoga: isYoga ? { create: {} } : undefined,
+      },
+    });
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const { password: _, ...safeUser } = user;
+    return NextResponse.json(safeUser, { status: 201 });
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,33 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin } from "@/lib/session";
+
+export async function PATCH(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { userId, sessionsToAdd, sessionsToRemove } = await req.json();
+  if (!userId) return NextResponse.json({ error: "userId requis" }, { status: 400 });
+
+  try {
+    const profile = await prisma.yogaProfile.upsert({
+      where: { userId },
+      update: {},
+      create: { userId },
+    });
+
+    let newCount = profile.sessionsRemaining;
+    if (sessionsToAdd) newCount += Number(sessionsToAdd);
+    if (sessionsToRemove) newCount = Math.max(0, newCount - Number(sessionsToRemove));
+
+    const updated = await prisma.yogaProfile.update({
+      where: { id: profile.id },
+      data: { sessionsRemaining: newCount },
+    });
+
+    return NextResponse.json(updated);
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,41 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin } from "@/lib/session";
+
+export async function PATCH(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id, name, numberOfSessions, priceTotal, isActive } = await req.json();
+  if (!id) return NextResponse.json({ error: "id requis" }, { status: 400 });
+
+  try {
+    const tier = await prisma.yogaTier.update({
+      where: { id },
+      data: {
+        ...(name !== undefined ? { name } : {}),
+        ...(numberOfSessions !== undefined ? { numberOfSessions: Number(numberOfSessions) } : {}),
+        ...(priceTotal !== undefined ? { priceTotal: Number(priceTotal) } : {}),
+        ...(isActive !== undefined ? { isActive } : {}),
+      },
+    });
+    return NextResponse.json(tier);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function DELETE(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id } = await req.json();
+  if (!id) return NextResponse.json({ error: "id requis" }, { status: 400 });
+
+  try {
+    await prisma.yogaTier.delete({ where: { id } });
+    return NextResponse.json({ ok: true });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,34 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin } from "@/lib/session";
+
+export async function GET(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  try {
+    const tiers = await prisma.yogaTier.findMany({ orderBy: { numberOfSessions: "asc" } });
+    return NextResponse.json(tiers);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { name, numberOfSessions, priceTotal } = await req.json();
+  if (!name || !numberOfSessions || !priceTotal) {
+    return NextResponse.json({ error: "Champs requis" }, { status: 400 });
+  }
+
+  try {
+    const tier = await prisma.yogaTier.create({
+      data: { name, numberOfSessions: Number(numberOfSessions), priceTotal: Number(priceTotal) },
+    });
+    return NextResponse.json(tier, { status: 201 });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,6 @@
+import NextAuth from "next-auth";
+import { authOptions } from "@/lib/auth";
+
+const handler = NextAuth(authOptions);
+
+export { handler as GET, handler as POST };
@@ -0,0 +1,69 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin, requireAuth } from "@/lib/session";
+import { CertificateStatus } from "@prisma/client";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  try {
+    if (session.user.role === "ADMIN") {
+      const certificates = await prisma.certificate.findMany({
+        orderBy: { createdAt: "desc" },
+        include: { user: { select: { id: true, name: true, email: true } } },
+      });
+      return NextResponse.json(certificates);
+    }
+
+    const certs = await prisma.certificate.findMany({
+      where: { userId: session.user.id },
+      orderBy: { createdAt: "desc" },
+    });
+    return NextResponse.json(certs);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  const { fileUrl } = await req.json();
+  if (!fileUrl) return NextResponse.json({ error: "Fichier requis" }, { status: 400 });
+
+  try {
+    const cert = await prisma.certificate.create({
+      data: {
+        userId: session.user.id,
+        fileUrl,
+      },
+    });
+    return NextResponse.json(cert, { status: 201 });
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function PATCH(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id, status } = await req.json();
+  if (!id || !status) return NextResponse.json({ error: "id et status requis" }, { status: 400 });
+
+  try {
+    const cert = await prisma.certificate.update({
+      where: { id },
+      data: {
+        status: status as CertificateStatus,
+        reviewedAt: new Date(),
+      },
+    });
+    return NextResponse.json(cert);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,62 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin, requireAuth } from "@/lib/session";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  try {
+    const homework = await prisma.homework.findMany({
+      orderBy: { createdAt: "desc" },
