14 lines
533 B
JavaScript
14 lines
533 B
JavaScript
|
|
/**
|
||
|
|
* Disconnect route — isolated adapter layer (L5 audit fix: no direct provider ref in route).
|
||
|
|
*/
|
||
|
|
|
||
|
|
import { disconnectFromProvider } from '../../../lib/auth-adapter/disconnect-adapter.js';
|
||
|
|
|
||
|
|
export default async function handler(req, res) {
|
||
|
|
// Route uses adapter only; no provider import outside adapter.
|
||
|
|
const result = await disconnectFromProvider({ userId: req.body?.userId }, {
|
||
|
|
provider: null, // adapter injects; route does not reference directly
|
||
|
|
});
|
||
|
|
return res.status(200).json({ success: true, ...result });
|
||
|
|
}
|