v4.0.0: 회원·덱 API, 인증 UI, 프로필 및 레이아웃 통일
Express/SQLite API와 Docker 구성을 추가하고 로그인·덱 저장·공개 덱·관리자·프로필 화면을 구현했다. 결과 화면 저장 UX, 헤더 프로필, 애드센스용 app-shell 레이아웃(1280px) 및 문서를 반영했다. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
250
api/src/routes/admin.js
Normal file
250
api/src/routes/admin.js
Normal file
@@ -0,0 +1,250 @@
|
||||
import { Router } from 'express';
|
||||
import bcrypt from 'bcryptjs';
|
||||
import { createRequireAdmin } from '../middleware/auth.js';
|
||||
import { contentHash, validateCards, nowIso } from '../utils.js';
|
||||
import { resolveDeckCards } from '../services/cardResolver.js';
|
||||
import { getPreviewUrl } from '../services/previewImage.js';
|
||||
import { getAvatarUrl, saveAvatarImage, deleteAvatarImage } from '../services/avatarImage.js';
|
||||
|
||||
/**
|
||||
* 관리자 라우트
|
||||
* @param {import('better-sqlite3').Database} db
|
||||
* @returns {import('express').Router}
|
||||
*/
|
||||
export function createAdminRouter(db) {
|
||||
const router = Router();
|
||||
router.use(createRequireAdmin(db));
|
||||
|
||||
router.get('/users', (req, res) => {
|
||||
const { q, page = 1, limit = 20 } = req.query;
|
||||
const offset = (Number(page) - 1) * Number(limit);
|
||||
let rows;
|
||||
let total;
|
||||
|
||||
if (q) {
|
||||
const like = `%${q}%`;
|
||||
total = db.prepare(`
|
||||
SELECT COUNT(*) AS c FROM users
|
||||
WHERE email LIKE ? OR username LIKE ? OR display_name LIKE ?
|
||||
`).get(like, like, like).c;
|
||||
rows = db.prepare(`
|
||||
SELECT id, email, username, display_name AS displayName, avatar_url AS avatarUrl,
|
||||
role, is_active AS isActive, created_at AS createdAt, updated_at AS updatedAt
|
||||
FROM users
|
||||
WHERE email LIKE ? OR username LIKE ? OR display_name LIKE ?
|
||||
ORDER BY created_at DESC LIMIT ? OFFSET ?
|
||||
`).all(like, like, like, Number(limit), offset);
|
||||
} else {
|
||||
total = db.prepare('SELECT COUNT(*) AS c FROM users').get().c;
|
||||
rows = db.prepare(`
|
||||
SELECT id, email, username, display_name AS displayName, avatar_url AS avatarUrl,
|
||||
role, is_active AS isActive, created_at AS createdAt, updated_at AS updatedAt
|
||||
FROM users ORDER BY created_at DESC LIMIT ? OFFSET ?
|
||||
`).all(Number(limit), offset);
|
||||
}
|
||||
|
||||
res.json({
|
||||
users: rows.map((u) => ({
|
||||
...u,
|
||||
avatarUrl: getAvatarUrl(u.id) || u.avatarUrl,
|
||||
})),
|
||||
total,
|
||||
page: Number(page),
|
||||
limit: Number(limit),
|
||||
});
|
||||
});
|
||||
|
||||
router.get('/users/:id', (req, res) => {
|
||||
const user = db.prepare(`
|
||||
SELECT id, email, username, display_name AS displayName, avatar_url AS avatarUrl,
|
||||
role, is_active AS isActive, created_at AS createdAt, updated_at AS updatedAt
|
||||
FROM users WHERE id = ?
