Initial commit

routes/api/license/+server.ts

@@ -0,0 +1,92 @@
+import { json } from '@sveltejs/kit';
+import type { RequestHandler } from './$types';
+import {
+	getLicenseStatus,
+	activateLicense,
+	deactivateLicense,
+	getHostname
+} from '$lib/server/license';
+import { authorize } from '$lib/server/authorize';
+
+// GET /api/license - Get current license status
+// Any authenticated user can view license status (needed to determine if RBAC applies)
+export const GET: RequestHandler = async ({ cookies }) => {
+	const auth = await authorize(cookies);
+	if (auth.authEnabled && !auth.isAuthenticated) {
+		return json({ error: 'Authentication required' }, { status: 401 });
+	}
+
+	try {
+		const status = await getLicenseStatus();
+		const hostname = getHostname();
+
+		return json({
+			...status,
+			hostname
+		});
+	} catch (error) {
+		console.error('Error getting license status:', error);
+		return json(
+			{ error: 'Failed to get license status' },
+			{ status: 500 }
+		);
+	}
+};
+
+// POST /api/license - Activate a license
+export const POST: RequestHandler = async ({ request, cookies }) => {
+	const auth = await authorize(cookies);
+	if (auth.authEnabled && !await auth.can('license', 'manage')) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const { name, key } = await request.json();
+
+		if (!name || !key) {
+			return json(
+				{ error: 'Name and key are required' },
+				{ status: 400 }
+			);
+		}
+
+		const result = await activateLicense(name, key);
+
+		if (!result.success) {
+			return json(
+				{ error: result.error },
+				{ status: 400 }
+			);
+		}
+
+		return json({
+			success: true,
+			license: result.license
+		});
+	} catch (error) {
+		console.error('Error activating license:', error);
+		return json(
+			{ error: 'Failed to activate license' },
+			{ status: 500 }
+		);
+	}
+};
+
+// DELETE /api/license - Deactivate license
+export const DELETE: RequestHandler = async ({ cookies }) => {
+	const auth = await authorize(cookies);
+	if (auth.authEnabled && !await auth.can('license', 'manage')) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		await deactivateLicense();
+		return json({ success: true });
+	} catch (error) {
+		console.error('Error deactivating license:', error);
+		return json(
+			{ error: 'Failed to deactivate license' },
+			{ status: 500 }
+		);
+	}
+};