Comprehensive comparison for technology in applications

---
// src/pages/api/products/[id].ts
// RESTful API endpoint for product management with authentication

import type { APIRoute } from 'astro';

interface Product {
  id: string;
  name: string;
  price: number;
  stock: number;
  category: string;
  updatedAt: string;
}

// Simulated database - in production, use a real database
const products = new Map<string, Product>([
  ['1', { id: '1', name: 'Laptop', price: 999.99, stock: 15, category: 'Electronics', updatedAt: new Date().toISOString() }],
  ['2', { id: '2', name: 'Mouse', price: 29.99, stock: 50, category: 'Accessories', updatedAt: new Date().toISOString() }],
]);

// Validate API key from request headers
function validateApiKey(request: Request): boolean {
  const apiKey = request.headers.get('X-API-Key');
  const validKey = import.meta.env.API_SECRET_KEY || 'dev-secret-key';
  return apiKey === validKey;
}

// GET: Retrieve a product by ID
export const GET: APIRoute = async ({ params, request }) => {
  try {
    const { id } = params;
    
    if (!id) {
      return new Response(JSON.stringify({ error: 'Product ID is required' }), {
        status: 400,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    const product = products.get(id);
    
    if (!product) {
      return new Response(JSON.stringify({ error: 'Product not found' }), {
        status: 404,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    return new Response(JSON.stringify({ data: product }), {
      status: 200,
      headers: { 'Content-Type': 'application/json' }
    });
  } catch (error) {
    return new Response(JSON.stringify({ error: 'Internal server error' }), {
      status: 500,
      headers: { 'Content-Type': 'application/json' }
    });
  }
};

// PUT: Update a product (requires authentication)
export const PUT: APIRoute = async ({ params, request }) => {
  try {
    // Authenticate request
    if (!validateApiKey(request)) {
      return new Response(JSON.stringify({ error: 'Unauthorized' }), {
        status: 401,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    const { id } = params;
    
    if (!id) {
      return new Response(JSON.stringify({ error: 'Product ID is required' }), {
        status: 400,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    const product = products.get(id);
    
    if (!product) {
      return new Response(JSON.stringify({ error: 'Product not found' }), {
        status: 404,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    // Parse and validate request body
    const updates = await request.json();
    
    if (updates.price !== undefined && (typeof updates.price !== 'number' || updates.price < 0)) {
      return new Response(JSON.stringify({ error: 'Invalid price value' }), {
        status: 400,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    if (updates.stock !== undefined && (typeof updates.stock !== 'number' || updates.stock < 0)) {
      return new Response(JSON.stringify({ error: 'Invalid stock value' }), {
        status: 400,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    // Update product
    const updatedProduct: Product = {
      ...product,
      ...updates,
      id: product.id,
      updatedAt: new Date().toISOString()
    };
    
    products.set(id, updatedProduct);

    return new Response(JSON.stringify({ data: updatedProduct }), {
      status: 200,
      headers: { 'Content-Type': 'application/json' }
    });
  } catch (error) {
    return new Response(JSON.stringify({ error: 'Invalid request body' }), {
      status: 400,
      headers: { 'Content-Type': 'application/json' }
    });
  }
};

// DELETE: Remove a product (requires authentication)
export const DELETE: APIRoute = async ({ params, request }) => {
  try {
    if (!validateApiKey(request)) {
      return new Response(JSON.stringify({ error: 'Unauthorized' }), {
        status: 401,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    const { id } = params;
    
    if (!id || !products.has(id)) {
      return new Response(JSON.stringify({ error: 'Product not found' }), {
        status: 404,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    products.delete(id);

    return new Response(JSON.stringify({ message: 'Product deleted successfully' }), {
      status: 200,
      headers: { 'Content-Type': 'application/json' }
    });
  } catch (error) {
    return new Response(JSON.stringify({ error: 'Internal server error' }), {
      status: 500,
      headers: { 'Content-Type': 'application/json' }
    });
  }
};
---