2 files changed, 113 insertions, 89 deletions
diff --git a/pages/api/user/profile.js b/pages/api/user/profile.js
index 2b44ae2..dd22bd8 100644
--- a/pages/api/user/profile.js
+++ b/pages/api/user/profile.js
@@ -1,3 +1,6 @@
+import { getServerSession } from "next-auth";
+import { authOptions } from "../auth/[...nextauth]";
+
 import {
   createUser,
   deleteUser,
@@ -6,47 +9,55 @@ import {
 } from "../../../prisma/user";
 
 export default async function handler(req, res) {
-  try {
-    switch (req.method) {
-      case "POST": {
-        const { name, setting } = req.body;
-        const new_user = await createUser(name, setting);
-        if (!new_user) {
-          return res.status(200).json({ message: "User is already created" });
-        } else {
-          return res.status(201).json(new_user);
+  const session = await getServerSession(req, res, authOptions);
+  if (session) {
+    // Signed in
+    try {
+      switch (req.method) {
+        case "POST": {
+          const { name, setting } = req.body;
+          const new_user = await createUser(name, setting);
+          if (!new_user) {
+            return res.status(200).json({ message: "User is already created" });
+          } else {
+            return res.status(201).json(new_user);
+          }
         }
-      }
-      case "PUT": {
-        const { name, anime } = req.body;
-        const user = await updateUser(name, anime);
-        if (!user) {
-          return res.status(200).json({ message: "Title is already there" });
-        } else {
-          return res.status(200).json(user);
+        case "PUT": {
+          const { name, anime } = req.body;
+          const user = await updateUser(name, anime);
+          if (!user) {
+            return res.status(200).json({ message: "Title is already there" });
+          } else {
+            return res.status(200).json(user);
+          }
         }
-      }
-      case "GET": {
-        const { name } = req.query;
-        const user = await getUser(name);
-        if (!user) {
-          return res.status(404).json({ message: "User not found" });
-        } else {
-          return res.status(200).json(user);
+        case "GET": {
+          const { name } = req.query;
+          const user = await getUser(name);
+          if (!user) {
+            return res.status(404).json({ message: "User not found" });
+          } else {
+            return res.status(200).json(user);
+          }
         }
-      }
-      case "DELETE": {
-        const { name } = req.body;
-        const user = await deleteUser(name);
-        if (!user) {
-          return res.status(404).json({ message: "User not found" });
-        } else {
-          return res.status(200).json(user);
+        case "DELETE": {
+          const { name } = req.body;
+          const user = await deleteUser(name);
+          if (!user) {
+            return res.status(404).json({ message: "User not found" });
+          } else {
+            return res.status(200).json(user);
+          }
         }
       }
+    } catch (error) {
+      console.log(error);
+      return res.status(500).json({ message: "Internal server error" });
     }
-  } catch (error) {
-    console.log(error);
-    return res.status(500).json({ message: "Internal server error" });
+  } else {
+    // Not Signed in
+    res.status(401);
   }
+  res.end();
 }
diff --git a/pages/api/user/update/episode.js b/pages/api/user/update/episode.js
index f69bb78..7974446 100644
--- a/pages/api/user/update/episode.js
+++ b/pages/api/user/update/episode.js
@@ -1,3 +1,6 @@
+import { getServerSession } from "next-auth";
+import { authOptions } from "../../auth/[...nextauth]";
+
 import {
   createList,
   getEpisode,
@@ -5,64 +8,74 @@ import {
 } from "../../../../prisma/user";
 
 export default async function handler(req, res) {
-  try {
-    switch (req.method) {
-      case "POST": {
-        const { name, id } = JSON.parse(req.body);
+  const session = await getServerSession(req, res, authOptions);
+  if (session) {
+    // Signed in
+    try {
+      switch (req.method) {
+        case "POST": {
+          const { name, id } = JSON.parse(req.body);
 
-        const episode = await createList(name, id);
-        if (!episode) {
-          return res
-            .status(200)
-            .json({ message: "Episode is already created" });
-        } else {
-          return res.status(201).json(episode);
+          const episode = await createList(name, id);
+          if (!episode) {
+            return res
+              .status(200)
+              .json({ message: "Episode is already created" });
+          } else {
+            return res.status(201).json(episode);
+          }
         }
-      }
-      case "PUT": {
-        const {
-          name,
-          id,
-          watchId,
-          title,
-          image,
-          number,
-          duration,
-          timeWatched,
-          aniTitle,
-          provider,
-        } = JSON.parse(req.body);
-        const episode = await updateUserEpisode({
-          name,
-          id,
-          watchId,
-          title,
-          image,
-          number,
-          duration,
-          timeWatched,
-          aniTitle,
-          provider,
-        });
-        if (!episode) {
-          return res.status(200).json({ message: "Episode is already there" });
-        } else {
-          return res.status(200).json(episode);
+        case "PUT": {
+          const {
+            name,
+            id,
+            watchId,
+            title,
+            image,
+            number,
+            duration,
+            timeWatched,
+            aniTitle,
+            provider,
+          } = JSON.parse(req.body);
+          const episode = await updateUserEpisode({
+            name,
+            id,
+            watchId,
+            title,
+            image,
+            number,
+            duration,
+            timeWatched,
+            aniTitle,
+            provider,
+          });
+          if (!episode) {
+            return res
+              .status(200)
+              .json({ message: "Episode is already there" });
+          } else {
+            return res.status(200).json(episode);
+          }
         }
-      }
-      case "GET": {
-        const { name, id } = req.query;
-        // console.log(req.query);
-        const episode = await getEpisode(name, id);
-        if (!episode) {
-          return res.status(404).json({ message: "Episode not found" });
-        } else {
-          return res.status(200).json(episode);
+        case "GET": {
+          const { name, id } = req.query;
+          // console.log(req.query);
+          const episode = await getEpisode(name, id);
+          if (!episode) {
+            return res.status(404).json({ message: "Episode not found" });
+          } else {
+            return res.status(200).json(episode);
+          }
         }
       }
+    } catch (error) {
+      console.log(error);
+      return res.status(500).json({ message: "Internal server error" });
     }
-  } catch (error) {
-    console.log(error);
-    return res.status(500).json({ message: "Internal server error" });
+  } else {
+    // Not Signed in
+    res.status(401);
   }
+  res.end();
 }