1 files changed, 47 insertions, 36 deletions
diff --git a/pages/api/user/profile.js b/pages/api/user/profile.js
index 2b44ae2..dd22bd8 100644
--- a/pages/api/user/profile.js
+++ b/pages/api/user/profile.js
@@ -1,3 +1,6 @@
+import { getServerSession } from "next-auth";
+import { authOptions } from "../auth/[...nextauth]";
+
 import {
   createUser,
   deleteUser,
@@ -6,47 +9,55 @@ import {
 } from "../../../prisma/user";
 
 export default async function handler(req, res) {
-  try {
-    switch (req.method) {
-      case "POST": {
-        const { name, setting } = req.body;
-        const new_user = await createUser(name, setting);
-        if (!new_user) {
-          return res.status(200).json({ message: "User is already created" });
-        } else {
-          return res.status(201).json(new_user);
+  const session = await getServerSession(req, res, authOptions);
+  if (session) {
+    // Signed in
+    try {
+      switch (req.method) {
+        case "POST": {
+          const { name, setting } = req.body;
+          const new_user = await createUser(name, setting);
+          if (!new_user) {
+            return res.status(200).json({ message: "User is already created" });
+          } else {
+            return res.status(201).json(new_user);
+          }
         }
-      }
-      case "PUT": {
-        const { name, anime } = req.body;
-        const user = await updateUser(name, anime);
-        if (!user) {
-          return res.status(200).json({ message: "Title is already there" });
-        } else {
-          return res.status(200).json(user);
+        case "PUT": {
+          const { name, anime } = req.body;
+          const user = await updateUser(name, anime);
+          if (!user) {
+            return res.status(200).json({ message: "Title is already there" });
+          } else {
+            return res.status(200).json(user);
+          }
         }
-      }
-      case "GET": {
-        const { name } = req.query;
-        const user = await getUser(name);
-        if (!user) {
-          return res.status(404).json({ message: "User not found" });
-        } else {
-          return res.status(200).json(user);
+        case "GET": {
+          const { name } = req.query;
+          const user = await getUser(name);
+          if (!user) {
+            return res.status(404).json({ message: "User not found" });
+          } else {
+            return res.status(200).json(user);
+          }
         }
-      }
-      case "DELETE": {
-        const { name } = req.body;
-        const user = await deleteUser(name);
-        if (!user) {
-          return res.status(404).json({ message: "User not found" });
-        } else {
-          return res.status(200).json(user);
+        case "DELETE": {
+          const { name } = req.body;
+          const user = await deleteUser(name);
+          if (!user) {
+            return res.status(404).json({ message: "User not found" });
+          } else {
+            return res.status(200).json(user);
+          }
         }
       }
+    } catch (error) {
+      console.log(error);
+      return res.status(500).json({ message: "Internal server error" });
     }
-  } catch (error) {
-    console.log(error);
-    return res.status(500).json({ message: "Internal server error" });
+  } else {
+    // Not Signed in
+    res.status(401);
   }
+  res.end();
 }