@payez/next-mvp 4.1.8 → 4.1.9

package/src/api-handlers/account/change-password.ts

@@ -1,142 +1,142 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { getSession as getBetterAuthSession } from '../../server/auth';
-import { getSession } from '../../lib/session-store';
-
-interface ChangePasswordRequest {
-  current_password: string;
-  new_password: string;
-  confirm_password: string;
-}
-
-import { nanoid } from 'nanoid';
-
-// ...
-
-export async function POST(req: NextRequest) {
-  const requestId = nanoid();
-  try {
-    // Get session from Better Auth
-    const betterAuthSession = await getBetterAuthSession(req);
-    const sessionToken = betterAuthSession?.session?.token as string | undefined;
-    if (!betterAuthSession || typeof sessionToken !== 'string') {
-      return NextResponse.json({ success: false, message: 'Unauthorized' }, { status: 401 });
-    }
-    const sessionData = await getSession(sessionToken);
-    // NOTE: Field is idpAccessToken (not accessToken) per normalized naming convention
-    if (!sessionData?.idpAccessToken) {
-      return NextResponse.json(
-        {
-          success: false,
-          message: 'Authentication required - no access token available',
-          error_code: 'UNAUTHORIZED',
-          request_id: requestId,
-        },
-        { status: 401 }
-      );
-    }
-
-    const body = await req.json();
-    const { current_password, new_password, confirm_password } = body as ChangePasswordRequest;
-
-    // Validate input
-    if (!current_password || !new_password || !confirm_password) {
-      return NextResponse.json(
-        {
-          success: false,
-          message: 'Current password, new password, and confirmation are required',
-          error_code: 'VALIDATION_ERROR',
-          request_id: requestId,
-        },
-        { status: 400 }
-      );
-    }
-
-    if (new_password !== confirm_password) {
-      return NextResponse.json(
-        {
-          success: false,
-          message: 'New password and confirmation do not match',
-          error_code: 'VALIDATION_ERROR',
-          request_id: requestId,
-        },
-        { status: 400 }
-      );
-    }
-
-    // Get IDP base URL from environment
-    const idpBaseUrl = process.env.IDP_URL;
-
-    if (!idpBaseUrl) {
-      console.error('[CHANGE_PASSWORD] IDP_URL not configured');
-      return NextResponse.json(
-        {
-          success: false,
-          message: 'Service configuration error',
-          error_code: 'CONFIGURATION_ERROR',
-          request_id: requestId,
-        },
-        { status: 500 }
-      );
-    }
-
-    // Proxy request to IDP
-    const idpUrl = `${idpBaseUrl}/api/Account/change-password`;
-    const idpResponse = await fetch(idpUrl, {
-      method: 'POST',
-      headers: {
-        'Content-Type': 'application/json',
-        'Authorization': `Bearer ${sessionData.idpAccessToken}`,
-        'x-request-id': requestId,
-      },
-      body: JSON.stringify({
-        current_password,
-        new_password,
-        confirm_password,
-      }),
-    });
-
-    const responseData = await idpResponse.json().catch(() => ({}));
-
-    if (!idpResponse.ok) {
-      // Extract error message from IDP response
-      let errorMessage = 'Failed to change password';
-
-      if (responseData.message) {
-        errorMessage = responseData.message;
-      } else if (responseData.details?.value && Array.isArray(responseData.details.value) && responseData.details.value.length > 0) {
-        errorMessage = responseData.details.value[0].message || errorMessage;
-      } else if (responseData.details?.message) {
-        errorMessage = responseData.details.message;
-      }
-
-      return NextResponse.json(
-        {
-          success: false,
-          message: errorMessage,
-          error_code: responseData.error_code || 'CHANGE_PASSWORD_FAILED',
-          request_id: requestId,
-          details: responseData.details,
-        },
-        { status: idpResponse.status }
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      message: responseData.message || 'Password changed successfully',
-      request_id: requestId,
-    });
-  } catch (error) {
-    console.error('[CHANGE_PASSWORD] Error:', error);
-    const requestId = req.headers.get('x-request-id') ?? crypto.randomUUID();
-    return NextResponse.json(
-      {
-        success: false,
-        message: error instanceof Error ? error.message : 'Failed to change password',
-        error_code: 'INTERNAL_ERROR',
-        request_id: requestId,
-      },
-      { status: 500 }
-    );
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { getSession as getBetterAuthSession } from '../../server/auth';
+import { getSession } from '../../lib/session-store';
+
+interface ChangePasswordRequest {
+  current_password: string;
+  new_password: string;
+  confirm_password: string;
+}
+
+import { nanoid } from 'nanoid';
+
+// ...
