90 lines
2.3 KiB
TypeScript
90 lines
2.3 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { createSupabaseRouteClient } from "@/lib/supabase/server";
|
|
|
|
export const dynamic = "force-dynamic";
|
|
|
|
interface PurgePayload {
|
|
assetId?: string;
|
|
}
|
|
|
|
function resolveGraceSeconds(): number {
|
|
const raw =
|
|
process.env.DELETE_GRACE_SECONDS ??
|
|
process.env.NEXT_PUBLIC_DELETE_GRACE_SECONDS ??
|
|
"600";
|
|
const parsed = Number(raw);
|
|
if (!Number.isFinite(parsed) || parsed <= 0) {
|
|
return 600;
|
|
}
|
|
return Math.floor(parsed);
|
|
}
|
|
|
|
function makeExpiredDeletedAt(): string {
|
|
const graceSeconds = resolveGraceSeconds();
|
|
return new Date(Date.now() - (graceSeconds + 5) * 1000).toISOString();
|
|
}
|
|
|
|
export async function POST(request: Request) {
|
|
const supabase = await createSupabaseRouteClient();
|
|
const {
|
|
data: { session },
|
|
} = await supabase.auth.getSession();
|
|
|
|
if (!session) {
|
|
return NextResponse.json({ error: "未登录" }, { status: 401 });
|
|
}
|
|
|
|
const { assetId }: PurgePayload = await request.json().catch(() => ({}));
|
|
if (!assetId) {
|
|
return NextResponse.json({ error: "缺少 assetId" }, { status: 400 });
|
|
}
|
|
|
|
const { data: asset, error: fetchError } = await supabase
|
|
.from("media_assets")
|
|
.select("id,workspace_id,deleted_at,purged_at")
|
|
.eq("id", assetId)
|
|
.single();
|
|
|
|
if (fetchError) {
|
|
return NextResponse.json({ error: fetchError.message }, { status: 500 });
|
|
}
|
|
|
|
if (!asset) {
|
|
return NextResponse.json({ error: "未找到附件" }, { status: 404 });
|
|
}
|
|
|
|
const { data: membership, error: membershipError } = await supabase
|
|
.from("workspace_members")
|
|
.select("workspace_id")
|
|
.eq("workspace_id", asset.workspace_id)
|
|
.eq("user_id", session.user.id)
|
|
.limit(1);
|
|
|
|
if (membershipError) {
|
|
return NextResponse.json({ error: membershipError.message }, { status: 500 });
|
|
}
|
|
|
|
if (!membership || membership.length === 0) {
|
|
return NextResponse.json({ error: "无权操作该附件" }, { status: 403 });
|
|
}
|
|
|
|
if (asset.purged_at) {
|
|
return NextResponse.json({ success: true, alreadyPurged: true });
|
|
}
|
|
|
|
const { error: updateError } = await supabase
|
|
.from("media_assets")
|
|
.update({
|
|
deleted_at: makeExpiredDeletedAt(),
|
|
deleted_by: session.user.id,
|
|
})
|
|
.eq("id", assetId);
|
|
|
|
if (updateError) {
|
|
return NextResponse.json({ error: updateError.message }, { status: 500 });
|
|
}
|
|
|
|
return NextResponse.json({ success: true });
|
|
}
|
|
|