Talqo Doc

curl "https://talqo.fr/api/job_offers?status=open&per_page=20" \
  -H "X-API-Key: <VOTRE_API_KEY>"

curl -X POST "https://talqo.fr/api/job_applications" \
  -H "X-API-Key: <VOTRE_API_KEY>" \
  -H "Origin: https://careers.mon-entreprise.com" \
  -F "job_offer_id=550e8400-e29b-41d4-a716-446655440000" \
  -F "first_name=Jean" \
  -F "last_name=Dupont" \
  -F "email=jean.dupont@example.com" \
  -F "phone=+33123456789" \
  -F "linkedin_url=https://linkedin.com/in/jeandupont" \
  -F "cover_letter=Je suis motive par ce poste et disponible rapidement." \
  -F "cv=@/chemin/vers/cv_jean_dupont.pdf;type=application/pdf"

X-API-Key: votre-clé-api-secrète

Authorization: Bearer votre-clé-api-secrète

HTTP/1.1 429 Too Many Requests
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 0
Retry-After: 37
Content-Type: application/json

{
  "status": "error",
  "data": null,
  "message": "Too many requests. Please retry later."
}

{
  "status": "error",
  "data": null,
  "message": "Description lisible de l'erreur"
}

curl "https://talqo.fr/api/job_offers?status=open&per_page=20" \
  -H "X-API-Key: <VOTRE_API_KEY>"

{
  "status": "success",
  "data": [
    {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "title": "Développeur Full Stack",
      "description": "# À propos du poste\n\nNous recherchons...",
      "location": "Paris, France",
      "job_type": "CDI",
      "published_at": "2024-01-15T10:00:00Z",
      "status": "open",
      "updated_at": "2024-01-15T10:00:00Z"
    }
  ],
  "pagination": {
    "page": 1,
    "per_page": 20,
    "total": 45,
    "total_pages": 3
  }
}

curl "https://talqo.fr/api/job_offers/550e8400-e29b-41d4-a716-446655440000" \
  -H "X-API-Key: <VOTRE_API_KEY>"

curl -X POST "https://talqo.fr/api/job_applications" \
  -H "X-API-Key: <VOTRE_API_KEY>" \
  -H "Origin: https://careers.mon-entreprise.com" \
  -F "job_offer_id=550e8400-e29b-41d4-a716-446655440000" \
  -F "first_name=Jean" \
  -F "last_name=Dupont" \
  -F "email=jean.dupont@example.com" \
  -F "phone=+33123456789" \
  -F "linkedin_url=https://linkedin.com/in/jeandupont" \
  -F "cover_letter=Je suis motive par ce poste et disponible rapidement." \
  -F "cv=@/chemin/vers/cv_jean_dupont.pdf;type=application/pdf"

HTTP/1.1 201 Created
Content-Type: application/json

{
  "status": "success",
  "data": {
    "application_id": "c3e5b1d6-4f77-4d3a-9e36-0e6fbbfb77c2",
    "candidate_id": "3d4b1c9b-1a2a-4f51-8a82-2a9f3a2b56aa",
    "status": "new",
    "created_at": "2024-01-15T10:00:00Z"
  }
}

HTTP/1.1 200 OK
Content-Type: application/json

{
  "status": "success",
  "data": {
    "application_id": "c3e5b1d6-4f77-4d3a-9e36-0e6fbbfb77c2",
    "candidate_id": "3d4b1c9b-1a2a-4f51-8a82-2a9f3a2b56aa",
    "status": "new",
    "created_at": "2024-01-15T10:00:00Z"
  },
  "message": "Application already exists"
}

curl "https://talqo.fr/api/job_applications/c3e5b1d6-4f77-4d3a-9e36-0e6fbbfb77c2" \
  -H "X-API-Key: <VOTRE_API_KEY>"

{
  "status": "success",
  "data": {
    "id": "c3e5b1d6-4f77-4d3a-9e36-0e6fbbfb77c2",
    "candidate_id": "3d4b1c9b-1a2a-4f51-8a82-2a9f3a2b56aa",
    "job_offer_id": "550e8400-e29b-41d4-a716-446655440000",
    "status": "in_progress",
    "source": "careers.mon-entreprise.com",
    "created_at": "2024-01-15T10:00:00Z",
    "updated_at": "2024-01-15T11:00:00Z"
  }
}

interface JobOffer {
  id: string;                  // uuid
  title: string;
  description: string;         // Markdown (CommonMark / GFM)
  location?: string | null;
  job_type?: string | null;
  published_at?: string | null; // ISO 8601
  status?: string;              // "open" | "closed" | "active" | "draft" | ...
  updated_at?: string | null;   // ISO 8601
}

