import { NextResponse } from "next/server";

const API_BASE_URL =
  process.env.NEXT_PUBLIC_API_BASE_URL ?? "";

export async function POST(req: Request) {
  const body = await req.text().catch(() => "");
  const auth = req.headers.get("authorization") ?? "";

  const upstream = await fetch(`${API_BASE_URL}/api/v1/users/me/password`, {
    method: "POST",
    headers: {
      "content-type": req.headers.get("content-type") ?? "application/json",
      ...(auth ? { authorization: auth } : {}),
    },
    body,
    cache: "no-store",
  });

  const text = await upstream.text().catch(() => "");
  return new NextResponse(text, {
    status: upstream.status,
    headers: { "content-type": upstream.headers.get("content-type") ?? "application/json" },
  });
}