homeio

1import { NextResponse } from "next/server";
2
3import {
4  createRequestId,
5  logServerAction,
6  withServerTiming,
7} from "@/lib/server/logging/logger";
8import { requireApiSession } from "@/lib/server/modules/auth/api";
9import {
10  TotpServiceError,
11  beginTotpEnrollment,
12} from "@/lib/server/modules/auth/totp-service";
13
14export const runtime = "nodejs";
15
16export async function POST(request: Request) {
17  const requestId = createRequestId();
18  const apiSession = await requireApiSession(request);
19  if (apiSession.response) return apiSession.response;
20
21  try {
22    const data = await withServerTiming(
23      {
24        layer: "api",
25        action: "auth.2fa.setup",
26        requestId,
27      },
28      async () => beginTotpEnrollment(apiSession.session.userId),
29    );
30
31    return NextResponse.json({ data });
32  } catch (error) {
33    if (error instanceof TotpServiceError) {
34      logServerAction({
35        level: "warn",
36        layer: "api",
37        action: "auth.2fa.setup",
38        status: "error",
39        requestId,
40        error,
41        meta: { code: error.code },
42      });
43      return NextResponse.json(
44        { error: error.publicMessage, code: error.code },
45        { status: error.statusCode },
46      );
47    }
48
49    logServerAction({
50      level: "error",
51      layer: "api",
52      action: "auth.2fa.setup",
53      status: "error",
54      requestId,
55      error,
56    });
57    return NextResponse.json(
58      { error: "Failed to start two-factor setup" },
59      { status: 500 },
60    );
61  }
62}
63