// Transport unique : multipart/form-data
// Les champs sont à plat dans le FormData, "cv" est un vrai fichier.
interface CreateJobApplicationMultipartFields {
  job_offer_id: string;   // uuid (text field)
  first_name: string;
  last_name: string;
  email: string;          // normalisé en minuscules côté serveur
  cv: File | Blob;        // fichier binaire (PDF ou DOCX), <= 10 MB
  phone?: string;
  linkedin_url?: string;
  cover_letter?: string;  // lettre de motivation (texte libre)
  // source?: string      // IGNORÉ : déduit de Origin / Referer
}

interface CreateJobApplicationResponse {
  application_id: string;       // uuid
  candidate_id: string;         // uuid
  status: "new" | "rejected" | string; // "rejected" si auto-reject IA
  created_at: string;           // ISO 8601
}

interface JobApplication {
  id: string;                   // uuid
  candidate_id: string;         // uuid
  job_offer_id: string;         // uuid
  status: string;               // candidate_status
  source?: string;              // domaine (ex. "careers.mon-entreprise.com")
  created_at: string;           // ISO 8601
  updated_at: string;           // ISO 8601
}

// app/api/career/apply/route.ts
import { NextRequest, NextResponse } from 'next/server';

const TALQO_API_BASE = 'https://talqo.fr/api';
const TALQO_API_KEY = process.env.TALQO_API_KEY!;

export async function POST(request: NextRequest) {
  const incoming = await request.formData();

  // Reconstitue un FormData destiné à Talqo : le CV reste un fichier binaire.
  const out = new FormData();
  for (const key of ['job_offer_id', 'first_name', 'last_name', 'email', 'phone', 'linkedin_url', 'cover_letter'] as const) {
    const v = incoming.get(key);
    if (typeof v === 'string' && v) out.append(key, v);
  }
  const cv = incoming.get('cv');
  if (!(cv instanceof File)) {
    return NextResponse.json({ error: 'cv file is required' }, { status: 400 });
  }
  out.append('cv', cv, cv.name);

  const res = await fetch(`${TALQO_API_BASE}/job_applications`, {
    method: 'POST',
    headers: {
      // ⚠️ Ne pas fixer Content-Type : fetch ajoute le bon boundary multipart.
      'X-API-Key': TALQO_API_KEY,
      'Origin': request.headers.get('origin') ?? '',
    },
    body: out,
  });

  const body = await res.json();
  return NextResponse.json(body, { status: res.status });
}

// Envoie le fichier tel quel au proxy ; le proxy relaie vers talqo.fr.
// Payload allégé, pas de CPU inutile côté client.
async function submitApplication({ jobOfferId, firstName, lastName, email, phone, coverLetter, cvFile }) {
  const form = new FormData();
  form.append('job_offer_id', jobOfferId);
  form.append('first_name', firstName);
  form.append('last_name', lastName);
  form.append('email', email.toLowerCase());
  if (phone) form.append('phone', phone);
  if (coverLetter) form.append('cover_letter', coverLetter);
  form.append('cv', cvFile, cvFile.name);

  const res = await fetch('/api/career/apply', {
    method: 'POST',
    body: form, // ⚠️ pas de Content-Type manuel — le navigateur gère le boundary.
  });
  if (!res.ok) throw new Error((await res.json()).message);
  return res.json();
}

function talqo_submit_application(string $job_offer_id, array $candidate, string $cv_path): array {
    // WordPress : on compose soi-même le multipart pour pouvoir envoyer le CV en binaire.
    $boundary = wp_generate_password(24, false);
    $eol = "\r\n";
    $body = '';

    $fields = array_merge(['job_offer_id' => $job_offer_id], $candidate);
    // $candidate attendu : ['first_name'=>..., 'last_name'=>..., 'email'=>..., 'phone'=>..., 'linkedin_url'=>..., 'cover_letter'=>...]
    foreach ($fields as $name => $value) {
        if ($value === null || $value === '') continue;
        $body .= "--{$boundary}{$eol}";
        $body .= "Content-Disposition: form-data; name=\"{$name}\"{$eol}{$eol}";
        $body .= $value . $eol;
    }

    $cv_bytes = file_get_contents($cv_path);
    $filename = basename($cv_path);
    $body .= "--{$boundary}{$eol}";
    $body .= "Content-Disposition: form-data; name=\"cv\"; filename=\"{$filename}\"{$eol}";
    $body .= "Content-Type: application/pdf{$eol}{$eol}";
    $body .= $cv_bytes . $eol;
    $body .= "--{$boundary}--{$eol}";

    $response = wp_remote_post('https://talqo.fr/api/job_applications', [
        'timeout' => 30,
        'headers' => [
            'X-API-Key'    => getenv('TALQO_API_KEY'),
            'Content-Type' => "multipart/form-data; boundary={$boundary}",
            'Origin'       => home_url(),
        ],
        'body' => $body,
    ]);

    if (is_wp_error($response)) {
        return ['error' => $response->get_error_message()];
    }
    return json_decode(wp_remote_retrieve_body($response), true);
}