52 lines
2.4 KiB
TypeScript
52 lines
2.4 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { getLiveKitRoomName, getLiveKitRoomService } from "@/lib/meeting/livekit";
|
|
import { markMeetingParticipantKicked } from "@/lib/meeting/kicks";
|
|
import { verifyMeetingToken } from "@/lib/meeting/token";
|
|
|
|
export const dynamic = "force-dynamic";
|
|
|
|
type Args = { params: Promise<{ slug: string }> };
|
|
|
|
export async function POST(request: Request, { params }: Args) {
|
|
const { slug } = await params;
|
|
const authorization = request.headers.get("authorization") ?? "";
|
|
const appToken = authorization.startsWith("Bearer ") ? authorization.slice(7) : "";
|
|
const host = verifyMeetingToken(appToken);
|
|
if (!host || host.eventSlug !== slug || host.role !== "host") {
|
|
return NextResponse.json({ error: "Nur der Host darf Teilnehmer entfernen." }, { status: 403 });
|
|
}
|
|
|
|
let body: { participantId?: unknown };
|
|
try {
|
|
body = await request.json();
|
|
if (!body || typeof body !== "object" || Array.isArray(body)) throw new Error("Invalid body");
|
|
} catch {
|
|
return NextResponse.json({ error: "Ungültige Anfrage." }, { status: 400 });
|
|
}
|
|
const participantId = typeof body.participantId === "string" ? body.participantId.trim() : "";
|
|
if (!participantId || participantId.length > 100 || participantId === host.participantId) {
|
|
return NextResponse.json({ error: "Ungültiger Teilnehmer." }, { status: 400 });
|
|
}
|
|
|
|
try {
|
|
const roomService = getLiveKitRoomService();
|
|
const room = getLiveKitRoomName(slug, host.accessVersion);
|
|
const participant = (await roomService.listParticipants(room)).find((item) => item.identity === participantId);
|
|
if (!participant) return NextResponse.json({ error: "Teilnehmer nicht gefunden." }, { status: 404 });
|
|
|
|
let clientId: string | undefined;
|
|
try {
|
|
const metadata = JSON.parse(participant.metadata || "{}") as { clientId?: unknown };
|
|
if (typeof metadata.clientId === "string" && metadata.clientId.length <= 100) clientId = metadata.clientId;
|
|
} catch {
|
|
// Metadata is optional; the participant identity is still revoked below.
|
|
}
|
|
markMeetingParticipantKicked(slug, participantId, clientId);
|
|
await roomService.removeParticipant(room, participantId);
|
|
return NextResponse.json({ ok: true });
|
|
} catch (error) {
|
|
console.error("meeting participant kick failed", error);
|
|
return NextResponse.json({ error: "Der Teilnehmer konnte nicht entfernt werden." }, { status: 503 });
|
|
}
|
|
}
|