freno-dev/src/api/lineage/database/deletion/init/route.ts

import {
  dumpAndSendDB,
  LineageConnectionFactory,
  validateLineageRequest,
} from "@/app/utils";
import { env } from "@/env.mjs";
import { NextRequest, NextResponse } from "next/server";

export async function POST(req: NextRequest) {
  const authHeader = req.headers.get("authorization");
  if (!authHeader || !authHeader.startsWith("Bearer ")) {
    return NextResponse.json({ status: 401, ok: false });
  }

  const auth_token = authHeader.split(" ")[1];
  const { email, db_name, db_token, skip_cron, send_dump_target } =
    await req.json();
  if (!email || !db_name || !db_token || !auth_token) {
    return NextResponse.json({
      status: 401,
      message: "Missing required fields",
    });
  }

  const conn = LineageConnectionFactory();
  const res = await conn.execute({
    sql: `SELECT * FROM User WHERE email = ?`,
    args: [email],
  });
  const userRow = res.rows[0];
  if (!userRow) {
    return NextResponse.json({ status: 404, ok: false });
  }

  const valid = await validateLineageRequest({ auth_token, userRow });
  if (!valid) {
    return NextResponse.json({
      ok: false,
      status: 401,
      message: "Invalid Verification",
    });
  }

  const { database_token, database_name } = userRow;

  if (database_token !== db_token || database_name !== db_name) {
    return NextResponse.json({
      ok: false,
      status: 401,
      message: "Incorrect Verification",
    });
  }

  if (skip_cron) {
    if (send_dump_target) {
      const res = await dumpAndSendDB({
        dbName: db_name,
        dbToken: db_token,
        sendTarget: send_dump_target,
      });
      if (res.success) {
        //const turso = createAPIClient({
        //org: "mikefreno",
        //token: env.TURSO_DB_API_TOKEN,
        //});
        //const res = await turso.databases.delete(db_name); // seems unreliable, using rest api instead
        const res = await fetch(
          `https://api.turso.tech/v1/organizations/mikefreno/databases/${db_name}`,
          {
            method: "GET",
            headers: {
              Authorization: `Bearer ${env.TURSO_DB_API_TOKEN}`,
            },
          },
        );
        if (res.ok) {
          conn.execute({
            sql: `DELETE FROM User WHERE email = ?`,
            args: [email],
          });
          return NextResponse.json({
            ok: true,
            status: 200,
            message: `Account and Database deleted, db dump sent to email: ${send_dump_target}`,
          });
        } else {
          // Shouldn't fail. No idea what the response from turso would be at this point - not documented
          return NextResponse.json({
            status: 500,
            message: "Unknown",
            ok: false,
          });
        }
      } else {
        return NextResponse.json({
          ok: false,
          status: 500,
          message: res.reason,
        });
      }
    } else {
      //const turso = createAPIClient({
      //org: "mikefreno",
      //token: env.TURSO_DB_API_TOKEN,
      //});
      //const res = await turso.databases.delete(db_name);
      const res = await fetch(
        `https://api.turso.tech/v1/organizations/mikefreno/databases/${db_name}`,
        {
          method: "GET",
          headers: {
            Authorization: `Bearer ${env.TURSO_DB_API_TOKEN}`,
          },
        },
      );
      if (res.ok) {
        conn.execute({
          sql: `DELETE FROM User WHERE email = ?`,
          args: [email],
        });
        return NextResponse.json({
          ok: true,
          status: 200,
          message: `Account and Database deleted`,
        });
      } else {
        // Shouldn't fail. No idea what the response from turso would be at this point - not documented
        return NextResponse.json({
          ok: false,
          status: 500,
          message: "Unknown",
        });
      }
    }
  } else {
    const insertRes = await conn.execute({
      sql: `INSERT INTO cron (email, db_name, db_token, send_dump_target) VALUES (?, ?, ?, ?)`,
      args: [email, db_name, db_token, send_dump_target],
    });
    if (insertRes.rowsAffected > 0) {
      return NextResponse.json({
        ok: true,
        status: 200,
        message: `Deletion scheduled.`,
      });
    } else {
      return NextResponse.json({
        ok: false,
        status: 500,
        message: `Deletion not scheduled, due to server failure`,
      });
    }
  }
}