portabase/app/api/v1/databases/[id]/route.ts

import { NextResponse } from "next/server";
import { withApiKey, ApiKeyContext } from "@/lib/api-v1/middleware";
import { getAccessibleDatabaseIds } from "@/lib/api-v1/acl";
import { db } from "@/db";
import * as drizzleDb from "@/db";
import { eq } from "drizzle-orm";
import { logger } from "@/lib/logger";

const log = logger.child({ module: "api/v1/databases/[id]" });

export const GET = withApiKey(
  async (_req: Request, ctx: ApiKeyContext, params?: Record<string, string>) => {
    try {
      const id = params?.id;
      if (!id) return NextResponse.json({ error: "Not found" }, { status: 404 });

      const accessibleIds = await getAccessibleDatabaseIds(ctx.userId);
      if (!accessibleIds.includes(id)) {
        const exists = await db.query.database.findFirst({
          where: eq(drizzleDb.schemas.database.id, id),
          columns: { id: true },
        });
        return NextResponse.json(
          { error: exists ? "Forbidden" : "Not found" },
          { status: exists ? 403 : 404 }
        );
      }

      const database = await db.query.database.findFirst({
        where: eq(drizzleDb.schemas.database.id, id),
      });

      if (!database) return NextResponse.json({ error: "Not found" }, { status: 404 });
      return NextResponse.json({ data: database });
    } catch (error) {
      log.error({ error }, "Error in GET /api/v1/databases/[id]");
      return NextResponse.json({ error: "Internal server error" }, { status: 500 });
    }
  }
);