+
+export async function POST(req: NextRequest) {
+  const requestId = nanoid();
+  try {
+    // Get session from Better Auth
+    const betterAuthSession = await getBetterAuthSession(req);
+    const sessionToken = betterAuthSession?.session?.token as string | undefined;
+    if (!betterAuthSession || typeof sessionToken !== 'string') {
+      return NextResponse.json({ success: false, message: 'Unauthorized' }, { status: 401 });
+    }
+    const sessionData = await getSession(sessionToken);
+    // NOTE: Field is idpAccessToken (not accessToken) per normalized naming convention
+    if (!sessionData?.idpAccessToken) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: 'Authentication required - no access token available',
+          error_code: 'UNAUTHORIZED',
+          request_id: requestId,
+        },
+        { status: 401 }
+      );
+    }
+
+    const body = await req.json();
+    const { current_password, new_password, confirm_password } = body as ChangePasswordRequest;
+
+    // Validate input
+    if (!current_password || !new_password || !confirm_password) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: 'Current password, new password, and confirmation are required',
+          error_code: 'VALIDATION_ERROR',
+          request_id: requestId,
+        },
+        { status: 400 }
+      );
+    }
+
+    if (new_password !== confirm_password) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: 'New password and confirmation do not match',
+          error_code: 'VALIDATION_ERROR',
+          request_id: requestId,
+        },
+        { status: 400 }
+      );
+    }
+
+    // Get IDP base URL from environment
+    const idpBaseUrl = process.env.IDP_URL;
+
+    if (!idpBaseUrl) {
+      console.error('[CHANGE_PASSWORD] IDP_URL not configured');
+      return NextResponse.json(
+        {
+          success: false,
+          message: 'Service configuration error',
+          error_code: 'CONFIGURATION_ERROR',
+          request_id: requestId,
+        },
+        { status: 500 }
+      );
+    }
+
+    // Proxy request to IDP
+    const idpUrl = `${idpBaseUrl}/api/Account/change-password`;
+    const idpResponse = await fetch(idpUrl, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${sessionData.idpAccessToken}`,
+        'x-request-id': requestId,
+      },
+      body: JSON.stringify({
+        current_password,
+        new_password,
+        confirm_password,
+      }),
+    });
+
+    const responseData = await idpResponse.json().catch(() => ({}));
+
+    if (!idpResponse.ok) {
+      // Extract error message from IDP response
+      let errorMessage = 'Failed to change password';
+
+      if (responseData.message) {
+        errorMessage = responseData.message;
+      } else if (responseData.details?.value && Array.isArray(responseData.details.value) && responseData.details.value.length > 0) {
+        errorMessage = responseData.details.value[0].message || errorMessage;
+      } else if (responseData.details?.message) {
+        errorMessage = responseData.details.message;
+      }
+
+      return NextResponse.json(
+        {
+          success: false,
+          message: errorMessage,
+          error_code: responseData.error_code || 'CHANGE_PASSWORD_FAILED',
+          request_id: requestId,
+          details: responseData.details,
+        },
+        { status: idpResponse.status }
+      );
+    }
+
+    return NextResponse.json({
+      success: true,
+      message: responseData.message || 'Password changed successfully',
+      request_id: requestId,
+    });
+  } catch (error) {
+    console.error('[CHANGE_PASSWORD] Error:', error);
+    const requestId = req.headers.get('x-request-id') ?? crypto.randomUUID();
+    return NextResponse.json(
+      {
+        success: false,
+        message: error instanceof Error ? error.message : 'Failed to change password',
+        error_code: 'INTERNAL_ERROR',
+        request_id: requestId,
+      },
+      { status: 500 }
+    );
+  }
+}

package/src/api-handlers/account/update-phone.ts

@@ -1,79 +1,79 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { idpFetchJSON } from '../../lib/idp-fetch';
-import { ENV_CONFIG } from '../../config/env';
-
-/**
- * Update Phone Number API Handler
- *
- * PATCH /api/account/update-phone - Update user's phone number
- * Used for 2FA setup - users need to add a phone to enable SMS verification.
