mc-cms-namelessmc/modules/Core/includes/endpoints/RemoveGroupsEndpoint.php

<?php

/**
 * @param int $user NamelessMC ID of user to view
 * @param array $groups ID of group ids
 *
 * @return string JSON Array
 */
class RemoveGroupsEndpoint extends KeyAuthEndpoint {

    public function __construct() {
        $this->_route = 'users/{user}/groups/remove';
        $this->_module = 'Core';
        $this->_description = 'Remove groups from user';
        $this->_method = 'POST';
    }

    public function execute(Nameless2API $api, User $user): void {
        $api->validateParams($_POST, ['groups']);

        $groups = $_POST['groups'];
        if (!count($groups)) {
            $api->throwError(Nameless2API::ERROR_INVALID_POST_CONTENTS);
        }

        foreach ($groups as $group) {
            $user->removeGroup($group);
        }

        GroupSyncManager::getInstance()->broadcastGroupChange(
            $user,
            NamelessMCGroupSyncInjector::class,
            [],
            $groups,
        );

        $api->returnArray(['message' => $api->getLanguage()->get('api', 'group_updated')]);
    }
}