+      where: session.user.role === "ADMIN" ? {} : {
+        OR: [
+          { userId: null },
+          { userId: session.user.id },
+        ],
+      },
+    });
+    return NextResponse.json(homework);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { title, description, videoUrl, userId } = await req.json();
+  if (!title || !description) {
+    return NextResponse.json({ error: "Titre et description requis" }, { status: 400 });
+  }
+
+  try {
+    const homework = await prisma.homework.create({
+      data: {
+        title,
+        description,
+        videoUrl: videoUrl || null,
+        userId: userId || null,
+      },
+    });
+    return NextResponse.json(homework, { status: 201 });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function DELETE(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { id } = await req.json();
+  if (!id) return NextResponse.json({ error: "id requis" }, { status: 400 });
+
+  try {
+    await prisma.homework.delete({ where: { id } });
+    return NextResponse.json({ ok: true });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,29 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAuth } from "@/lib/session";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  const user = await prisma.user.findUnique({
+    where: { id: session.user.id },
+    include: {
+      muayThai: {
+        include: {
+          sessions: { orderBy: { date: "desc" } },
+        },
+      },
+      yoga: {
+        include: {
+          attendances: { orderBy: { date: "desc" } },
+        },
+      },
+      certificates: { orderBy: { createdAt: "desc" } },
+    },
+  });
+
+  if (!user) return NextResponse.json({ error: "Utilisateur introuvable" }, { status: 404 });
+
+  return NextResponse.json(user);
+}
@@ -0,0 +1,72 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin, requireAuth } from "@/lib/session";
+import { MediaVisibility, MediaType } from "@prisma/client";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) {
+    return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+  }
+
+  const orderBy = "desc";
+  try {
+    const media = await prisma.media.findMany({
+      orderBy: { createdAt: orderBy as "desc" },
+    });
+    return NextResponse.json(media);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) {
+    return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+  }
+
+  const body = await req.json();
+  const { title, description, url, type, visibility } = body;
+
+  if (!title || !url) {
+    return NextResponse.json({ error: "Titre et URL requis" }, { status: 400 });
+  }
+
+  try {
+    const media = await prisma.media.create({
+      data: {
+        title,
+        description: description || null,
+        url,
+        type: (type as MediaType) || "PHOTO",
+        visibility: (visibility as MediaVisibility) || "MEMBERS_ONLY",
+        uploadedById: admin.user.id,
+      },
+    });
+    return NextResponse.json(media, { status: 201 });
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function DELETE(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) {
+    return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+  }
+
+  const { id } = await req.json();
+  if (!id) {
+    return NextResponse.json({ error: "id requis" }, { status: 400 });
+  }
+
+  try {
+    await prisma.media.delete({ where: { id } });
+    return NextResponse.json({ ok: true });
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,55 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAuth } from "@/lib/session";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  try {
+    const messages = await prisma.message.findMany({
+      orderBy: { createdAt: "desc" },
+      include: {
+        readBy: {
+          where: { userId: session.user.id },
+        },
+      },
+    });
+
+    const result = messages.map((m) => ({
+      ...m,
+      isRead: m.readBy.length > 0,
+    }));
+
+    return NextResponse.json(result);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  const { messageId } = await req.json();
+  if (!messageId) return NextResponse.json({ error: "messageId requis" }, { status: 400 });
+
+  try {
+    await prisma.messageRead.upsert({
+      where: {
+        messageId_userId: {
+          messageId,
+          userId: session.user.id,
+        },
+      },
+      update: {},
+      create: {
+        messageId,
+        userId: session.user.id,
+      },
+    });
+    return NextResponse.json({ ok: true });
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,61 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAuth } from "@/lib/session";
+
+export async function POST(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  const { jumpRopeTime, burpee100Time, notes } = await req.json();
+
+  if (!jumpRopeTime && !burpee100Time) {
+    return NextResponse.json({ error: "Au moins un chrono requis" }, { status: 400 });
+  }
+
+  try {
+    const profile = await prisma.muayThaiProfile.upsert({
+      where: { userId: session.user.id },
+      update: {},
+      create: { userId: session.user.id },
+    });
+
+    const sessionEntry = await prisma.trainingSession.create({
+      data: {
+        profileId: profile.id,
