GaleriPin

async function connectToMongo() {
  if (db) return db
  if (!connectPromise) {
    connectPromise = (async () => {
      client = new MongoClient(process.env.MONGO_URL)
      await client.connect()
      db = client.db(process.env.DB_NAME || 'galeripin')
      return db
    })()
  }
  return connectPromise
}

const clean = (doc) => {
  if (!doc) return doc
  const { _id, passwordHash, securityAnswerHash, resetToken, resetExpires, ...rest } = doc
  return rest
}

export async function uploadImage(dataUrl) {
  const cloud = process.env.CLOUDINARY_CLOUD_NAME
  const apiKey = process.env.CLOUDINARY_API_KEY
  const apiSecret = process.env.CLOUDINARY_API_SECRET
  const folder = process.env.CLOUDINARY_FOLDER || 'galeripin'

  if (cloud && apiKey && apiSecret) {
    const timestamp = Math.floor(Date.now() / 1000)
    const paramsToSign = `folder=${folder}&timestamp=${timestamp}`
    const signature = crypto.createHash('sha1').update(paramsToSign + apiSecret).digest('hex')

    const form = new FormData()
    form.append('file', dataUrl)
    form.append('api_key', apiKey)
    form.append('timestamp', String(timestamp))
    form.append('folder', folder)
    form.append('signature', signature)

if (route === '/auth/register' && method === 'POST') {
  const body = await request.json()
  const acceptedTerms = body.acceptedTerms === true
  if (!acceptedTerms) {
    return cors(NextResponse.json(
      { error: 'Pro registraci musíš souhlasit s podmínkami používání' },
      { status: 400 }
    ))
  }
  const username = (body.username || '').trim().toLowerCase().replace(/[^a-z0-9_.]/g, '')
  const password = body.password || ''
  const email = (body.email || '').trim().toLowerCase() || null
  if (username.length < 2) return cors(NextResponse.json(
    { error: 'Přezdívka musí mít alespoň 2 znaky (a-z, 0-9, _ .)' },
    { status: 400 }
  ))