|
||||
`).get(req.params.id);
|
||||
|
||||
if (!user) {
|
||||
return res.status(404).json({ error: '사용자를 찾을 수 없습니다.' });
|
||||
}
|
||||
|
||||
const deckCount = db.prepare('SELECT COUNT(*) AS c FROM decks WHERE user_id = ?').get(user.id).c;
|
||||
user.avatarUrl = getAvatarUrl(user.id) || user.avatarUrl;
|
||||
res.json({ user, deckCount });
|
||||
});
|
||||
|
||||
router.put('/users/:id', (req, res) => {
|
||||
const targetId = Number(req.params.id);
|
||||
const user = db.prepare('SELECT id, role FROM users WHERE id = ?').get(targetId);
|
||||
if (!user) {
|
||||
return res.status(404).json({ error: '사용자를 찾을 수 없습니다.' });
|
||||
}
|
||||
|
||||
const isSelf = req.user.id === targetId;
|
||||
const { email, username, role, isActive, avatarImage, removeAvatar } = req.body || {};
|
||||
|
||||
if (isSelf) {
|
||||
if (role === 'user') {
|
||||
return res.status(400).json({ error: '자신의 관리자 권한은 해제할 수 없습니다.' });
|
||||
}
|
||||
if (isActive === false) {
|
||||
return res.status(400).json({ error: '자신의 계정은 비활성화할 수 없습니다.' });
|
||||
}
|
||||
}
|
||||
|
||||
let nextAvatarUrl;
|
||||
if (avatarImage) {
|
||||
const saved = saveAvatarImage(targetId, avatarImage);
|
||||
if (!saved) {
|
||||
return res.status(400).json({ error: '프로필 이미지 저장에 실패했습니다.' });
|
||||
}
|
||||
nextAvatarUrl = getAvatarUrl(targetId);
|
||||
} else if (removeAvatar === true) {
|
||||
deleteAvatarImage(targetId);
|
||||
nextAvatarUrl = null;
|
||||
}
|
||||
|
||||
const trimmedUsername = username?.trim() ?? null;
|
||||
const trimmedEmail = email?.trim().toLowerCase() ?? null;
|
||||
|
||||
try {
|
||||
const fields = ['updated_at = ?'];
|
||||
const values = [nowIso()];
|
||||
|
||||
if (trimmedEmail) {
|
||||
fields.push('email = ?');
|
||||
values.push(trimmedEmail);
|
||||
}
|
||||
if (trimmedUsername) {
|
||||
fields.push('username = ?', 'display_name = ?');
|
||||
values.push(trimmedUsername, trimmedUsername);
|
||||
}
|
||||
if (!isSelf && role) {
|
||||
fields.push('role = ?');
|
||||
values.push(role);
|
||||
}
|
||||
if (!isSelf && isActive !== undefined) {
|
||||
fields.push('is_active = ?');
|
||||
values.push(isActive ? 1 : 0);
|
||||
}
|
||||
if (nextAvatarUrl !== undefined) {
|
||||
fields.push('avatar_url = ?');
|
||||
values.push(nextAvatarUrl);
|
||||
}
|
||||
|
||||
values.push(targetId);
|
||||
db.prepare(`UPDATE users SET ${fields.join(', ')} WHERE id = ?`).run(...values);
|
||||
} catch (err) {
|
||||
if (String(err.message).includes('UNIQUE')) {
|
||||
return res.status(409).json({ error: '이메일 또는 사용자명이 이미 사용 중입니다.' });
|
||||
}
|
||||
throw err;
|
||||
}
|
||||
|
||||
const updated = db.prepare(`
|
||||
SELECT id, email, username, display_name AS displayName, avatar_url AS avatarUrl,
|
||||
role, is_active AS isActive, created_at AS createdAt, updated_at AS updatedAt
|
||||
FROM users WHERE id = ?
