fix cron

.env.example

@@ -11,5 +11,5 @@ CLOUDINARY_API_KEY=
 CLOUDINARY_API_SECRET=
 LOGFLARE_API_KEY=
 LOGFLARE_SOURCE_TOKEN=
-CLEAN_SESSIONS_SECRET=
+CRON_SECRET=
 UMAMI_ID=

src/app/api/public/(key-protected)/clear-session/route.ts

@@ -23,11 +23,8 @@ export async function GET(req: NextRequest) {
 
   const reqData = await req.json();
   // if the request does not contain the API_KEY, return an error
-  if (!reqData.API_KEY) {
-    return NextResponse.json({ success: 0, message: "Invalid request" }, { status: 400 });
-  }
 
-  if (reqData.API_KEY !== env.CLEAN_SESSIONS_SECRET) {
+  if (req.headers.get("Authorization") !== `Bearer ${env.CRON_SECRET}`) {
     return NextResponse.json({ success: 0, message: "Invalid API_KEY" }, { status: 403 });
   }
 

src/lib/env.mjs

@@ -18,7 +18,7 @@ export const env = createEnv({
     DB_CA: z.string().min(1),
     LOGFLARE_API_KEY: z.string().min(1),
     LOGFLARE_SOURCE_TOKEN: z.string().min(1),
-    CLEAN_SESSIONS_SECRET: z.string().min(1),
+    CRON_SECRET: z.string().min(1),
   },
   client: {
     // NEXT_PUBLIC_PUBLISHABLE_KEY: z.string().min(1),

vercel.json

@@ -1,6 +1,6 @@
 {
   "crons": [{
-    "path": "/api/public/clear-session?key=${CLEAN_SESSIONS_SECRET}",
+    "path": "/api/public/clear-session",
     "schedule": "0 0 * * *"
   }]
 }