cal.pub0.org/pages/api/user/profile.ts

import type { NextApiRequest, NextApiResponse } from 'next';
import { getSession } from 'next-auth/client';
import prisma from '../../../lib/prisma';

export default async function handler(req: NextApiRequest, res: NextApiResponse) {
  const session = await getSession({req: req});

  if (!session) {
      res.status(401).json({message: "Not authenticated"});
      return;
  }

  // Get user
  const user = await prisma.user.findUnique({
    where: {
      email: session.user.email,
    },
    select: {
      id: true,
      password: true
    }
  });

  if (!user) { res.status(404).json({message: 'User not found'}); return; }

  const username = req.body.username;
  // username is changed: username is optional but it is necessary to be unique, enforce here
  if (username !== user.username) {
    const userConflict = await prisma.user.findFirst({
      where: {
        username,
      }
    });
    if (userConflict) {
      return res.status(409).json({ message: 'Username already taken' });
    }
  }

  const name = req.body.name;
  const description = req.body.description;
  const avatar = req.body.avatar;
  const timeZone = req.body.timeZone;
  const weekStart = req.body.weekStart;

  const updateUser = await prisma.user.update({
    where: {
      id: user.id,
    },
    data: {
      username,
      name,
      avatar,
      bio: description,
      timeZone: timeZone,
      weekStart: weekStart,
    },
  });

  return res.status(200).json({message: 'Profile updated successfully'});
}