37 lines
1.0 KiB
TypeScript
37 lines
1.0 KiB
TypeScript
import { getServerSession } from 'next-auth';
|
|
import { authOptions } from '@/lib/auth-options';
|
|
import { prisma } from '@/lib/prisma';
|
|
import { NextRequest, NextResponse } from 'next/server';
|
|
|
|
export async function DELETE(
|
|
request: NextRequest,
|
|
{ params }: { params: Promise<{ commentId: string }> }
|
|
) {
|
|
const { commentId } = await params;
|
|
const session = await getServerSession(authOptions);
|
|
|
|
if (!session?.user) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
}
|
|
|
|
const role = (session.user as any).role;
|
|
if (role !== 'admin' && role !== 'superadmin') {
|
|
return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
|
|
}
|
|
|
|
try {
|
|
// Delete the comment and its replies (cascade via Prisma)
|
|
const comment = await prisma.comment.delete({
|
|
where: { id: commentId },
|
|
});
|
|
|
|
return NextResponse.json({ success: true });
|
|
} catch (error) {
|
|
console.error('Failed to delete comment:', error);
|
|
return NextResponse.json(
|
|
{ error: 'Failed to delete comment' },
|
|
{ status: 500 }
|
|
);
|
|
}
|
|
}
|