Created the possibility to delete a user

src/pages/api/user.ts

@@ -1,8 +1,9 @@
+import {PERMISSIONS} from "@/constants/userPermissions";
 import {app} from "@/firebase";
 import {User} from "@/interfaces/user";
 import {sessionOptions} from "@/lib/session";
 import {getAuth} from "firebase/auth";
-import {doc, getDoc, getFirestore} from "firebase/firestore";
+import {deleteDoc, doc, getDoc, getFirestore} from "firebase/firestore";
 import {withIronSessionApiRoute} from "iron-session/next";
 import {NextApiRequest, NextApiResponse} from "next";
 
@@ -13,10 +14,46 @@ export default withIronSessionApiRoute(user, sessionOptions);
 
 async function user(req: NextApiRequest, res: NextApiResponse) {
 	if (req.method === "GET") return get(req, res);
+	if (req.method === "DELETE") return del(req, res);
 
 	res.status(404).json(undefined);
 }
 
+async function del(req: NextApiRequest, res: NextApiResponse) {
+	if (!req.session.user) {
+		res.status(401).json({ok: false});
+		return;
+	}
+
+	const {id} = req.query as {id: string};
+
+	const docUser = await getDoc(doc(db, "users", req.session.user.id));
+	if (!docUser.exists()) {
+		res.status(401).json({ok: false});
+		return;
+	}
+
+	const user = docUser.data() as User;
+
+	const docTargetUser = await getDoc(doc(db, "users", id));
+	if (!docTargetUser.exists()) {
+		res.status(404).json({ok: false});
+		return;
+	}
+
+	const targetUser = docTargetUser.data() as User;
+
+	const permission = PERMISSIONS.deleteUser[targetUser.type];
+	if (!permission.includes(user.type)) {
+		res.status(403).json({ok: false});
+		return;
+	}
+
+	await deleteDoc(doc(db, "users", id));
+
+	res.json({...user, id: req.session.user.id});
+}
+
 async function get(req: NextApiRequest, res: NextApiResponse) {
 	if (req.session.user) {
 		const docUser = await getDoc(doc(db, "users", req.session.user.id));