13 lines
695 B
JavaScript
13 lines
695 B
JavaScript
import { getUserFromToken, hasRole } from '../../../utils/auth.js'
|
|
import { sendTestPushToUser } from '../../../utils/push-notifications.js'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const token = getCookie(event, 'auth_token') || getHeader(event, 'authorization')?.replace(/^Bearer\s+/i, '')
|
|
const user = token ? await getUserFromToken(token) : null
|
|
if (!user) throw createError({ statusCode: 401, statusMessage: 'Nicht authentifiziert' })
|
|
if (!hasRole(user, 'admin')) throw createError({ statusCode: 403, statusMessage: 'Nur Administratoren dürfen einen Push-Test auslösen.' })
|
|
|
|
const result = await sendTestPushToUser(user.id)
|
|
return { success: true, ...result }
|
|
})
|