mobile app api

public/userportal/api/home-owner-detach.php

@@ -0,0 +1,36 @@
+<?php
+require __DIR__ . '/_bootstrap.php';
+
+/**
+ * @OA\Post(
+ *   path="/home-owner-detach.php",
+ *   tags={"Owners"},
+ *   summary="Detach owner from home",
+ *   security={{"bearerAuth":{}}},
+ *   @OA\RequestBody(required=true, @OA\JsonContent(
+ *     required={"idhome","owner_id"},
+ *     @OA\Property(property="idhome", type="integer"),
+ *     @OA\Property(property="owner_id", type="integer")
+ *   )),
+ *   @OA\Response(response=200, ref="#/components/responses/Success"),
+ *   @OA\Response(response=403, ref="#/components/responses/Forbidden")
+ * )
+ */
+require_method('POST');
+$user = require_auth($pdo);
+$in   = body();
+
+$idhome  = (int) ($in['idhome'] ?? 0);
+$ownerId = (int) ($in['owner_id'] ?? 0);
+
+if ($idhome <= 0 || $ownerId <= 0) {
+    json_error(422, 'idhome and owner_id are required');
+}
+if (!user_owns_home($pdo, $user, $idhome)) {
+    json_error(403, 'No access to this home');
+}
+
+$pdo->prepare('DELETE FROM home_owners WHERE home_id = ? AND owner_id = ?')
+    ->execute([$idhome, $ownerId]);
+
+json_ok();