사용자 로그인, 가입 처리

src/app/api/projects/[slug]/route.ts

@@ -1,16 +1,60 @@
 import { NextResponse } from "next/server";
 import { PrismaClient } from "@/generated/prisma/client";
+import { verifyAccessToken } from "@/features/auth/authCrypto";
 
 const prisma = new PrismaClient();
 
-export async function GET(_request: Request, context: { params: { slug: string } | Promise<{ slug: string }> }) {
+interface AuthUser {
+  id: string;
+  email: string;
+  tokenVersion: number;
+}
+
+function extractTokenFromCookieHeader(cookieHeader: string | null): string | null {
+  if (!cookieHeader) return null;
+
+  const parts = cookieHeader.split(";");
+  for (const part of parts) {
+    const trimmed = part.trim();
+    if (trimmed.startsWith("pb_access=")) {
+      const value = trimmed.substring("pb_access=".length);
+      return decodeURIComponent(value);
+    }
+  }
+  return null;
+}
+
+async function getAuthUserFromRequest(request: Request): Promise<AuthUser | null> {
+  const cookieHeader = request.headers.get("cookie");
+  const token = extractTokenFromCookieHeader(cookieHeader);
+  if (!token) return null;
+
+  const payload = await verifyAccessToken(token);
+  if (!payload) return null;
+
+  return {
+    id: payload.sub,
+    email: payload.email,
+    tokenVersion: payload.tokenVersion,
+  };
+}
+
+export async function GET(
+  request: Request,
+  context: { params: { slug: string } | Promise<{ slug: string }> },
+) {
+  const authUser = await getAuthUserFromRequest(request);
+  if (!authUser) {
+    return NextResponse.json({ message: "프로젝트를 조회하려면 로그인이 필요합니다." }, { status: 401 });
+  }
+
   const { slug } = await context.params;
 
   const project = await prisma.project.findUnique({
     where: { slug },
   });
 
-  if (!project) {
+  if (!project || (project.userId && project.userId !== authUser.id)) {
     return NextResponse.json({ message: "프로젝트를 찾을 수 없습니다." }, { status: 404 });
   }
 
@@ -18,12 +62,25 @@ export async function GET(_request: Request, context: { params: { slug: string }
 }
 
 export async function DELETE(
-  _request: Request,
+  request: Request,
   context: { params: { slug: string } | Promise<{ slug: string }> },
 ) {
+  const authUser = await getAuthUserFromRequest(request);
+  if (!authUser) {
+    return NextResponse.json({ message: "프로젝트를 삭제하려면 로그인이 필요합니다." }, { status: 401 });
+  }
+
   const { slug } = await context.params;
 
   try {
+    const project = await prisma.project.findUnique({
+      where: { slug },
+    });
+
+    if (!project || (project.userId && project.userId !== authUser.id)) {
+      return NextResponse.json({ message: "프로젝트를 찾을 수 없습니다." }, { status: 404 });
+    }
+
     await prisma.project.delete({
       where: { slug },
     });