complete new audit system

backend/dist/middleware/auth.js

@@ -7,8 +7,7 @@ exports.authenticate = authenticate;
 exports.requirePermission = requirePermission;
 exports.requireCustomerAccess = requireCustomerAccess;
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const client_1 = require("@prisma/client");
-const prisma = new client_1.PrismaClient();
+const prisma_js_1 = __importDefault(require("../lib/prisma.js"));
 async function authenticate(req, res, next) {
     const authHeader = req.headers.authorization;
     // Token aus Header oder Query-Parameter (für Downloads)
@@ -28,7 +27,7 @@ async function authenticate(req, res, next) {
         const decoded = jsonwebtoken_1.default.verify(token, process.env.JWT_SECRET || 'fallback-secret');
         // Prüfen ob Token durch Rechteänderung invalidiert wurde (nur für Mitarbeiter)
         if (decoded.userId && decoded.iat) {
-            const user = await prisma.user.findUnique({
+            const user = await prisma_js_1.default.user.findUnique({
                 where: { id: decoded.userId },
                 select: { tokenInvalidatedAt: true, isActive: true },
             });