18 lines
1.1 KiB
TypeScript
18 lines
1.1 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { requireUser } from "@/lib/auth";
|
|
import { db } from "@/lib/db";
|
|
import { createWebhookSecret, webhookSecretHash } from "@/lib/webhook";
|
|
import { requireSameOrigin } from "@/lib/security";
|
|
|
|
export async function POST(request: Request, { params }: { params: Promise<{ id: string }> }) {
|
|
try {
|
|
requireSameOrigin(request); const user = await requireUser(); const { id: rawId } = await params; const id = Number(rawId);
|
|
const source = db.prepare("SELECT id FROM sources WHERE id=? AND user_id=?").get(id, user.id);
|
|
if (!source) return NextResponse.json({ error: "Not found" }, { status: 404 });
|
|
const secret = createWebhookSecret();
|
|
db.prepare("UPDATE sources SET webhook_secret_hash=? WHERE id=?").run(webhookSecretHash(secret), id);
|
|
const publicOrigin = (process.env.NEXT_PUBLIC_APP_URL || new URL(request.url).origin).replace(/\/$/, "");
|
|
return NextResponse.json({ url: `${publicOrigin}/api/sync/webhook/${id}/${secret}` });
|
|
} catch { return NextResponse.json({ error: "Unauthorized" }, { status: 401 }); }
|
|
}
|