feat: implement resume management API with CRUD operations and database schema

- Added API routes for creating, retrieving, updating, and deleting resumes.
- Implemented database schema for resumes with necessary fields and policies.
- Created a Supabase server client for handling requests in API routes.
- Updated documentation to reflect new features and database setup instructions.
- Included error handling and user authentication checks in API endpoints.

Author: DongDuong2001

app/api/resumes/[id]/route.ts

@@ -0,0 +1,128 @@
+import { createRouteHandlerClient } from '@/lib/supabase-server'
+import { NextResponse } from 'next/server'
+import type { NextRequest } from 'next/server'
+
+export async function GET(
+  request: NextRequest,
+  { params }: { params: { id: string } }
+) {
+  try {
+    const supabase = createRouteHandlerClient(request)
+    
+    // Get current user
+    const { data: { user }, error: authError } = await supabase.auth.getUser()
+    
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const { data: resume, error } = await supabase
+      .from('resumes')
+      .select('*')
+      .eq('id', params.id)
+      .eq('user_id', user.id)
+      .single()
+
+    if (error) {
+      console.error('Error fetching resume:', error)
+      return NextResponse.json({ error: error.message }, { status: 404 })
+    }
+
+    return NextResponse.json({ resume })
+  } catch (error) {
+    console.error('Unexpected error:', error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}
+
+export async function PUT(
+  request: NextRequest,
+  { params }: { params: { id: string } }
+) {
+  try {
+    const supabase = createRouteHandlerClient(request)
+    
+    // Get current user
+    const { data: { user }, error: authError } = await supabase.auth.getUser()
+    
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const body = await request.json()
+    const {
+      title,
+      template,
+      personalInfo,
+      summary,
+      experience,
+      education,
+      skills,
+      certifications,
+      sectionOrder,
+      styleSettings,
+    } = body
+
+    // Update resume
+    const { data: resume, error } = await supabase
+      .from('resumes')
+      .update({
+        title,
+        template,
+        personal_info: personalInfo,
+        summary,
+        experience,
+        education,
+        skills,
+        certifications,
+        section_order: sectionOrder,
+        style_settings: styleSettings,
+      })
+      .eq('id', params.id)
+      .eq('user_id', user.id)
+      .select()
+      .single()
+
+    if (error) {
+      console.error('Error updating resume:', error)
+      return NextResponse.json({ error: error.message }, { status: 500 })
+    }
+
+    return NextResponse.json({ resume })
+  } catch (error) {
+    console.error('Unexpected error:', error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}
+
+export async function DELETE(
+  request: NextRequest,
+  { params }: { params: { id: string } }
+) {
+  try {
+    const supabase = createRouteHandlerClient(request)
+    
+    // Get current user
+    const { data: { user }, error: authError } = await supabase.auth.getUser()
+    
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const { error } = await supabase
+      .from('resumes')
+      .delete()
+      .eq('id', params.id)
+      .eq('user_id', user.id)
+
+    if (error) {
+      console.error('Error deleting resume:', error)
+      return NextResponse.json({ error: error.message }, { status: 500 })
+    }
+
+    return NextResponse.json({ success: true })
+  } catch (error) {
+    console.error('Unexpected error:', error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}

app/api/resumes/route.ts

@@ -0,0 +1,89 @@
+import { createRouteHandlerClient } from '@/lib/supabase-server'
+import { NextResponse } from 'next/server'
+import type { NextRequest } from 'next/server'
+
+export async function GET(request: NextRequest) {
+  try {
+    const supabase = createRouteHandlerClient(request)
+    
+    // Get current user
+    const { data: { user }, error: authError } = await supabase.auth.getUser()
+    
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    // Fetch all resumes for the user
+    const { data: resumes, error } = await supabase
+      .from('resumes')
+      .select('*')
+      .eq('user_id', user.id)
+      .order('updated_at', { ascending: false })
+
+    if (error) {
+      console.error('Error fetching resumes:', error)
+      return NextResponse.json({ error: error.message }, { status: 500 })
+    }
+
+    return NextResponse.json({ resumes })
+  } catch (error) {
+    console.error('Unexpected error:', error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}
+
+export async function POST(request: NextRequest) {
+  try {
+    const supabase = createRouteHandlerClient(request)
+    
+    // Get current user
+    const { data: { user }, error: authError } = await supabase.auth.getUser()
+    
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const body = await request.json()
+    const {
+      title,
+      template,
+      personalInfo,
+      summary,
+      experience,
+      education,
+      skills,
+      certifications,
+      sectionOrder,
+      styleSettings,
+    } = body
+
+    // Insert new resume
+    const { data: resume, error } = await supabase
+      .from('resumes')
+      .insert({
+        user_id: user.id,
+        title,
+        template,
+        personal_info: personalInfo,
+        summary,
+        experience,
+        education,
+        skills,
+        certifications,
+        section_order: sectionOrder,
+        style_settings: styleSettings,
+      })
+      .select()
+      .single()
+
+    if (error) {
+      console.error('Error creating resume:', error)
+      return NextResponse.json({ error: error.message }, { status: 500 })
+    }
+
+    return NextResponse.json({ resume })
+  } catch (error) {
+    console.error('Unexpected error:', error)
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
+  }
+}