fixed a bit

app/api/user/route.js

@@ -0,0 +1,17 @@
+// app/api/user/route.js
+import { getServerSession } from 'next-auth/next';
+import { authOptions } from '../auth/[...nextauth]/route';
+
+export async function GET() {
+    const session = await getServerSession(authOptions);
+
+    if (!session) {
+        return Response.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    return Response.json({
+        id: session.user.id,
+        username: session.user.username,
+        role: session.user.role
+    });
+}