hermes-web/app/api/token/bot/route.ts

import { db } from "@/lib/db"
import fetchUserWithImpersonation from "@/lib/fetch-user-impersonation";
import { NextResponse } from "next/server";

export async function GET(req: Request) {
    try {
        const user = await fetchUserWithImpersonation(req);
        if (!user) {
          return NextResponse.json({ message: 'Unauthorized.', error: null, value: null }, { status: 401 });
        }

        const api = await db.twitchConnection.findFirst({
          where: {
            userId: user.id
          }
        })
        if (!api) {
          return NextResponse.json({ message: 'You do not have permission for this.', error: null, value: null }, { status: 403 })
        }

        const data = {
          client_id: process.env.TWITCH_BOT_CLIENT_ID,
          client_secret: process.env.TWITCH_BOT_CLIENT_SECRET,
          access_token: api.accessToken,
          refresh_token: api.refreshToken,
          broadcaster_id: api.broadcasterId
        }
        return NextResponse.json(data);
    } catch (error) {
        console.log("[TOKENS/GET]", error);
        return NextResponse.json({ message: 'Something went wrong', error: error, value: null }, { status: 500 })
    }
}