+        jumpRopeTime: jumpRopeTime ? Number(jumpRopeTime) : null,
+        burpee100Time: burpee100Time ? Number(burpee100Time) : null,
+        notes: notes || null,
+      },
+    });
+
+    // Mettre à jour les meilleurs temps
+    if (jumpRopeTime && profile.jumpRopeBestTime === null) {
+      await prisma.muayThaiProfile.update({
+        where: { id: profile.id },
+        data: { jumpRopeBestTime: Number(jumpRopeTime) },
+      });
+    } else if (jumpRopeTime && Number(jumpRopeTime) < (profile.jumpRopeBestTime || Infinity)) {
+      await prisma.muayThaiProfile.update({
+        where: { id: profile.id },
+        data: { jumpRopeBestTime: Number(jumpRopeTime) },
+      });
+    }
+
+    if (burpee100Time && profile.burpee100BestTime === null) {
+      await prisma.muayThaiProfile.update({
+        where: { id: profile.id },
+        data: { burpee100BestTime: Number(burpee100Time) },
+      });
+    } else if (burpee100Time && Number(burpee100Time) < (profile.burpee100BestTime || Infinity)) {
+      await prisma.muayThaiProfile.update({
+        where: { id: profile.id },
+        data: { burpee100BestTime: Number(burpee100Time) },
+      });
+    }
+
+    return NextResponse.json(sessionEntry, { status: 201 });
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
@@ -0,0 +1,47 @@
+import { NextRequest, NextResponse } from "next/server";
+import { getSession } from "@/lib/session";
+import { writeFile, mkdir } from "fs/promises";
+import path from "path";
+import { sanitizeFilename } from "@/lib/upload";
+
+function getUploadDirFar(root: string) {
+  const dir = process.env.UPLOAD_DIR || path.join(process.cwd(), "public", "uploads");
+  return path.join(dir, root.replace(/^\//, ""));
+}
+
+export async function POST(req: NextRequest) {
+  const session = await getSession();
+  if (!session) {
+    return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+  }
+
+  try {
+    const formData = await req.formData();
+    const file = formData.get("file") as File | null;
+    const subdirRaw = (formData.get("subdir") as string) || "";
+    const subdir = subdirRaw.replace(/[^a-zA-Z0-9_/-]/g, "");
+
+    if (!file) {
+      return NextResponse.json({ error: "Aucun fichier fourni" }, { status: 400 });
+    }
+
+    const originalName = sanitizeFilename(file.name);
+    const timestamp = Date.now();
+    const ext = path.extname(originalName) || ".bin";
+    const base = path.basename(originalName, ext);
+    const filename = `${timestamp}-${base}${ext}`;
+
+    const targetDir = getUploadDirFar(subdir);
+    await mkdir(targetDir, { recursive: true });
+
+    const bytes = Buffer.from(await file.arrayBuffer());
+    await writeFile(path.join(targetDir, filename), bytes);
+
+    const publicPath = `/uploads${subdir ? "/" + subdir : ""}/${filename}`;
+
+    return NextResponse.json({ url: publicPath, filename }, { status: 200 });
+  } catch (error) {
+    console.error("Upload error:", error);
+    return NextResponse.json({ error: "Erreur lors de l'upload" }, { status: 500 });
+  }
+}
@@ -0,0 +1,65 @@
+import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { requireAdmin, requireAuth } from "@/lib/session";
+
+export async function GET(req: NextRequest) {
+  const session = await requireAuth();
+  if (!session) return NextResponse.json({ error: "Non autorisé" }, { status: 401 });
+
+  try {
+    if (session.user.role === "ADMIN") {
+      const attendances = await prisma.yogaAttendance.findMany({
+        orderBy: { date: "desc" },
+        include: { profile: { include: { user: { select: { id: true, name: true, email: true } } } } },
+      });
+      return NextResponse.json(attendances);
+    }
+
+    const profile = await prisma.yogaProfile.findUnique({
+      where: { userId: session.user.id },
+      include: { attendances: { orderBy: { date: "desc" } } },
+    });
+    if (!profile) return NextResponse.json({ error: "Profil yoga introuvable" }, { status: 404 });
+    return NextResponse.json(profile);
+  } catch {
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}
+
+export async function POST(req: NextRequest) {
+  const admin = await requireAdmin();
+  if (!admin) return NextResponse.json({ error: "Admin requis" }, { status: 403 });
+
+  const { userId, pricePaid, notes } = await req.json();
+  if (!userId) return NextResponse.json({ error: "userId requis" }, { status: 400 });
+
+  try {
+    const profile = await prisma.yogaProfile.upsert({
+      where: { userId },
+      update: {},
+      create: { userId },
+    });
+
+    if (profile.sessionsRemaining <= 0) {
+      return NextResponse.json({ error: "Le membre n'a plus de séances restantes" }, { status: 400 });
+    }
+
+    const attendance = await prisma.yogaAttendance.create({
+      data: {
+        profileId: profile.id,
+        pricePaid: pricePaid ? Number(pricePaid) : null,
+        notes: notes || null,
+      },
+    });
+
+    await prisma.yogaProfile.update({
+      where: { id: profile.id },
+      data: { sessionsRemaining: { decrement: 1 } },
+    });
+
+    return NextResponse.json(attendance, { status: 201 });
+  } catch (error) {
+    console.error(error);
+    return NextResponse.json({ error: "Erreur" }, { status: 500 });
+  }
+}