Hornwitser
251e83f640
Start the work of clearly distingushing client side types, server side types and types shared over the API by renaming "AccountSession" and "Session" names used on the server to "ServerSession".
20 lines
516 B
TypeScript
20 lines
516 B
TypeScript
import { deleteDatbase, readAccounts } from "~/server/database";
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const session = await requireServerSession(event);
|
|
let accounts = await readAccounts();
|
|
const sessionAccount = accounts.find(
|
|
account => account.id === session.accountId
|
|
);
|
|
if (!sessionAccount) {
|
|
throw Error("Account does not exist");
|
|
}
|
|
if (sessionAccount.type !== "admin") {
|
|
throw createError({
|
|
statusCode: 403,
|
|
statusMessage: "Forbidden",
|
|
});
|
|
}
|
|
|
|
await deleteDatbase();
|
|
})
|