first commit

app/api/v1/api-keys/[id]/route.ts

@@ -0,0 +1,38 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/db";
+import { apiKeys } from "@/db/schema";
+import { and, eq } from "drizzle-orm";
+import { authenticateWebOrAPIRequest } from "@/app/lib/api-auth";
+
+/**
+ * DELETE /api/v1/api-keys/[id] — Kendi anahtarını iptal et (isActive: false)
+ */
+export async function DELETE(
+  request: NextRequest,
+  context: { params: Promise<{ id: string }> }
+) {
+  const auth = await authenticateWebOrAPIRequest(request);
+  if (!auth.authenticated || !auth.userId) {
+    return NextResponse.json({ error: auth.error ?? "Yetkisiz" }, { status: 401 });
+  }
+
+  const { id } = await context.params;
+
+  const updated = await db
+    .update(apiKeys)
+    .set({ isActive: false, updatedAt: new Date() })
+    .where(and(eq(apiKeys.id, id), eq(apiKeys.userId, auth.userId)))
+    .returning({ id: apiKeys.id });
+
+  if (updated.length === 0) {
+    return NextResponse.json(
+      { error: "Anahtar bulunamadı veya size ait değil." },
+      { status: 404 }
+    );
+  }
+
+  return NextResponse.json({
+    success: true,
+    message: "API anahtarı iptal edildi.",
+  });
+}

app/api/v1/api-keys/route.ts

@@ -0,0 +1,121 @@
+import { NextRequest, NextResponse } from "next/server";
+import { nanoid } from "nanoid";
+import { db } from "@/db";
+import { apiKeys } from "@/db/schema";
+import { eq, desc } from "drizzle-orm";
+import { authenticateWebOrAPIRequest } from "@/app/lib/api-auth";
+import { generateAPIKey, maskApiKey } from "@/app/lib/jwt";
+import {
+  MAX_API_KEY_NAME_LEN,
+  expiresAtFromDays,
+  getDaysRemaining,
+  getExpiryRemainingLabel,
+  parseExpiresInDaysOptional,
+} from "@/app/lib/api-key-utils";
+
+/**
+ * GET /api/v1/api-keys — Oturum veya Bearer ile: kendi API anahtarlarını listele (tam key dönmez)
+ */
+export async function GET(request: NextRequest) {
+  const auth = await authenticateWebOrAPIRequest(request);
+  if (!auth.authenticated || !auth.userId) {
+    return NextResponse.json({ error: auth.error ?? "Yetkisiz" }, { status: 401 });
+  }
+
+  const rows = await db
+    .select({
+      id: apiKeys.id,
+      name: apiKeys.name,
+      key: apiKeys.key,
+      expiresAt: apiKeys.expiresAt,
+      lastUsedAt: apiKeys.lastUsedAt,
+      isActive: apiKeys.isActive,
+      createdAt: apiKeys.createdAt,
+    })
+    .from(apiKeys)
+    .where(eq(apiKeys.userId, auth.userId))
+    .orderBy(desc(apiKeys.createdAt));
+
+  return NextResponse.json({
+    success: true,
+    data: {
+      keys: rows.map((r) => {
+        const exp = r.expiresAt ?? null;
+        return {
+          id: r.id,
+          name: r.name,
+          keyPreview: maskApiKey(r.key),
+          expiresAt: exp?.toISOString() ?? null,
+          daysRemaining: getDaysRemaining(exp),
+          remainingLabel: getExpiryRemainingLabel(exp),
+          lastUsedAt: r.lastUsedAt?.toISOString() ?? null,
+          isActive: r.isActive,
+          createdAt: r.createdAt.toISOString(),
+        };
+      }),
+    },
+  });
+}
+
+/**
+ * POST /api/v1/api-keys — Yeni API anahtarı oluştur (tam key yalnızca bu yanıtta bir kez)
+ *
+ * Body: { "name": string, "expiresInDays"?: number | null }
+ * — expiresInDays yok/null/0: süresiz; 1–3650: bugünden itibaren o kadar gün
+ */
+export async function POST(request: NextRequest) {
+  const auth = await authenticateWebOrAPIRequest(request);
+  if (!auth.authenticated || !auth.userId) {
+    return NextResponse.json({ error: auth.error ?? "Yetkisiz" }, { status: 401 });
+  }
+
+  let body: { name?: unknown; expiresInDays?: unknown };
+  try {
+    body = await request.json();
+  } catch {
+    return NextResponse.json({ error: "Geçersiz JSON" }, { status: 400 });
+  }
+
+  const name = typeof body.name === "string" ? body.name.trim() : "";
+  if (!name || name.length > MAX_API_KEY_NAME_LEN) {
+    return NextResponse.json(
+      {
+        error: `name zorunludur ve en fazla ${MAX_API_KEY_NAME_LEN} karakter olabilir.`,
+      },
+      { status: 400 }
+    );
+  }
+
+  const parsed = parseExpiresInDaysOptional(body.expiresInDays);
+  if (!parsed.ok) {
+    return NextResponse.json({ error: parsed.error }, { status: 400 });
+  }
+
+  const expiresAt =
+    parsed.value === null ? null : expiresAtFromDays(parsed.value);
+  const plainKey = generateAPIKey();
+  const id = nanoid();
+
+  await db.insert(apiKeys).values({
+    id,
+    userId: auth.userId,
+    name,
+    key: plainKey,
+    expiresAt,
+    isActive: true,
+  });
+
+  return NextResponse.json({
+    success: true,
+    message:
+      "API anahtarı oluşturuldu. Tam değeri yalnızca bu yanıtta saklayın; bir daha gösterilmez.",
+    data: {
+      id,
+      name,
+      key: plainKey,
+      expiresAt: expiresAt?.toISOString() ?? null,
+      daysRemaining: getDaysRemaining(expiresAt),
+      remainingLabel: getExpiryRemainingLabel(expiresAt),
+    },
+  });
+}