31 lines
810 B
TypeScript
31 lines
810 B
TypeScript
|
import { NextRequest, NextResponse } from "next/server";
|
||
|
|
import { Pool } from "pg";
|
||
|
|
import { requireAdmin } from "@/lib/auth-utils";
|
||
|
|
|
||
|
|
const pool = new Pool({
|
||
|
|
connectionString: process.env.DATABASE_URL,
|
||
|
|
});
|
||
|
|
|
||
|
|
// DELETE /api/admin/users/[id]/sessions - Revoke all sessions for a user
|
||
|
|
export async function DELETE(
|
||
|
|
request: NextRequest,
|
||
|
|
{ params }: { params: Promise<{ id: string }> }
|
||
|
|
) {
|
||
|
|
const { error } = await requireAdmin();
|
||
|
|
if (error) return error;
|
||
|
|
|
||
|
|
try {
|
||
|
|
const { id } = await params;
|
||
|
|
|
||
|
|
await pool.query('DELETE FROM "session" WHERE user_id = $1', [id]);
|
||
|
|
|
||
|
|
return NextResponse.json({ success: true });
|
||
|
|
} catch (error) {
|
||
|
|
console.error("Error revoking sessions:", error);
|
||
|
|
return NextResponse.json(
|
||
|
|
{ error: "Failed to revoke sessions" },
|
||
|
|
{ status: 500 }
|
||
|
|
);
|
||
|
|
}
|
||
|
|
}
|