/** * Public one-click unsubscribe endpoint. * * GET → browser confirmation page (sets opt_out and shows HTML). * POST → RFC 8058 List-Unsubscribe-Post handler used by Gmail/Apple Mail * when the user clicks the inline "Unsubscribe" button. Returns * a 204 with no body — the user never sees this response. * * No session required. All authority comes from the HMAC-signed token. */ import { NextRequest, NextResponse } from 'next/server'; import { db } from '@server/db/drizzle'; import { sql } from 'drizzle-orm'; import { initDatabase } from '@server/db/init'; import { verifyUnsubscribeToken } from '@server/services/marketing/unsubscribe-token'; import { childLogger } from '@server/logger'; import { wrapRouteHandler } from '@server/logger/request'; const log = childLogger('route.public.unsubscribe.token'); interface RouteContext { params: Promise<{ token: string }> } async function applyOptOut(restaurantId: string, customerId: string, reason: string): Promise { await initDatabase(); await db.execute(sql` UPDATE customers SET marketing_opt_out = true, opt_out_at = COALESCE(opt_out_at, now()), opt_out_reason = COALESCE(opt_out_reason, ${reason}) WHERE id = ${customerId} AND restaurant_id = ${restaurantId} `); } function htmlPage(title: string, message: string): string { return ` ${title}

${title}

${message}

`; } async function handleGET(_req: NextRequest, ctx: RouteContext): Promise { const { token } = await ctx.params; const payload = verifyUnsubscribeToken(token); if (!payload) { return new NextResponse( htmlPage('Link expired', 'This unsubscribe link is invalid or has expired. Please reply STOP to any message to opt out.'), { status: 400, headers: { 'Content-Type': 'text/html; charset=utf-8' } }, ); } try { await applyOptOut(payload.restaurantId, payload.customerId, 'email link'); return new NextResponse( htmlPage('You have been unsubscribed', 'You will no longer receive marketing emails from this restaurant. You may still receive transactional messages about your orders or bookings.'), { status: 200, headers: { 'Content-Type': 'text/html; charset=utf-8' } }, ); } catch (err) { log.error({ err }, 'unsubscribe GET failed'); return new NextResponse( htmlPage('Something went wrong', 'We could not process your request right now. Please try again later or reply STOP to opt out by message.'), { status: 500, headers: { 'Content-Type': 'text/html; charset=utf-8' } }, ); } } async function handlePOST(_req: NextRequest, ctx: RouteContext): Promise { const { token } = await ctx.params; const payload = verifyUnsubscribeToken(token); if (!payload) return new NextResponse(null, { status: 400 }); try { await applyOptOut(payload.restaurantId, payload.customerId, 'email one-click'); } catch (err) { log.error({ err }, 'unsubscribe POST failed'); return new NextResponse(null, { status: 500 }); } return new NextResponse(null, { status: 204 }); } export const GET = wrapRouteHandler((req: Request, ctx: unknown) => handleGET(req as NextRequest, ctx as RouteContext)); export const POST = wrapRouteHandler((req: Request, ctx: unknown) => handlePOST(req as NextRequest, ctx as RouteContext));