janpeter visser
1ff894a6c0
- Schema: bio (160), bio_detail (2000) en avatar_data (bytea) op User - POST /api/profile/avatar: validatie MIME-type + max 12 MB vóór verwerking, Sharp resize naar max 700x700 (fit inside), output WebP q85, opgeslagen als bytea in Neon - GET /api/profile/avatar: serveert avatar met Cache-Control private 1u - updateProfileAction: slaat bio en bio_detail op via Server Action + Zod - ProfileEditor client component: avatar preview, upload met client-side validatie, bio-velden met tekenlimieten - Settings page: profiel-sectie bovenaan, uitgeschakeld voor demo-gebruiker - next.config: sharp als serverExternalPackage Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
73 lines
2 KiB
TypeScript
73 lines
2 KiB
TypeScript
import { cookies } from 'next/headers'
|
|
import { getIronSession } from 'iron-session'
|
|
import sharp from 'sharp'
|
|
import { prisma } from '@/lib/prisma'
|
|
import { SessionData, sessionOptions } from '@/lib/session'
|
|
|
|
const MAX_BYTES = 12 * 1024 * 1024
|
|
const ALLOWED_TYPES = new Set(['image/jpeg', 'image/png', 'image/webp'])
|
|
|
|
async function getSession() {
|
|
return getIronSession<SessionData>(await cookies(), sessionOptions)
|
|
}
|
|
|
|
export async function POST(request: Request) {
|
|
const session = await getSession()
|
|
if (!session.userId) {
|
|
return Response.json({ error: 'Niet ingelogd' }, { status: 401 })
|
|
}
|
|
if (session.isDemo) {
|
|
return Response.json({ error: 'Niet beschikbaar in demo-modus' }, { status: 403 })
|
|
}
|
|
|
|
const formData = await request.formData()
|
|
const file = formData.get('avatar') as File | null
|
|
if (!file || file.size === 0) {
|
|
return Response.json({ error: 'Geen bestand ontvangen' }, { status: 400 })
|
|
}
|
|
|
|
if (!ALLOWED_TYPES.has(file.type)) {
|
|
return Response.json({ error: 'Alleen JPEG, PNG en WebP zijn toegestaan' }, { status: 400 })
|
|
}
|
|
|
|
if (file.size > MAX_BYTES) {
|
|
return Response.json({ error: 'Bestand is groter dan 12 MB' }, { status: 400 })
|
|
}
|
|
|
|
const input = Buffer.from(await file.arrayBuffer())
|
|
|
|
const processed = await sharp(input)
|
|
.resize(700, 700, { fit: 'inside', withoutEnlargement: true })
|
|
.webp({ quality: 85 })
|
|
.toBuffer()
|
|
|
|
await prisma.user.update({
|
|
where: { id: session.userId },
|
|
data: { avatar_data: new Uint8Array(processed) },
|
|
})
|
|
|
|
return Response.json({ ok: true })
|
|
}
|
|
|
|
export async function GET() {
|
|
const session = await getSession()
|
|
if (!session.userId) {
|
|
return new Response(null, { status: 401 })
|
|
}
|
|
|
|
const user = await prisma.user.findUnique({
|
|
where: { id: session.userId },
|
|
select: { avatar_data: true },
|
|
})
|
|
|
|
if (!user?.avatar_data) {
|
|
return new Response(null, { status: 404 })
|
|
}
|
|
|
|
return new Response(user.avatar_data, {
|
|
headers: {
|
|
'Content-Type': 'image/webp',
|
|
'Cache-Control': 'private, max-age=3600',
|
|
},
|
|
})
|
|
}
|