Source: pages/api/account.js

/** @module pages/api/account */
import { getServerSession } from "../../lib/auth";
import { METHOD_NOT_ALLOWED, SERVER_ERROR, FORBIDDEN } from "../../lib/errors";
import { deleteAccount } from "../../lib/db/writes";

/**
 * Account related API. Currently only supports DELETE.
 * When deleting an account, we delete all dreams, comments, and inbox messages
 * through this endpoint.
 */
function accountHandler(req, res) {
  switch (req.method) {
    case "DELETE":
      return del(req, res);
    default:
      res.setHeader("Allow", ["DELETE"]);
      res.status(405).end(METHOD_NOT_ALLOWED);
      return res;
  }
}

async function del(req, res) {
  const session = await getServerSession(req, res);

  if (!session) {
    res.status(403).end(FORBIDDEN);
    return res;
  }

  try {
    const response = await deleteAccount(session.user.email);

    res.setHeader("Content-Type", "application/json");
    res.status(200).send(response);

    return res;
  } catch (error) {
    console.error({
      error,
      service: "api",
      pathname: "/api/account",
      method: "delete",
    });
    res.status(500).end(SERVER_ERROR);

    return res;
  }
}

export default accountHandler;