first commit

app/api/v1/admin/users/[id]/api-keys/[keyId]/route.ts

@@ -0,0 +1,87 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/db";
+import { apiKeys } from "@/db/schema";
+import { and, eq } from "drizzle-orm";
+import { authenticateWebOrAPIRequest } from "@/app/lib/api-auth";
+import { isAdmin } from "@/app/lib/permissions";
+import { maskApiKey } from "@/app/lib/jwt";
+import {
+  expiresAtFromDays,
+  getDaysRemaining,
+  getExpiryRemainingLabel,
+  parseExpiresInDaysOptional,
+} from "@/app/lib/api-key-utils";
+
+/**
+ * PATCH /api/v1/admin/users/[id]/api-keys/[keyId]
+ *
+ * Body: { "expiresInDays": number | null }
+ * — null veya 0: süresiz; 1–3650: bugünden itibaren o kadar gün sonra sona erer
+ */
+export async function PATCH(
+  request: NextRequest,
+  context: { params: Promise<{ id: string; keyId: string }> }
+) {
+  const auth = await authenticateWebOrAPIRequest(request);
+  if (!auth.authenticated) {
+    return NextResponse.json({ error: auth.error ?? "Yetkisiz" }, { status: 401 });
+  }
+  if (!isAdmin(auth.role!)) {
+    return NextResponse.json(
+      { error: "Bu işlem için admin yetkisi gerekir." },
+      { status: 403 }
+    );
+  }
+
+  const { id: userId, keyId } = await context.params;
+
+  let body: { expiresInDays?: unknown };
+  try {
+    body = await request.json();
+  } catch {
+    return NextResponse.json({ error: "Geçersiz JSON" }, { status: 400 });
+  }
+
+  const parsed = parseExpiresInDaysOptional(body.expiresInDays);
+  if (!parsed.ok) {
+    return NextResponse.json({ error: parsed.error }, { status: 400 });
+  }
+
+  const expiresAt =
+    parsed.value === null ? null : expiresAtFromDays(parsed.value);
+
+  const updated = await db
+    .update(apiKeys)
+    .set({ expiresAt, updatedAt: new Date() })
+    .where(and(eq(apiKeys.id, keyId), eq(apiKeys.userId, userId)))
+    .returning({
+      id: apiKeys.id,
+      name: apiKeys.name,
+      key: apiKeys.key,
+      expiresAt: apiKeys.expiresAt,
+      isActive: apiKeys.isActive,
+    });
+
+  if (updated.length === 0) {
+    return NextResponse.json(
+      { error: "Anahtar bulunamadı veya bu kullanıcıya ait değil." },
+      { status: 404 }
+    );
+  }
+
+  const r = updated[0];
+  const exp = r.expiresAt ?? null;
+  return NextResponse.json({
+    success: true,
+    message: "API anahtarı süresi güncellendi.",
+    data: {
+      id: r.id,
+      name: r.name,
+      keyPreview: maskApiKey(r.key),
+      expiresAt: exp?.toISOString() ?? null,
+      daysRemaining: getDaysRemaining(exp),
+      remainingLabel: getExpiryRemainingLabel(exp),
+      isActive: r.isActive,
+    },
+  });
+}

app/api/v1/admin/users/[id]/api-keys/route.ts

@@ -0,0 +1,63 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/db";
+import { apiKeys } from "@/db/schema";
+import { eq, desc } from "drizzle-orm";
+import { authenticateWebOrAPIRequest } from "@/app/lib/api-auth";
+import { isAdmin } from "@/app/lib/permissions";
+import { maskApiKey } from "@/app/lib/jwt";
+import { getDaysRemaining, getExpiryRemainingLabel } from "@/app/lib/api-key-utils";
+
+/**
+ * GET /api/v1/admin/users/[id]/api-keys — Admin: seçilen kullanıcının API anahtarları
+ */
+export async function GET(
+  request: NextRequest,
+  context: { params: Promise<{ id: string }> }
+) {
+  const auth = await authenticateWebOrAPIRequest(request);
+  if (!auth.authenticated) {
+    return NextResponse.json({ error: auth.error ?? "Yetkisiz" }, { status: 401 });
+  }
+  if (!isAdmin(auth.role!)) {
+    return NextResponse.json(
+      { error: "Bu işlem için admin yetkisi gerekir." },
+      { status: 403 }
+    );
+  }
+
+  const { id: userId } = await context.params;
+
+  const rows = await db
+    .select({
+      id: apiKeys.id,
+      name: apiKeys.name,
+      key: apiKeys.key,
+      expiresAt: apiKeys.expiresAt,
+      lastUsedAt: apiKeys.lastUsedAt,
+      isActive: apiKeys.isActive,
+      createdAt: apiKeys.createdAt,
+    })
+    .from(apiKeys)
+    .where(eq(apiKeys.userId, userId))
+    .orderBy(desc(apiKeys.createdAt));
+
+  return NextResponse.json({
+    success: true,
+    data: {
+      keys: rows.map((r) => {
+        const exp = r.expiresAt ?? null;
+        return {
+          id: r.id,
+          name: r.name,
+          keyPreview: maskApiKey(r.key),
+          expiresAt: exp?.toISOString() ?? null,
+          daysRemaining: getDaysRemaining(exp),
+          remainingLabel: getExpiryRemainingLabel(exp),
+          lastUsedAt: r.lastUsedAt?.toISOString() ?? null,
+          isActive: r.isActive,
+          createdAt: r.createdAt.toISOString(),
+        };
+      }),
+    },
+  });
+}