- */
-export async function POST(req: NextRequest) {
-  try {
-    // Parse request body
-    let body: { phoneNumber?: string };
-    try {
-      body = await req.json();
-    } catch {
-      return NextResponse.json(
-        { success: false, error: { code: 'INVALID_JSON', message: 'Invalid request body' } },
-        { status: 400 }
-      );
-    }
-
-    const { phoneNumber } = body;
-
-    if (!phoneNumber) {
-      return NextResponse.json(
-        { success: false, error: { code: 'INVALID_INPUT', message: 'Phone number is required' } },
-        { status: 400 }
-      );
-    }
-
-    // PATCH profile with phone_number only
-    const url = `${ENV_CONFIG.IDP_URL}/api/Account/profile`;
-    const result = await idpFetchJSON(req, url, {
-      method: 'PATCH',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ phone_number: phoneNumber }),
-    });
-
-    if (!result.ok) {
-      console.error('[UPDATE_PHONE] IDP error:', result.status, result.json);
-      return NextResponse.json(
-        {
-          success: false,
-          error: {
-            code: (result.json as any)?.error?.code || 'UPDATE_FAILED',
-            message: (result.json as any)?.error?.message || 'Failed to update phone number',
-          },
-          meta: { attemptedRefresh: result.attemptedRefresh },
-        },
-        { status: result.status }
-      );
-    }
-
-    const responseData = result.json as any;
-
-    // Unwrap if IDP returns envelope { success, data }
-    if (responseData && typeof responseData === 'object' && 'success' in responseData && 'data' in responseData) {
-      return NextResponse.json({
-        success: true,
-        message: 'Phone number updated successfully',
-        data: responseData.data,
-      });
-    }
-
-    return NextResponse.json({
-      success: true,
-      message: 'Phone number updated successfully',
-      data: responseData,
-    });
-  } catch (error) {
-    console.error('[UPDATE_PHONE] Error:', error);
-    return NextResponse.json(
-      { success: false, error: { code: 'INTERNAL_ERROR', message: 'Failed to update phone number' } },
-      { status: 500 }
-    );
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { idpFetchJSON } from '../../lib/idp-fetch';
+import { ENV_CONFIG } from '../../config/env';
+
+/**
+ * Update Phone Number API Handler
+ *
+ * PATCH /api/account/update-phone - Update user's phone number
+ * Used for 2FA setup - users need to add a phone to enable SMS verification.
+ */
+export async function POST(req: NextRequest) {
+  try {
+    // Parse request body
+    let body: { phoneNumber?: string };
+    try {
+      body = await req.json();
+    } catch {
+      return NextResponse.json(
+        { success: false, error: { code: 'INVALID_JSON', message: 'Invalid request body' } },
+        { status: 400 }
+      );
+    }
+
+    const { phoneNumber } = body;
+
+    if (!phoneNumber) {
+      return NextResponse.json(
+        { success: false, error: { code: 'INVALID_INPUT', message: 'Phone number is required' } },
+        { status: 400 }
+      );
+    }
+
+    // PATCH profile with phone_number only
+    const url = `${ENV_CONFIG.IDP_URL}/api/Account/profile`;
+    const result = await idpFetchJSON(req, url, {
+      method: 'PATCH',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ phone_number: phoneNumber }),
+    });
+
+    if (!result.ok) {
+      console.error('[UPDATE_PHONE] IDP error:', result.status, result.json);
+      return NextResponse.json(
+        {
+          success: false,
+          error: {
+            code: (result.json as any)?.error?.code || 'UPDATE_FAILED',
+            message: (result.json as any)?.error?.message || 'Failed to update phone number',
+          },
+          meta: { attemptedRefresh: result.attemptedRefresh },
+        },
+        { status: result.status }
+      );
+    }
+
+    const responseData = result.json as any;
+
+    // Unwrap if IDP returns envelope { success, data }
+    if (responseData && typeof responseData === 'object' && 'success' in responseData && 'data' in responseData) {
+      return NextResponse.json({
+        success: true,
+        message: 'Phone number updated successfully',
+        data: responseData.data,
+      });
+    }
+
+    return NextResponse.json({
+      success: true,
+      message: 'Phone number updated successfully',
+      data: responseData,
+    });
+  } catch (error) {
+    console.error('[UPDATE_PHONE] Error:', error);
+    return NextResponse.json(
+      { success: false, error: { code: 'INTERNAL_ERROR', message: 'Failed to update phone number' } },
+      { status: 500 }
+    );
+  }
+}