zoeissleeping
4bba529ba8
Support TOTP 2fa, allow for changing password, add session management and account removal.
41 lines
1.1 KiB
TypeScript
41 lines
1.1 KiB
TypeScript
import { and, eq } from 'drizzle-orm';
|
|
import { sessions } from '~~/drizzle/schema';
|
|
import { auth } from '~~/lib/auth';
|
|
import { db } from '~~/server/lib/db';
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const sessionData = await auth.api.getSession({ headers: event.headers });
|
|
|
|
if (sessionData === null) {
|
|
throw createError({
|
|
statusCode: 401,
|
|
statusMessage: 'Unauthorized',
|
|
});
|
|
}
|
|
|
|
const id = getRouterParam(event, 'id')!;
|
|
|
|
// signing out the current device goes through the normal sign out, which
|
|
// also clears its cookies
|
|
if (id === sessionData.session.id) {
|
|
throw createError({
|
|
statusCode: 400,
|
|
statusMessage: 'Cannot revoke the current session',
|
|
});
|
|
}
|
|
|
|
const deleted = await db.delete(sessions)
|
|
.where(and(eq(sessions.id, id), eq(sessions.userId, sessionData.user.id)))
|
|
.returning({ id: sessions.id });
|
|
|
|
if (deleted.length === 0) {
|
|
throw createError({
|
|
statusCode: 404,
|
|
statusMessage: 'Not Found',
|
|
message: 'Session not found',
|
|
});
|
|
}
|
|
|
|
return { ok: true };
|
|
});
|