kan/apps/web/src/pages/api/trello/authenticate.ts

import type { NextApiRequest, NextApiResponse } from "next";
import { addYears } from "date-fns";

import { createNextApiContext } from "@kan/api/trpc";
import { withApiLogging } from "@kan/api/utils/apiLogging";
import { withRateLimit } from "@kan/api/utils/rateLimit";
import { integrations } from "@kan/db/schema";

export default withRateLimit(
  { points: 100, duration: 60 },
  withApiLogging(async (req: NextApiRequest, res: NextApiResponse) => {
    if (req.method !== "POST") {
      return res.status(405).json({ message: "Method not allowed" });
    }

    const { user } = await createNextApiContext(req);

    if (!user)
      return res.status(401).json({ message: "User not authenticated" });

    const apiKey = process.env.TRELLO_APP_API_KEY;

    if (!apiKey)
      return res
        .status(500)
        .json({ message: "Trello API key not set in Environment Variables" });

    const token = req.body.token;

    if (!token) return res.status(400).json({ message: "No token found" });

    try {
      const { db } = await createNextApiContext(req);

      await db
        .insert(integrations)
        .values({
          provider: "trello",
          userId: user.id,
          accessToken: token,
          expiresAt: addYears(new Date(), 1),
        })
        .onConflictDoUpdate({
          set: {
            accessToken: token,
            expiresAt: addYears(new Date(), 1),
          },
          target: [integrations.userId, integrations.provider],
        });

      return res
        .status(200)
        .json({ message: "Trello authentication successful" });
    } catch (err) {
      return res.status(400).json({ message: "Trello authentication failed" });
    }
  }),
);