feat(auth): complete sqlite auth and client invitations

app/api/portal-invitations/[id]/route.ts

@@ -0,0 +1,36 @@
+import { NextResponse } from "next/server";
+import {
+  PortalInvitationError,
+  revokePortalInvitation,
+} from "@/server/auth/invitations";
+import { getSessionContextFromHeaders } from "@/server/auth/session";
+
+export async function DELETE(
+  request: Request,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const actor = await getSessionContextFromHeaders(new Headers(request.headers));
+
+  if (!actor) {
+    return NextResponse.json({ error: "Oturum gerekli." }, { status: 401 });
+  }
+
+  const invitationId = Number((await params).id);
+
+  if (!Number.isInteger(invitationId) || invitationId < 1) {
+    return NextResponse.json({ error: "Geçersiz davet kimliği." }, { status: 400 });
+  }
+
+  try {
+    revokePortalInvitation(actor, invitationId);
+    return NextResponse.json({ success: true });
+  } catch (error) {
+    if (error instanceof PortalInvitationError) {
+      const status = error.code === "FORBIDDEN" ? 403 : 409;
+      return NextResponse.json({ error: error.message, code: error.code }, { status });
+    }
+
+    console.error("Portal invitation revoke failed", error);
+    return NextResponse.json({ error: "Davet iptal edilemedi." }, { status: 500 });
+  }
+}

app/api/portal-invitations/accept/route.ts

@@ -0,0 +1,29 @@
+import { NextResponse } from "next/server";
+import {
+  acceptPortalInvitation,
+  PortalInvitationError,
+} from "@/server/auth/invitations";
+
+export async function POST(request: Request) {
+  try {
+    const body = await request.json();
+    await acceptPortalInvitation({
+      token: body.token,
+      displayName: body.displayName,
+      password: body.password,
+    });
+
+    return NextResponse.json({ success: true }, { status: 201 });
+  } catch (error) {
+    if (error instanceof SyntaxError) {
+      return NextResponse.json({ error: "Geçersiz JSON gövdesi." }, { status: 400 });
+    }
+    if (error instanceof PortalInvitationError) {
+      const status = error.code === "INVALID_INPUT" ? 400 : 409;
+      return NextResponse.json({ error: error.message, code: error.code }, { status });
+    }
+
+    console.error("Portal invitation accept failed", error);
+    return NextResponse.json({ error: "Portal hesabı oluşturulamadı." }, { status: 500 });
+  }
+}

app/api/portal-invitations/route.ts

@@ -0,0 +1,40 @@
+import { NextResponse } from "next/server";
+import {
+  createPortalInvitation,
+  PortalInvitationError,
+} from "@/server/auth/invitations";
+import { getSessionContextFromHeaders } from "@/server/auth/session";
+
+export async function POST(request: Request) {
+  const actor = await getSessionContextFromHeaders(new Headers(request.headers));
+
+  if (!actor) {
+    return NextResponse.json({ error: "Oturum gerekli." }, { status: 401 });
+  }
+
+  try {
+    const body = await request.json();
+    const invitation = await createPortalInvitation(actor, {
+      clientId: body.clientId,
+      email: body.email,
+      expiresInHours: body.expiresInHours,
+    });
+
+    return NextResponse.json({ invitation }, { status: 201 });
+  } catch (error) {
+    if (error instanceof SyntaxError) {
+      return NextResponse.json({ error: "Geçersiz JSON gövdesi." }, { status: 400 });
+    }
+    return invitationErrorResponse(error);
+  }
+}
+
+function invitationErrorResponse(error: unknown) {
+  if (error instanceof PortalInvitationError) {
+    const status = error.code === "FORBIDDEN" ? 403 : error.code === "INVALID_INPUT" ? 400 : 409;
+    return NextResponse.json({ error: error.message, code: error.code }, { status });
+  }
+
+  console.error("Portal invitation create failed", error);
+  return NextResponse.json({ error: "Davet oluşturulamadı." }, { status: 500 });
+}