feat: implement user authentication and authorization with NextAuth, including user schema, password hashing, and role-based access control.

src/features/snapshots/api/delete-snapshot.ts

@@ -2,11 +2,20 @@
 
 import { db } from "@/db";
 import { sessionSnapshots } from "@/db/schema";
-import { eq } from "drizzle-orm";
+import { and, eq } from "drizzle-orm";
+import { auth } from "@/lib/auth";
 
 export async function deleteSnapshot(id: number) {
+    const session = await auth();
+    const userId = session?.user ? Number((session.user as any).id) : null;
+
+    if (!userId) {
+        return { success: false, error: "Non autorisé" };
+    }
+
     try {
-        await db.delete(sessionSnapshots).where(eq(sessionSnapshots.id, id));
+        await db.delete(sessionSnapshots)
+            .where(and(eq(sessionSnapshots.id, id), eq(sessionSnapshots.userId, userId)));
         return { success: true };
     } catch (err) {
         console.error(err);