Files
platform/src/servers/api/auth/panic-handler.ts
T

13 lines
630 B
TypeScript

import type { Handler } from 'hono';
import { triggerLockdown } from './panic';
import { clientIp } from './client-ip';
// Trigger the panic lockdown. Authenticated (Bearer token) — no password in the body. Once tripped,
// all logins and existing sessions are refused until the server is manually restarted.
export const panicHandler: Handler = async (ctx) => {
const user = ctx.get('user') as { email?: string } | undefined;
const origin = ctx.get('origin') as string | undefined;
triggerLockdown(`/panic (user=${user?.email || '?'}, origin=${origin || '-'}, ip=${clientIp(ctx)})`);
return ctx.json({ ok: true });
};