import { verifyToken } from '~/server/utils/auth'

export default defineEventHandler(async (event) => {
  const authHeader = getHeader(event, 'authorization')
  const token = authHeader?.split(' ')[1]

  if (!token) {
    return { valid: false, error: 'No token provided' }
  }

  try {
    const decoded = verifyToken(token)
    return { valid: true, user: decoded }
  } catch {
    return { valid: false, error: 'Invalid token' }
  }
})