import getXSRFToken from "../getXSRF.js";


export default async function modifyRole(role, userId) {
    try {
        const csrfToken = await getXSRFToken();

        const res = await fetch(
            `${import.meta.env.VITE_API_URL}/api/users/${userId}/role`,
            {
                method: 'POST',
                credentials: 'include',
                headers: {
                    'Accept': 'application/json',
                    'X-XSRF-TOKEN': csrfToken,
                    'Content-Type': 'application/json',
                },
                body: JSON.stringify({ role }),
            }
        );

        const data = await res.json();

        if (!res.ok) {
            return { success: false, error: data.message ?? "Erreur serveur" };
        }

        return { success: true, data };
    } catch (err) {
        console.error(err);
        return { success: false, error: "Erreur réseau" };
    }
}