Create an Attendance

//native

type Personio = {

	clientId: string

	clientSecret: string

}

/**

 * Create an Attendance

 * This endpoint is responsible for adding attendance data for the company employees. It is possible to add attendances for one or many employees at the same time. The payload sent on the request should be a list of attendance periods, in the form of an array containing attendance period objects.

 */

export async function main(

	auth: Personio,

	body: {

		attendances?: {

			employee: number

			date: string

			start_time: string

			end_time?: string

			break: number

			comment?: string

			project_id?: number

		}[]

		skip_approval?: false | true

	},

	X_Personio_Partner_ID?: string,

	X_Personio_App_ID?: string

) {

	const url = new URL(`https://api.personio.de/v1/company/attendances`)

	const response = await fetch(url, {

		method: 'POST',

		headers: {

			...(X_Personio_Partner_ID ? { 'X-Personio-Partner-ID': X_Personio_Partner_ID } : {}),

			...(X_Personio_App_ID ? { 'X-Personio-App-ID': X_Personio_App_ID } : {}),

			'Content-Type': 'application/json',

			Authorization: 'Bearer ' + (await getOAuthToken(auth, 'https://api.personio.de/oauth2/token'))

		},

		body: JSON.stringify(body)

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`${response.status} ${text}`)

	}

	return await response.json()

}

async function getOAuthToken(auth: Personio, tokenUrl: string): Promise<string> {

	const params = new URLSearchParams({

		grant_type: 'client_credentials',

		client_id: auth.clientId,

		client_secret: auth.clientSecret

	})

	const response = await fetch(tokenUrl, {

		method: 'POST',

		headers: {

			Authorization: 'Basic ' + btoa(`${auth.clientId}:${auth.clientSecret}`),

			'Content-Type': 'application/x-www-form-urlencoded'

		},

		body: params.toString()

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`OAuth token request failed: ${response.status} ${text}`)

	}

	const data = await response.json()

	return data.access_token

}