Replace forgeable cookie auth with signed JWT sessions, protect admin APIs, add input validation, and improve Docker deployment config.
15 lines
356 B
TypeScript
15 lines
356 B
TypeScript
import { NextResponse } from "next/server";
|
|
import { getSessionCookieOptions, SESSION_COOKIE } from "@/lib/session";
|
|
|
|
export async function POST() {
|
|
const response = NextResponse.json({ success: true });
|
|
|
|
response.cookies.set({
|
|
...getSessionCookieOptions(0),
|
|
name: SESSION_COOKIE,
|
|
value: "",
|
|
});
|
|
|
|
return response;
|
|
}
|