Feature/CDP-222-SignupFunction

src/app/api/check-email/route.ts

@@ -0,0 +1,72 @@
+import { supabaseAdmin } from "@/lib/supabase/admin";
+import { isValidEmail } from "@/lib/validators";
+import type { CheckEmailBody, CheckEmailFailRes, CheckEmailOkRes } from "@/types/auth";
+import { NextResponse } from "next/server";
+
+export async function POST(req: Request): Promise<Response> {
+  let body: CheckEmailBody;
+
+  try {
+    body = (await req.json()) as CheckEmailBody;
+  } catch {
+    const res: CheckEmailFailRes = {
+      ok: false,
+      available: false,
+      message: "요청 본문(JSON)이 올바르지 않습니다.",
+    };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  const email = (body.email ?? "").trim().toLowerCase();
+
+  if (!email) {
+    const res: CheckEmailFailRes = {
+      ok: false,
+      available: false,
+      message: "이메일이 비어 있습니다.",
+    };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  if (!isValidEmail(email)) {
+    const res: CheckEmailFailRes = {
+      ok: false,
+      available: false,
+      message: "이메일 형식이 올바르지 않습니다.",
+    };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  const { data, error } = await supabaseAdmin
+    .from("profiles")
+    .select("id")
+    .eq("email", email)
+    .limit(1);
+
+  if (error) {
+    const res: CheckEmailFailRes = {
+      ok: false,
+      available: false,
+      message: "서버 확인 중 오류가 발생했습니다.",
+    };
+    return NextResponse.json(res, { status: 500 });
+  }
+
+  const exists = (data?.length ?? 0) > 0;
+
+  if (exists) {
+    const res: CheckEmailOkRes = {
+      ok: true,
+      available: false,
+      message: "이미 가입된 이메일입니다.",
+    };
+    return NextResponse.json(res);
+  }
+
+  const res: CheckEmailOkRes = {
+    ok: true,
+    available: true,
+    message: "사용 가능한 이메일입니다.",
+  };
+  return NextResponse.json(res);
+}

src/app/api/send-otp/route.ts

@@ -0,0 +1,31 @@
+import { createClient } from "@supabase/supabase-js";
+import { NextResponse } from "next/server";
+
+type Body = { email?: string };
+
+export async function POST(req: Request) {
+  const body = (await req.json()) as Body;
+  const email = (body.email ?? "").trim().toLowerCase();
+
+  if (!email) {
+    return NextResponse.json({ ok: false, message: "이메일이 비어 있습니다." }, { status: 400 });
+  }
+
+  const url = process.env.NEXT_PUBLIC_SUPABASE_URL!;
+  const anon = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!;
+
+  const supabase = createClient(url, anon, { auth: { persistSession: false } });
+
+  const { error } = await supabase.auth.signInWithOtp({
+    email,
+    options: {
+      shouldCreateUser: true,
+    },
+  });
+
+  if (error) {
+    return NextResponse.json({ ok: false, message: error.message }, { status: 400 });
+  }
+
+  return NextResponse.json({ ok: true, message: "인증 메일을 발송했습니다." });
+}

src/app/api/set-password/route.ts

@@ -0,0 +1,99 @@
+import { supabaseAdmin } from "@/lib/supabase/admin";
+import { isValidEmail } from "@/lib/validators";
+import { createClient } from "@supabase/supabase-js";
+import { NextResponse } from "next/server";
+
+export type SetPasswordBody = {
+  email?: string;
+  password?: string;
+};
+
+export type SetPasswordOkRes = {
+  ok: true;
+  message: string;
+};
+
+export type SetPasswordFailRes = {
+  ok: false;
+  message: string;
+};
+
+export type SetPasswordResponse = SetPasswordOkRes | SetPasswordFailRes;
+
+const getBearerToken = (req: Request): string => {
+  const value = req.headers.get("authorization") ?? "";
+  if (!value.startsWith("Bearer ")) return "";
+  return value.slice("Bearer ".length).trim();
+};
+
+export async function POST(req: Request): Promise<Response> {
+  let body: SetPasswordBody;
+
+  try {
+    body = (await req.json()) as SetPasswordBody;
+  } catch {
+    const res: SetPasswordFailRes = {
+      ok: false,
+      message: "요청 본문(`JSON`)이 올바르지 않습니다.",
+    };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  const accessToken = getBearerToken(req);
+  const email = (body.email ?? "").trim().toLowerCase();
+  const password = (body.password ?? "").trim();
+
+  if (!accessToken) {
+    const res: SetPasswordFailRes = { ok: false, message: "인증 토큰이 없습니다." };
+    return NextResponse.json(res, { status: 401 });
+  }
+
+  if (!email) {
+    const res: SetPasswordFailRes = { ok: false, message: "이메일이 비어 있습니다." };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  if (!isValidEmail(email)) {
+    const res: SetPasswordFailRes = { ok: false, message: "이메일 형식이 올바르지 않습니다." };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  if (!password) {
+    const res: SetPasswordFailRes = { ok: false, message: "비밀번호가 비어 있습니다." };
+    return NextResponse.json(res, { status: 400 });
+  }
+
+  // ✅ 1) 토큰으로 “누구인지” 확인
+  const url = process.env.NEXT_PUBLIC_SUPABASE_URL!;
+  const anon = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!;
+  const supabase = createClient(url, anon, { auth: { persistSession: false } });
+
+  const { data: userData, error: userError } = await supabase.auth.getUser(accessToken);
+
+  if (userError || !userData.user) {
+    const res: SetPasswordFailRes = { ok: false, message: "인증 정보가 유효하지 않습니다." };
+    return NextResponse.json(res, { status: 401 });
+  }
+
+  const authedEmail = (userData.user.email ?? "").toLowerCase();
+  if (authedEmail !== email) {
+    const res: SetPasswordFailRes = {
+      ok: false,
+      message: "인증된 이메일과 요청 이메일이 일치하지 않습니다.",
+    };
+    return NextResponse.json(res, { status: 403 });
+  }
+
+  // ✅ 2) `Admin` 권한으로 비밀번호 설정
+  const { error: updateError } = await supabaseAdmin.auth.admin.updateUserById(userData.user.id, {
+    password,
+  });
+
+  if (updateError) {
+    const res: SetPasswordFailRes = { ok: false, message: "비밀번호 저장 중 오류가 발생했습니다." };
+    return NextResponse.json(res, { status: 500 });
+  }
+
+  const res: SetPasswordOkRes = { ok: true, message: "비밀번호가 설정되었습니다." };
+  return NextResponse.json(res);
+}