peworkshop/app/api/teams/[teamId]/route.js

import { query, queryOne } from "@/lib/db";
import { cookies } from "next/headers";
import { verifyToken } from "@/app/api/auth/[...nextauth]/route";

export async function GET(request, context) {
  try {
    // Use our custom token verification
    const cookieStore = await cookies();
    const sessionToken = cookieStore.get("next-auth.session-token")?.value;

    if (!sessionToken) {
      return Response.json({ error: "Unauthorized" }, { status: 401 });
    }

    const userData = verifyToken(sessionToken);
    if (!userData) {
      return Response.json({ error: "Invalid session" }, { status: 401 });
    }

    const teamId = context.params.teamId;

    // Validate teamId
    if (!teamId || isNaN(parseInt(teamId, 10))) {
      return Response.json({ error: "Invalid team ID" }, { status: 400 });
    }

    const team = await queryOne("SELECT * FROM teams WHERE id = ?", [teamId]);

    if (!team) {
      return Response.json({ error: "Team not found" }, { status: 404 });
    }

    const members = await query(
      "SELECT id, username FROM users WHERE team_id = ?",
      [teamId]
    );

    return Response.json(
      {
        success: true,
        team,
        members,
      },
      { status: 200 }
    );
  } catch (error) {
    console.error("Team fetch error:", error);
    return Response.json(
      { error: "Failed to fetch team data" },
      { status: 500 }
    );
  }
}