NightSpire/web-next/app/api/admin/news/route.ts

import { getSession } from '@/lib/session'
import { isAdmin } from '@/lib/admin'
import { createNews } from '@/lib/admin-news'

export async function POST(request: Request) {
  const session = await getSession()
  if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
  let b: Record<string, string> = {}
  try { b = await request.json() } catch { return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 }) }
  const titulo = String(b.titulo ?? '').trim()
  const contenido = String(b.contenido ?? '').trim()
  const enlace = String(b.enlace ?? '').trim() || null
  if (!titulo || !contenido) return Response.json({ success: false, error: 'emptyError' })
  const id = await createNews(titulo, contenido, enlace)
  return Response.json({ success: true, id })
}