import { hasValidSession, isAdminNetworkAllowed, json } from "../../../_lib/auth";
import { readAuth } from "../../../_lib/store";

export const dynamic = "force-dynamic";

export async function GET(request: Request) {
  if (!isAdminNetworkAllowed(request.headers)) return json({ error: "Admin is only available on the home network." }, 403);
  const { passwordHash } = await readAuth();
  return json({ setupRequired: !passwordHash, authenticated: passwordHash ? await hasValidSession(request.headers) : false });
}