refactor(core): move app para src e padroniza estrutura

src/app/api/auth/device/tokens/[tokenId]/route.ts

@@ -0,0 +1,55 @@
+import { and, eq } from "drizzle-orm";
+import { headers } from "next/headers";
+import { NextResponse } from "next/server";
+import { tokensApi } from "@/db/schema";
+import { auth } from "@/shared/lib/auth/config";
+import { db } from "@/shared/lib/db";
+
+interface RouteParams {
+	params: Promise<{ tokenId: string }>;
+}
+
+export async function DELETE(_request: Request, { params }: RouteParams) {
+	try {
+		const { tokenId } = await params;
+
+		// Verificar autenticação via sessão web
+		const session = await auth.api.getSession({ headers: await headers() });
+
+		if (!session?.user) {
+			return NextResponse.json({ error: "Não autenticado" }, { status: 401 });
+		}
+
+		// Verificar se token pertence ao usuário
+		const token = await db.query.tokensApi.findFirst({
+			where: and(
+				eq(tokensApi.id, tokenId),
+				eq(tokensApi.userId, session.user.id),
+			),
+		});
+
+		if (!token) {
+			return NextResponse.json(
+				{ error: "Token não encontrado" },
+				{ status: 404 },
+			);
+		}
+
+		// Revogar token (soft delete)
+		await db
+			.update(tokensApi)
+			.set({ revokedAt: new Date() })
+			.where(eq(tokensApi.id, tokenId));
+
+		return NextResponse.json({
+			message: "Token revogado com sucesso",
+			tokenId,
+		});
+	} catch (error) {
+		console.error("[API] Error revoking device token:", error);
+		return NextResponse.json(
+			{ error: "Erro ao revogar token" },
+			{ status: 500 },
+		);
+	}
+}

src/app/api/auth/device/tokens/route.ts

@@ -0,0 +1,42 @@
+import { and, desc, eq, isNull } from "drizzle-orm";
+import { headers } from "next/headers";
+import { NextResponse } from "next/server";
+import { tokensApi } from "@/db/schema";
+import { auth } from "@/shared/lib/auth/config";
+import { db } from "@/shared/lib/db";
+
+export async function GET() {
+	try {
+		// Verificar autenticação via sessão web
+		const session = await auth.api.getSession({ headers: await headers() });
+
+		if (!session?.user) {
+			return NextResponse.json({ error: "Não autenticado" }, { status: 401 });
+		}
+
+		// Buscar tokens ativos do usuário
+		const activeTokens = await db
+			.select({
+				id: tokensApi.id,
+				name: tokensApi.name,
+				tokenPrefix: tokensApi.tokenPrefix,
+				lastUsedAt: tokensApi.lastUsedAt,
+				lastUsedIp: tokensApi.lastUsedIp,
+				expiresAt: tokensApi.expiresAt,
+				createdAt: tokensApi.createdAt,
+			})
+			.from(tokensApi)
+			.where(
+				and(eq(tokensApi.userId, session.user.id), isNull(tokensApi.revokedAt)),
+			)
+			.orderBy(desc(tokensApi.createdAt));
+
+		return NextResponse.json({ tokens: activeTokens });
+	} catch (error) {
+		console.error("[API] Error listing device tokens:", error);
+		return NextResponse.json(
+			{ error: "Erro ao listar tokens" },
+			{ status: 500 },
+		);
+	}
+}