first

src/app/api/admin/games/route.ts

@@ -0,0 +1,38 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { bd } from '@/lib/bd'
+import { verifyAdminToken } from '@/lib/verifyAdmin'
+
+export async function DELETE(req: NextRequest) {
+    const token = req.cookies.get('token')?.value
+    const isAdmin = verifyAdminToken(token)
+    if (!isAdmin) {
+        return NextResponse.json({ error: 'Доступ запрещён' }, { status: 401 })
+    }
+
+    const { searchParams } = new URL(req.url)
+    const id = searchParams.get('id')
+    if (!id) return NextResponse.json({ error: 'ID не указан' }, { status: 400 })
+
+    try {
+        await bd.query('DELETE FROM games WHERE id = ?', [id])
+        return NextResponse.json({ success: true })
+    } catch {
+        return NextResponse.json({ error: 'Ошибка при удалении' }, { status: 500 })
+    }
+}
+
+export async function GET(req: NextRequest) {
+    const token = req.cookies.get('token')?.value
+    const isAdmin = verifyAdminToken(token)
+
+    if (!isAdmin) {
+        return NextResponse.json({ error: 'Доступ запрещён' }, { status: 401 })
+    }
+
+    try {
+        const [rows] = await bd.query('SELECT id, title, image_url, platform FROM games')
+        return NextResponse.json(rows)
+    } catch {
+        return NextResponse.json({ error: 'Ошибка БД' }, { status: 500 })
+    }
+}