import { NextResponse } from "next/server"; import { getLiveKitRoomName, getLiveKitRoomService } from "@/lib/meeting/livekit"; import { markMeetingParticipantKicked } from "@/lib/meeting/kicks"; import { verifyMeetingToken } from "@/lib/meeting/token"; export const dynamic = "force-dynamic"; type Args = { params: Promise<{ slug: string }> }; export async function POST(request: Request, { params }: Args) { const { slug } = await params; const authorization = request.headers.get("authorization") ?? ""; const appToken = authorization.startsWith("Bearer ") ? authorization.slice(7) : ""; const host = verifyMeetingToken(appToken); if (!host || host.eventSlug !== slug || host.role !== "host") { return NextResponse.json({ error: "Nur der Host darf Teilnehmer entfernen." }, { status: 403 }); } let body: { participantId?: unknown }; try { body = await request.json(); } catch { return NextResponse.json({ error: "Ungültige Anfrage." }, { status: 400 }); } const participantId = typeof body.participantId === "string" ? body.participantId.trim() : ""; if (!participantId || participantId.length > 100 || participantId === host.participantId) { return NextResponse.json({ error: "Ungültiger Teilnehmer." }, { status: 400 }); } try { const roomService = getLiveKitRoomService(); const room = getLiveKitRoomName(slug); const participant = (await roomService.listParticipants(room)).find((item) => item.identity === participantId); if (!participant) return NextResponse.json({ error: "Teilnehmer nicht gefunden." }, { status: 404 }); let clientId: string | undefined; try { const metadata = JSON.parse(participant.metadata || "{}") as { clientId?: unknown }; if (typeof metadata.clientId === "string" && metadata.clientId.length <= 100) clientId = metadata.clientId; } catch { // Metadata is optional; the participant identity is still revoked below. } markMeetingParticipantKicked(slug, participantId, clientId); await roomService.removeParticipant(room, participantId); return NextResponse.json({ ok: true }); } catch (error) { console.error("meeting participant kick failed", error); return NextResponse.json({ error: "Der Teilnehmer konnte nicht entfernt werden." }, { status: 503 }); } }