68 lines
2.2 KiB
TypeScript
68 lines
2.2 KiB
TypeScript
import { auth } from "@/auth"
|
|
import axios from "axios"
|
|
import { NextResponse } from "next/server"
|
|
import { validatePassword } from "@/lib/utils"
|
|
|
|
export async function POST(request: Request) {
|
|
try {
|
|
const session = await auth()
|
|
const body = await request.json()
|
|
const { password } = body
|
|
|
|
if (!session || !session.user?.email) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
|
} else if (!password || typeof password !== "string") {
|
|
return NextResponse.json({ error: "Invalid password" }, { status: 400 })
|
|
}
|
|
|
|
const passwordValidation = validatePassword(password)
|
|
if (!passwordValidation.valid) {
|
|
return NextResponse.json({ error: passwordValidation.message }, { status: 400 })
|
|
}
|
|
|
|
// Get user ID from email
|
|
const user = await axios.request({
|
|
method: "get",
|
|
url: `${process.env.AUTHENTIK_API_URL}/core/users/?email=${session.user.email}`,
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
Authorization: `Bearer ${process.env.AUTHENTIK_API_KEY}`,
|
|
},
|
|
validateStatus: () => true,
|
|
})
|
|
|
|
const userId = user.data.results[0].pk
|
|
|
|
if (!userId) {
|
|
console.error(`[!] User ID not found in response: ${session.user.email}`)
|
|
return NextResponse.json({ error: "User not found" }, { status: 404 })
|
|
}
|
|
|
|
const updCfg = await axios.request({
|
|
method: "post",
|
|
maxBodyLength: Number.POSITIVE_INFINITY,
|
|
url: `${process.env.AUTHENTIK_API_URL}/core/users/${userId}/set_password/`,
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
Authorization: `Bearer ${process.env.AUTHENTIK_API_KEY}`,
|
|
},
|
|
data: { password },
|
|
validateStatus: () => true,
|
|
})
|
|
|
|
if (updCfg.data?.detail) {
|
|
console.error("[!] Password setting issue:", updCfg.data.detail)
|
|
return NextResponse.json({ error: "Failed to change password" }, { status: 400 })
|
|
}
|
|
|
|
if (updCfg.status === 204) {
|
|
return NextResponse.json({ success: true })
|
|
} else {
|
|
return NextResponse.json({ error: "Failed to change password" }, { status: 400 })
|
|
}
|
|
|
|
} catch (error) {
|
|
console.error("[!]", error)
|
|
return NextResponse.json({ error: "Server error" }, { status: 500 })
|
|
}
|
|
} |