connection base prisma + postgres + login ok

src/app/api/chapters/[id]/route.ts

@@ -0,0 +1,65 @@
+export const dynamic = 'force-dynamic';
+
+import { NextRequest, NextResponse } from 'next/server';
+import { auth } from '@/lib/auth';
+import getDB from '@/lib/prisma';
+
+// PUT /api/chapters/[id] — Update a chapter
+export async function PUT(
+    request: NextRequest,
+    { params }: { params: Promise<{ id: string }> }
+) {
+    const session = await auth();
+    if (!session?.user?.id) {
+        return NextResponse.json({ error: 'Non autorisé' }, { status: 401 });
+    }
+
+    const { id } = await params;
+    const body = await request.json();
+
+    // Verify ownership via project
+    const chapter = await getDB().chapter.findUnique({
+        where: { id },
+        include: { project: { select: { userId: true } } },
+    });
+    if (!chapter || chapter.project.userId !== session.user.id) {
+        return NextResponse.json({ error: 'Non trouvé' }, { status: 404 });
+    }
+
+    const updated = await getDB().chapter.update({
+        where: { id },
+        data: {
+            ...(body.title !== undefined && { title: body.title }),
+            ...(body.content !== undefined && { content: body.content }),
+            ...(body.summary !== undefined && { summary: body.summary }),
+            ...(body.orderIndex !== undefined && { orderIndex: body.orderIndex }),
+        },
+    });
+
+    return NextResponse.json(updated);
+}
+
+// DELETE /api/chapters/[id]
+export async function DELETE(
+    _request: NextRequest,
+    { params }: { params: Promise<{ id: string }> }
+) {
+    const session = await auth();
+    if (!session?.user?.id) {
+        return NextResponse.json({ error: 'Non autorisé' }, { status: 401 });
+    }
+
+    const { id } = await params;
+
+    const chapter = await getDB().chapter.findUnique({
+        where: { id },
+        include: { project: { select: { userId: true } } },
+    });
+    if (!chapter || chapter.project.userId !== session.user.id) {
+        return NextResponse.json({ error: 'Non trouvé' }, { status: 404 });
+    }
+
+    await getDB().chapter.delete({ where: { id } });
+
+    return NextResponse.json({ success: true });
+}