import {NextRequest,NextResponse} from 'next/server';
import {adminKeyMatches,prisma} from '@/lib/access';
export const runtime='nodejs';
export async function GET(request:NextRequest){
 if(!adminKeyMatches(request.headers.get('x-tachy-admin-key')))return NextResponse.json({error:'Accès refusé'},{status:403});
 try{
  const users=await prisma.user.findMany({where:{role:'STUDENT'},orderBy:{createdAt:'desc'},select:{id:true,name:true,createdAt:true,accessCodes:{select:{id:true,createdAt:true,activatedAt:true,expiresAt:true,revokedAt:true}}}});
  return NextResponse.json({students:users},{headers:{'Cache-Control':'no-store'}});
 }catch{return NextResponse.json({error:'Liste indisponible'},{status:500});}
}