basic user accounts +

app/api/account/route.ts

@@ -0,0 +1,48 @@
+// app/api/account/route.ts
+import { NextResponse } from "next/server";
+import { dxGET } from "@/lib/directus";
+import { requireBearer } from "@/app/api/_lib/auth";
+
+const API = (process.env.NEXT_PUBLIC_API_BASE_URL || "").replace(/\/$/, "");
+
+function bad(msg: string, code = 400) {
+    return NextResponse.json({ error: msg }, { status: code });
+}
+
+export async function GET(req: Request) {
+    try {
+        const bearer = requireBearer(req);
+        const fields = encodeURIComponent([
+            "id","username","first_name","last_name","email","location","avatar.id","avatar.filename_download","avatar.title"
+        ].join(","));
+        const me = await dxGET<any>(`/users/me?fields=${fields}`, bearer);
+        return NextResponse.json(me?.data ?? me ?? {});
+    } catch (e: any) {
+        return bad(e?.message || "Failed to load account", e?.status || 500);
+    }
+}
+
+export async function PATCH(req: Request) {
+    try {
+        const bearer = requireBearer(req);
+        const body = await req.json().catch(() => ({}));
+
+        const payload: Record<string, any> = {};
+        for (const k of ["first_name","last_name","email","location"]) {
+            if (k in body) payload[k] = body[k] ?? null;
+        }
+        if (!Object.keys(payload).length) return bad("No changes");
+
+        const res = await fetch(`${API}/users/me`, {
+            method: "PATCH",
+            headers: { "Content-Type": "application/json", Authorization: bearer },
+            body: JSON.stringify(payload),
+        });
+        const j = await res.json().catch(() => ({}));
+        if (!res.ok) return bad(j?.errors?.[0]?.message || "Update failed", res.status);
+
+        return NextResponse.json(j?.data ?? j ?? {});
+    } catch (e: any) {
+        return bad(e?.message || "Failed to update account", e?.status || 500);
+    }
+}