a7f63fb77a
- Replace ESLint with Biome for linting and formatting - Configure Biome with tabs, double quotes, and organized imports - Move all SQL/Drizzle queries from page.tsx files to data.ts files - Create new data.ts files for: ajustes, dashboard, relatorios/categorias - Update existing data.ts files: extrato, fatura (add lancamentos queries) - Remove all drizzle-orm imports from page.tsx files - Update README.md with new tooling info Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
63 lines
1.5 KiB
TypeScript
63 lines
1.5 KiB
TypeScript
/**
|
|
* DELETE /api/auth/device/tokens/[tokenId]
|
|
*
|
|
* Revoga um token de API específico.
|
|
* Requer sessão web autenticada.
|
|
*/
|
|
|
|
import { and, eq } from "drizzle-orm";
|
|
import { headers } from "next/headers";
|
|
import { NextResponse } from "next/server";
|
|
import { apiTokens } from "@/db/schema";
|
|
import { auth } from "@/lib/auth/config";
|
|
import { db } from "@/lib/db";
|
|
|
|
interface RouteParams {
|
|
params: Promise<{ tokenId: string }>;
|
|
}
|
|
|
|
export async function DELETE(_request: Request, { params }: RouteParams) {
|
|
try {
|
|
const { tokenId } = await params;
|
|
|
|
// Verificar autenticação via sessão web
|
|
const session = await auth.api.getSession({ headers: await headers() });
|
|
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: "Não autenticado" }, { status: 401 });
|
|
}
|
|
|
|
// Verificar se token pertence ao usuário
|
|
const token = await db.query.apiTokens.findFirst({
|
|
where: and(
|
|
eq(apiTokens.id, tokenId),
|
|
eq(apiTokens.userId, session.user.id),
|
|
),
|
|
});
|
|
|
|
if (!token) {
|
|
return NextResponse.json(
|
|
{ error: "Token não encontrado" },
|
|
{ status: 404 },
|
|
);
|
|
}
|
|
|
|
// Revogar token (soft delete)
|
|
await db
|
|
.update(apiTokens)
|
|
.set({ revokedAt: new Date() })
|
|
.where(eq(apiTokens.id, tokenId));
|
|
|
|
return NextResponse.json({
|
|
message: "Token revogado com sucesso",
|
|
tokenId,
|
|
});
|
|
} catch (error) {
|
|
console.error("[API] Error revoking device token:", error);
|
|
return NextResponse.json(
|
|
{ error: "Erro ao revogar token" },
|
|
{ status: 500 },
|
|
);
|
|
}
|
|
}
|