+server.ts RawHistoryFolder

1import type { RequestHandler } from '@sveltejs/kit';
2import { users } from '$lib/db/convex.server';
3import { validateSessionToken } from '$lib/api/session.server';
4
5export const POST: RequestHandler = async ({ request, cookies }) => {
6	const token = cookies.get('session');
7
8	if (!token) {
9		return new Response(JSON.stringify({ error: 'Unauthorized' }), {
10			status: 401,
11			headers: { 'Content-Type': 'application/json' }
12		});
13	}
14
15	try {
16		const { user } = await validateSessionToken(token);
17
18		if (!user) {
19			return new Response(JSON.stringify({ error: 'Unauthorized' }), {
20				status: 401,
21				headers: { 'Content-Type': 'application/json' }
22			});
23		}
24
25		const body = await request.json();
26		const { timestamp } = body as { timestamp: number };
27
28		if (typeof timestamp !== 'number' || timestamp <= 0) {
29			return new Response(JSON.stringify({ error: 'Invalid timestamp' }), {
30				status: 400,
31				headers: { 'Content-Type': 'application/json' }
32			});
33		}
34
35		// Prevent far-future timestamps that could suppress notifications permanently
36		const now = Date.now();
37		const maxSkewMs = 5 * 60 * 1000; // 5 minutes clock skew tolerance
38		if (timestamp > now + maxSkewMs) {
39			return new Response(JSON.stringify({ error: 'Timestamp too far in the future' }), {
40				status: 400,
41				headers: { 'Content-Type': 'application/json' }
42			});
43		}
44
45		await users.updateLastReadMentionTimestamp(user.id, timestamp);
46
47		return new Response(JSON.stringify({ success: true }), {
48			status: 200,
49			headers: { 'Content-Type': 'application/json' }
50		});
51	} catch (error) {
52		console.error('Error updating mention read timestamp:', error);
53		return new Response(JSON.stringify({ error: 'Internal server error' }), {
54			status: 500,
55			headers: { 'Content-Type': 'application/json' }
56		});
57	}
58};