feat: Wabenhain Honig-Shop Anwendung

Vollstaendige Next.js/Prisma-E-Commerce-Anwendung fuer eine Imkerei:
Shop, Warenkorb, Stripe-Checkout, Kundenkonto mit 2FA, Admin-Bereich
(Produkte, Ernten, Chargen, Bestellungen, Gutscheine, admin-editierbare
Website-Inhalte), i18n (DE/EN), Rate-Limiting/CSP/Audit-Log-Haertung,
PostgreSQL- und MySQL-Unterstuetzung ueber austauschbare Prisma-
Treiber-Adapter, Unit-/Komponenten-/E2E-Tests.

src/app/api/newsletter/confirm/route.ts

@@ -0,0 +1,26 @@
+import { NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { getBaseUrl } from "@/lib/url";
+import { ensureNewsletterDiscountCode } from "@/lib/newsletter-discount";
+
+export async function GET(request: Request) {
+  const token = new URL(request.url).searchParams.get("token");
+  const baseUrl = getBaseUrl();
+
+  if (!token) {
+    return NextResponse.redirect(`${baseUrl}/newsletter-bestaetigt?status=invalid`);
+  }
+
+  const subscriber = await prisma.newsletterSubscriber.findUnique({ where: { confirmationToken: token } });
+  if (!subscriber) {
+    return NextResponse.redirect(`${baseUrl}/newsletter-bestaetigt?status=invalid`);
+  }
+
+  await prisma.newsletterSubscriber.update({
+    where: { id: subscriber.id },
+    data: { confirmed: true, unsubscribedAt: null },
+  });
+  await ensureNewsletterDiscountCode();
+
+  return NextResponse.redirect(`${baseUrl}/newsletter-bestaetigt?status=ok`);
+}

src/app/api/newsletter/route.ts

@@ -0,0 +1,54 @@
+import { NextResponse } from "next/server";
+import { randomBytes } from "node:crypto";
+import { prisma } from "@/lib/prisma";
+import { newsletterSchema } from "@/lib/validation";
+import { rateLimit, getClientIp } from "@/lib/rate-limit";
+import { sendMail } from "@/lib/mail";
+import { newsletterConfirmEmail } from "@/lib/email-templates";
+import { getBaseUrl } from "@/lib/url";
+import { verifyTurnstileToken } from "@/lib/turnstile";
+import { getLocale } from "@/i18n/locale";
+
+export async function POST(request: Request) {
+  const ip = await getClientIp();
+  if (!rateLimit(`newsletter:${ip}`, 5, 60 * 60 * 1000)) {
+    return NextResponse.json(
+      { error: "Zu viele Anfragen. Bitte versuche es später erneut." },
+      { status: 429 }
+    );
+  }
+
+  const body = await request.json().catch(() => null);
+  const parsed = newsletterSchema.safeParse(body);
+
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Ungültige E-Mail-Adresse." }, { status: 400 });
+  }
+
+  const turnstileToken = typeof body?.turnstileToken === "string" ? body.turnstileToken : null;
+  if (!(await verifyTurnstileToken(turnstileToken, ip))) {
+    return NextResponse.json({ error: "Die Sicherheitsprüfung ist fehlgeschlagen." }, { status: 400 });
+  }
+
+  const existing = await prisma.newsletterSubscriber.findUnique({ where: { email: parsed.data.email } });
+
+  if (existing?.confirmed) {
+    // Bereits bestaetigter Abonnent meldet sich erneut an — keine neue Mail
+    // noetig, aber auch keine Fehlermeldung (verraet sonst, dass die
+    // E-Mail-Adresse bereits existiert).
+    return NextResponse.json({ success: true });
+  }
+
+  const token = randomBytes(24).toString("hex");
+  const subscriber = await prisma.newsletterSubscriber.upsert({
+    where: { email: parsed.data.email },
+    create: { email: parsed.data.email, confirmationToken: token },
+    update: { confirmationToken: token, unsubscribedAt: null },
+  });
+
+  const confirmUrl = `${getBaseUrl()}/api/newsletter/confirm?token=${subscriber.confirmationToken}`;
+  const { subject, html, text } = await newsletterConfirmEmail(await getLocale(), confirmUrl);
+  await sendMail({ to: parsed.data.email, subject, html, text });
+
+  return NextResponse.json({ success: true });
+}

src/app/api/newsletter/unsubscribe/route.ts

@@ -0,0 +1,24 @@
+import { NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { getBaseUrl } from "@/lib/url";
+
+export async function GET(request: Request) {
+  const token = new URL(request.url).searchParams.get("token");
+  const baseUrl = getBaseUrl();
+
+  if (!token) {
+    return NextResponse.redirect(`${baseUrl}/newsletter-bestaetigt?status=invalid`);
+  }
+
+  const subscriber = await prisma.newsletterSubscriber.findUnique({ where: { confirmationToken: token } });
+  if (!subscriber) {
+    return NextResponse.redirect(`${baseUrl}/newsletter-bestaetigt?status=invalid`);
+  }
+
+  await prisma.newsletterSubscriber.update({
+    where: { id: subscriber.id },
+    data: { unsubscribedAt: new Date() },
+  });
+
+  return NextResponse.redirect(`${baseUrl}/newsletter-bestaetigt?status=unsubscribed`);
+}