import { NextResponse } from "next/server"; import { assertSameOrigin, requireUser, revokeSession } from "@/lib/auth/session"; import { audit } from "@/lib/auth/audit"; import { handle } from "@/lib/api"; export const dynamic = "force-dynamic"; export async function DELETE(_req: Request, { params }: { params: Promise<{ id: string }> }) { try { await assertSameOrigin(); const u = await requireUser(); const { id } = await params; await revokeSession(id, u.id); await audit("session.revoke", { actorId: u.id, objectId: id }); return NextResponse.json({ ok: true }); } catch (e) { return handle(e); } }