import { NextRequest, NextResponse } from "next/server";
import { Pool } from "pg";
import { requireAdmin } from "@/lib/auth-utils";

const pool = new Pool({
  connectionString: process.env.DATABASE_URL,
});

// DELETE /api/admin/users/[id]/sessions/[sessionId] - Revoke a specific session
export async function DELETE(
  request: NextRequest,
  { params }: { params: Promise<{ id: string; sessionId: string }> }
) {
  const { error } = await requireAdmin();
  if (error) return error;

  try {
    const { id, sessionId } = await params;

    const result = await pool.query(
      'DELETE FROM "session" WHERE id = $1 AND user_id = $2',
      [sessionId, id]
    );

    if (result.rowCount === 0) {
      return NextResponse.json({ error: "Session not found" }, { status: 404 });
    }

    return NextResponse.json({ success: true });
  } catch (error) {
    console.error("Error revoking session:", error);
    return NextResponse.json(
      { error: "Failed to revoke session" },
      { status: 500 }
    );
  }
}