사용자 로그인, 가입 처리

src/app/api/projects/route.ts

@@ -1,11 +1,53 @@
 import { NextResponse } from "next/server";
 import { PrismaClient } from "@/generated/prisma/client";
+import { verifyAccessToken } from "@/features/auth/authCrypto";
 
 const prisma = new PrismaClient();
 
-export async function GET(_request: Request) {
+interface AuthUser {
+  id: string;
+  email: string;
+  tokenVersion: number;
+}
+
+function extractTokenFromCookieHeader(cookieHeader: string | null): string | null {
+  if (!cookieHeader) return null;
+
+  const parts = cookieHeader.split(";");
+  for (const part of parts) {
+    const trimmed = part.trim();
+    if (trimmed.startsWith("pb_access=")) {
+      const value = trimmed.substring("pb_access=".length);
+      return decodeURIComponent(value);
+    }
+  }
+  return null;
+}
+
+async function getAuthUserFromRequest(request: Request): Promise<AuthUser | null> {
+  const cookieHeader = request.headers.get("cookie");
+  const token = extractTokenFromCookieHeader(cookieHeader);
+  if (!token) return null;
+
+  const payload = await verifyAccessToken(token);
+  if (!payload) return null;
+
+  return {
+    id: payload.sub,
+    email: payload.email,
+    tokenVersion: payload.tokenVersion,
+  };
+}
+
+export async function GET(request: Request) {
+  const authUser = await getAuthUserFromRequest(request);
+  if (!authUser) {
+    return NextResponse.json({ message: "프로젝트 목록을 조회하려면 로그인이 필요합니다." }, { status: 401 });
+  }
+
   try {
     const projects = await prisma.project.findMany({
+      where: { userId: authUser.id },
       orderBy: { createdAt: "desc" },
       take: 50,
       select: {
@@ -28,6 +70,11 @@ export async function GET(_request: Request) {
 }
 
 export async function POST(request: Request) {
+  const authUser = await getAuthUserFromRequest(request);
+  if (!authUser) {
+    return NextResponse.json({ message: "프로젝트를 저장하려면 로그인이 필요합니다." }, { status: 401 });
+  }
+
   const body = await request.json();
   const { title, slug, contentJson } = body;
 
@@ -36,6 +83,17 @@ export async function POST(request: Request) {
   }
 
   try {
+    const existing = await prisma.project.findUnique({
+      where: { slug },
+    });
+
+    if (existing && existing.userId && existing.userId !== authUser.id) {
+      return NextResponse.json(
+        { message: "이미 다른 사용자가 사용 중인 프로젝트 주소입니다." },
+        { status: 409 },
+      );
+    }
+
     const project = await prisma.project.upsert({
       where: { slug },
       update: {
@@ -46,6 +104,7 @@ export async function POST(request: Request) {
         title,
         slug,
         contentJson,
+        userId: authUser.id,
       },
     });