21cc90a71f
保留原有 ADMIN_TOKEN 认证，同时支持传入 Sub2API 用户 token， 通过 /api/v1/auth/me 验证 role=admin 身份。 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
23 lines
968 B
TypeScript
23 lines
968 B
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { verifyAdminToken, unauthorizedResponse } from '@/lib/admin-auth';
|
|
import { adminCancelOrder, OrderError } from '@/lib/order/service';
|
|
|
|
export async function POST(request: NextRequest, { params }: { params: Promise<{ id: string }> }) {
|
|
if (!await verifyAdminToken(request)) return unauthorizedResponse();
|
|
|
|
try {
|
|
const { id } = await params;
|
|
const outcome = await adminCancelOrder(id);
|
|
if (outcome === 'already_paid') {
|
|
return NextResponse.json({ success: true, status: 'PAID', message: '订单已支付完成' });
|
|
}
|
|
return NextResponse.json({ success: true });
|
|
} catch (error) {
|
|
if (error instanceof OrderError) {
|
|
return NextResponse.json({ error: error.message, code: error.code }, { status: error.statusCode });
|
|
}
|
|
console.error('Admin cancel order error:', error);
|
|
return NextResponse.json({ error: '取消订单失败' }, { status: 500 });
|
|
}
|
|
}
|