All files / web/src/app/api/notifications/vapid-public-key route.ts

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
import { NextResponse } from 'next/server'

// Force dynamic so Next.js reads process.env at request time, not build time.
// Without this, the route would be statically cached with whatever value VAPID_PUBLIC_KEY
// had during the build (typically unset in CI), causing it to always return null in prod.
export const dynamic = 'force-dynamic'

/**
 * GET /api/notifications/vapid-public-key
 *
 * Returns the VAPID public key for browser push subscription.
 * No auth required — the public key is not secret.
 */
export async function GET() {
  const key = process.env.VAPID_PUBLIC_KEY
  if (!key) {
    return NextResponse.json(
      { vapidPublicKey: null },
      { status: 404, headers: { 'Cache-Control': 'no-store' } }
    )
  }
  return NextResponse.json({ vapidPublicKey: key }, { headers: { 'Cache-Control': 'no-store' } })
}