feat(cra): live-wire CRA tab to POST /api/v1/cra/assess (proxy + useCRA)

CRA tab now computes the assessment live: useCRA POSTs the scenario findings through a new /api/v1/cra/* proxy to the backend mapper and merges the live mapping (CRA requirement, risk, measures, NIST/OWASP crosswalk) with the frontend scenario constants (full measure texts + cyber->safety cross-links, until those move server-side in step 2). Falls back to the static scenario if the backend is unreachable. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-14 07:30:00 +02:00
parent 34a678caef
commit ad83b8dc67
4 changed files with 164 additions and 7 deletions
@@ -0,0 +1,54 @@
+/**
+ * CRA API proxy — catch-all. Proxies /api/v1/cra/* to the Python backend
+ * (e.g. POST /api/v1/cra/assess, the standalone CRA risk-assessment endpoint).
+ */
+import { NextRequest, NextResponse } from 'next/server'
+
+const BACKEND_URL = process.env.BACKEND_URL || 'http://localhost:8000'
+
+async function forward(request: NextRequest, path: string[], method: 'GET' | 'POST') {
+  const pathStr = path.join('/')
+  const search = request.nextUrl.searchParams.toString()
+  const url = `${BACKEND_URL}/api/v1/cra/${pathStr}${search ? `?${search}` : ''}`
+
+  const init: RequestInit = {
+    method,
+    headers: { 'Content-Type': 'application/json' },
+    signal: AbortSignal.timeout(30000),
+  }
+  if (method === 'POST') {
+    try {
+      init.body = JSON.stringify(await request.json())
+    } catch {
+      init.body = '{}'
+    }
+  }
+
+  try {
+    const response = await fetch(url, init)
+    const text = await response.text()
+    if (!response.ok) {
+      return NextResponse.json(
+        { error: `Backend Error: ${response.status}`, details: text },
+        { status: response.status },
+      )
+    }
+    return new NextResponse(text, {
+      status: response.status,
+      headers: { 'Content-Type': 'application/json' },
+    })
+  } catch (error) {
+    console.error('CRA API proxy error:', error)
+    return NextResponse.json({ error: 'Verbindung zum Backend fehlgeschlagen' }, { status: 503 })
+  }
+}
+
+export async function GET(request: NextRequest, { params }: { params: Promise<{ path: string[] }> }) {
+  const { path } = await params
+  return forward(request, path, 'GET')
+}
+
+export async function POST(request: NextRequest, { params }: { params: Promise<{ path: string[] }> }) {
+  const { path } = await params
+  return forward(request, path, 'POST')
+}