MythEclipse/mcpedia
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(web): split PUT/DELETE into /api/docs/[...slug]/route.ts
CI / typecheck + build (turbo) (push) Canceled after 0s
Details

Browse Source 
Next.js App Router doesn't match DELETE/PUT on /api/docs/route.ts for
nested paths; need a dynamic segment. POST stays at /api/docs, PUT+DELETE
move to /api/docs/[...slug]. Verified DELETE works locally + via Caddy.
This commit is contained in:
asepharyana
2026-08-20 13:38:26 +07:00
parent 98437cb999
commit 8ed8c677e8
4 changed files with 88 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/web/app/api/docs/[...slug]/route.ts
+60
View File
@@ -0,0 +1,60 @@
import { NextRequest, NextResponse } from "next/server";
import { updateDocument, deleteDocument } from "@mcpedia/core";
import { WEBHOOK_SECRET } from "@mcpedia/config";
import { timingSafeEqual } from "node:crypto";
function isAuthorized(req: NextRequest): boolean {
if (!WEBHOOK_SECRET) return false;
const headerSecret = req.headers.get("x-webhook-secret") ?? "";
if (headerSecret && timingSafeEqual(Buffer.from(headerSecret), Buffer.from(WEBHOOK_SECRET))) {
return true;
}
const cookie = req.cookies.get("mcpedia_admin")?.value ?? "";
return cookie.startsWith("admin.");
}
function unauthorized() {
return NextResponse.json({ ok: false, error: "Unauthorized" }, { status: 401 });
}
// PUT /api/docs/{slug...} — Update an existing document.
export async function PUT(
req: NextRequest,
{ params }: { params: Promise<{ slug?: string[] }> },
) {
if (!isAuthorized(req)) return unauthorized();
const { slug } = await params;
const fullSlug = (slug ?? []).join("/");
if (!fullSlug) {
return NextResponse.json({ ok: false, error: "slug required" }, { status: 400 });
}
const body = await req.json().catch(() => null);
if (!body) {
return NextResponse.json({ ok: false, error: "Invalid JSON body" }, { status: 400 });
}
try {
const doc = await updateDocument(fullSlug, body);
return NextResponse.json({ ok: true, slug: doc.slug, doc });
} catch (err) {
const msg = err instanceof Error ? err.message : String(err);
return NextResponse.json({ ok: false, error: msg }, { status: 400 });
}
}
// DELETE /api/docs/{slug...}
export async function DELETE(
req: NextRequest,
{ params }: { params: Promise<{ slug?: string[] }> },
) {
if (!isAuthorized(req)) return unauthorized();
const { slug } = await params;
const fullSlug = (slug ?? []).join("/");
if (!fullSlug) {
return NextResponse.json({ ok: false, error: "slug required" }, { status: 400 });
}
const result = await deleteDocument(fullSlug);
return NextResponse.json({ ok: true, deleted: result.deleted });
}
apps/web/app/api/docs/route.ts
-42
View File
@@ -1,8 +1,6 @@
import { NextRequest, NextResponse } from "next/server";
import {
createDocument,
updateDocument,
deleteDocument,
} from "@mcpedia/core";
import { WEBHOOK_SECRET } from "@mcpedia/config";
import { timingSafeEqual } from "node:crypto";
@@ -41,43 +39,3 @@ export async function POST(req: NextRequest) {
return NextResponse.json({ ok: false, error: msg }, { status: 400 });
}
}
// PUT /api/docs/{slug} — Update an existing document.
export async function PUT(req: NextRequest) {
if (!isAuthorized(req)) return unauthorized();
const url = new URL(req.url);
const parts = url.pathname.split("/").filter(Boolean);
const fullSlug = parts.slice(2).join("/"); // ["api","docs",...slugParts]
if (!fullSlug || fullSlug === "docs") {
return NextResponse.json({ ok: false, error: "slug required in path" }, { status: 400 });
}
const body = await req.json().catch(() => null);
if (!body) {
return NextResponse.json({ ok: false, error: "Invalid JSON body" }, { status: 400 });
}
try {
const doc = await updateDocument(fullSlug, body);
return NextResponse.json({ ok: true, slug: doc.slug, doc });
} catch (err) {
const msg = err instanceof Error ? err.message : String(err);
return NextResponse.json({ ok: false, error: msg }, { status: 400 });
}
}
// DELETE /api/docs/{slug}
export async function DELETE(req: NextRequest) {
if (!isAuthorized(req)) return unauthorized();
const url = new URL(req.url);
const parts = url.pathname.split("/").filter(Boolean);
const slug = parts.slice(2).join("/");
if (!slug) {
return NextResponse.json({ ok: false, error: "slug required in path" }, { status: 400 });
}
const result = await deleteDocument(slug);
return NextResponse.json({ ok: true, deleted: result.deleted });
}