FiveM Store

// Generate a one-time signed download token
export async function generateDownloadToken(orderId: string, productId: string) {
  const token = crypto.randomUUID();
  const expiresAt = new Date(Date.now() + 15 * 60 * 1000); // 15 min

  await db.downloadToken.create({
    data: { token, orderId, productId, expiresAt, used: false },
  });

  return token;
}

// Validate and consume the token (one-time use)
export async function consumeDownloadToken(token: string) {
  const record = await db.downloadToken.findUnique({ where: { token } });

  if (!record || record.used || record.expiresAt < new Date()) {
    throw new Error('Invalid or expired download token');
  }

  await db.downloadToken.update({ where: { token }, data: { used: true } });
  return record;
}