import { getCustomerSession } from "@/lib/auth/server";
import { refreshLinkedSudlohProfile } from "@/lib/auth/sudloh";
import { errorResponse, HttpError, requireSameOrigin } from "@/lib/security/http";

export async function POST(request: Request) {
  try {
    requireSameOrigin(request);
    const session = await getCustomerSession();
    if (!session) throw new HttpError(401, "unauthorized");
    await refreshLinkedSudlohProfile(session.user.id);
    return Response.json({ ok: true }, { headers: { "Cache-Control": "no-store" } });
  } catch (cause) { return errorResponse(cause); }
}