KVideo/app/api/auth/accounts/[accountId]/route.ts

import { NextRequest, NextResponse } from 'next/server';
import {
  deleteManagedAccount,
  getPublicAuthConfig,
  getServerSession,
  isSuperAdminSession,
  updateManagedAccount,
} from '@/lib/server/auth';

export const runtime = 'edge';

async function requireManagedSuperAdmin(request: NextRequest) {
  const session = await getServerSession(request);
  if (!session) {
    return { error: NextResponse.json({ error: 'Authentication required' }, { status: 401 }) };
  }

  if (!isSuperAdminSession(session)) {
    return { error: NextResponse.json({ error: 'Super admin required' }, { status: 403 }) };
  }

  const config = await getPublicAuthConfig();
  if (config.loginMode !== 'managed') {
    return { error: NextResponse.json({ error: 'Managed account mode is not enabled' }, { status: 400 }) };
  }

  return { session };
}

export async function PATCH(
  request: NextRequest,
  context: { params: Promise<{ accountId: string }> }
) {
  const auth = await requireManagedSuperAdmin(request);
  if ('error' in auth) {
    return auth.error;
  }

  try {
    const { accountId } = await context.params;
    const body = await request.json();
    const account = await updateManagedAccount(accountId, body);
    return NextResponse.json({ account });
  } catch (error) {
    return NextResponse.json(
      { error: error instanceof Error ? error.message : 'Failed to update account' },
      { status: 400 }
    );
  }
}

export async function DELETE(
  request: NextRequest,
  context: { params: Promise<{ accountId: string }> }
) {
  const auth = await requireManagedSuperAdmin(request);
  if ('error' in auth) {
    return auth.error;
  }

  try {
    const { accountId } = await context.params;
    await deleteManagedAccount(accountId);
    return NextResponse.json({ success: true });
  } catch (error) {
    return NextResponse.json(
      { error: error instanceof Error ? error.message : 'Failed to delete account' },
      { status: 400 }
    );
  }
}