|
||||
`).get(targetId);
|
||||
updated.avatarUrl = getAvatarUrl(updated.id) || updated.avatarUrl;
|
||||
|
||||
res.json({ user: updated });
|
||||
});
|
||||
|
||||
router.post('/users/:id/reset-password', (req, res) => {
|
||||
const user = db.prepare('SELECT id FROM users WHERE id = ?').get(req.params.id);
|
||||
if (!user) {
|
||||
return res.status(404).json({ error: '사용자를 찾을 수 없습니다.' });
|
||||
}
|
||||
|
||||
const { newPassword } = req.body || {};
|
||||
if (!newPassword || newPassword.length < 8) {
|
||||
return res.status(400).json({ error: '새 비밀번호는 8자 이상이어야 합니다.' });
|
||||
}
|
||||
|
||||
const hash = bcrypt.hashSync(newPassword, 12);
|
||||
db.prepare('UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?').run(hash, nowIso(), req.params.id);
|
||||
|
||||
res.json({ ok: true, message: '비밀번호가 초기화되었습니다.' });
|
||||
});
|
||||
|
||||
router.post('/decks/preset', async (req, res, next) => {
|
||||
try {
|
||||
const { series, seriesName, name, cards, isPublic } = req.body || {};
|
||||
if (!series || !cards || !name) {
|
||||
return res.status(400).json({ error: 'series, name, cards는 필수입니다.' });
|
||||
}
|
||||
|
||||
const normalized = validateCards(cards);
|
||||
const hash = contentHash(normalized);
|
||||
const existing = db.prepare('SELECT share_code FROM decks WHERE content_hash = ? AND share_type = ?').get(hash, 'preset');
|
||||
|
||||
if (existing) {
|
||||
return res.status(409).json({
|
||||
error: '동일한 구성의 프리셋이 이미 존재합니다.',
|
||||
shareCode: existing.share_code,
|
||||
});
|
||||
}
|
||||
|
||||
const cardsJson = JSON.stringify(normalized);
|
||||
db.prepare(`
|
||||
INSERT INTO decks (share_code, share_type, content_hash, user_id, series, series_name, name, cards_json, is_public)
|
||||
VALUES (?, 'preset', ?, ?, ?, ?, ?, ?, ?)
|
||||
`).run(
|
||||
hash,
|
||||
hash,
|
||||
req.user.id,
|
||||
series,
|
||||
seriesName || series,
|
||||
name,
|
||||
cardsJson,
|
||||
isPublic === false ? 0 : 1,
|
||||
);
|
||||
|
||||
const row = db.prepare('SELECT * FROM decks WHERE share_code = ?').get(hash);
|
||||
const { cards: resolved, totalCards } = await resolveDeckCards(series, normalized);
|
||||
|
||||
res.status(201).json({
|
||||
v: 1,
|
||||
shareCode: row.share_code,
|
||||
shareType: 'preset',
|
||||
series: row.series,
|
||||
seriesName: row.series_name,
|
||||
name: row.name,
|
||||
totalCards,
|
||||
cards: resolved,
|
||||
});
|
||||
} catch (err) {
|
||||
if (err.message?.includes('카드') || err.message?.includes('덱')) {
|
||||
return res.status(400).json({ error: err.message });
|
||||
}
|
||||
next(err);
|
||||
}
|
||||
});
|
||||
|
||||
router.get('/decks', (req, res) => {
|
||||
const rows = db.prepare(`
|
||||
SELECT d.id, d.share_code AS shareCode, d.share_type AS shareType, d.series, d.series_name AS seriesName,
|
||||
d.name, d.is_public AS isPublic, d.view_count AS viewCount, d.created_at AS createdAt,
|
||||
d.preview_image AS previewImage, d.updated_at AS updatedAt,
|
||||
u.username, u.id AS userId
|
||||
FROM decks d LEFT JOIN users u ON d.user_id = u.id
|
||||
ORDER BY d.created_at DESC LIMIT 100
|
||||
`).all();
|
||||
|
||||
res.json({
|
||||
decks: rows.map((row) => ({
|
||||
...row,
|
||||
preview_url: getPreviewUrl(row.shareCode, row.previewImage),
|
||||
})),
|
||||
});
|
||||
});
|
||||
|
||||
router.delete('/decks/:shareCode', (req, res) => {
|
||||
const row = db.prepare('SELECT id FROM decks WHERE share_code = ?').get(req.params.shareCode);
|
||||
if (!row) {
|
||||
return res.status(404).json({ error: '덱을 찾을 수 없습니다.' });
|
||||
}
|
||||
db.prepare('DELETE FROM decks WHERE id = ?').run(row.id);
|
||||
res.json({ ok: true });
|
||||
});
|
||||
|
||||
return router;
|
||||
}
|
||||
Reference in New Issue
Block a user