Added impersonation for admins

app/api/account/impersonate/route.ts

@@ -0,0 +1,91 @@
+import { db } from "@/lib/db"
+import { NextResponse } from "next/server";
+import fetchUser from "@/lib/fetch-user";
+
+export async function GET(req: Request) {
+    try {
+        const user = await fetchUser(req)
+        if (!user || user.role != "ADMIN") {
+            return new NextResponse("Unauthorized", { status: 401 });
+        }
+
+        const impersonation = await db.impersonation.findFirst({
+            where: {
+                sourceId: user.id
+            }
+        });
+
+        return NextResponse.json(impersonation);
+    } catch (error) {
+        console.log("[AUTH/ACCOUNT/IMPERSONATION]", error);
+        return new NextResponse("Internal Error", { status: 500 });
+    }
+}
+
+export async function POST(req: Request) {
+    try {
+        const user = await fetchUser(req)
+        if (!user || user.role != "ADMIN") {
+            return new NextResponse("Unauthorized", { status: 401 });
+        }
+
+        const { targetId } = await req.json();
+
+        const impersonation = await db.impersonation.create({
+          data: {
+            sourceId: user.id,
+            targetId
+          }
+        });
+
+        return NextResponse.json(impersonation);
+    } catch (error) {
+        console.log("[AUTH/ACCOUNT/IMPERSONATION]", error);
+        return new NextResponse("Internal Error", { status: 500 });
+    }
+}
+
+export async function PUT(req: Request) {
+  try {
+      const user = await fetchUser(req)
+      if (!user || user.role != "ADMIN") {
+          return new NextResponse("Unauthorized", { status: 401 });
+      }
+
+      const { targetId } = await req.json();
+
+      const impersonation = await db.impersonation.update({
+        where: {
+          sourceId: user.id,
+        },
+        data: {
+          targetId
+        }
+      });
+
+      return NextResponse.json(impersonation);
+  } catch (error) {
+      console.log("[AUTH/ACCOUNT/IMPERSONATION]", error);
+      return new NextResponse("Internal Error", { status: 500 });
+  }
+}
+
+export async function DELETE(req: Request) {
+    try {
+        const user = await fetchUser(req)
+        if (!user || user.role != "ADMIN") {
+            return new NextResponse("Unauthorized", { status: 401 });
+        }
+
+        const impersonation = await db.impersonation.delete({
+          where: {
+            sourceId: user.id
+          }
+        });
+
+        return NextResponse.json(impersonation)
+    } catch (error) {
+        console.log("[AUTH/ACCOUNT/IMPERSONATION]", error);
+        return new NextResponse("Internal Error" + error, { status: 500 });
+    }
+}

app/api/account/route.ts

@@ -1,12 +1,12 @@
 import { db } from "@/lib/db"
 import { NextResponse } from "next/server";
 import { auth } from "@/auth";
-import fetchUserUsingAPI from "@/lib/validate-api";
+import fetchUser from "@/lib/fetch-user";
 
 
 export async function GET(req: Request) {
     try {
-      return NextResponse.json(await fetchUserUsingAPI(req))
+      return NextResponse.json(await fetchUser(req))
     } catch (error) {
         console.log("[ACCOUNT]", error);
         return new NextResponse("Internal Error", { status: 500 });