7.6 익명/비밀댓글/비댓 해시 처리 o

src/app/api/comments/route.ts

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import prisma from "@/lib/prisma";
 import { z } from "zod";
+import { hashPassword } from "@/lib/password";
 
 const createCommentSchema = z.object({
   postId: z.string().min(1),
@@ -8,6 +9,7 @@ const createCommentSchema = z.object({
   content: z.string().min(1),
   isAnonymous: z.boolean().optional(),
   isSecret: z.boolean().optional(),
+  secretPassword: z.string().min(1).optional(), // 비회원 비밀번호(옵션)
 });
 
 export async function POST(req: Request) {
@@ -16,7 +18,8 @@ export async function POST(req: Request) {
   if (!parsed.success) {
     return NextResponse.json({ error: parsed.error.flatten() }, { status: 400 });
   }
-  const { postId, authorId, content, isAnonymous, isSecret } = parsed.data;
+  const { postId, authorId, content, isAnonymous, isSecret, secretPassword } = parsed.data;
+  const secretPasswordHash = secretPassword ? hashPassword(secretPassword) : null;
   const comment = await prisma.comment.create({
     data: {
       postId,
@@ -24,6 +27,7 @@ export async function POST(req: Request) {
       content,
       isAnonymous: !!isAnonymous,
       isSecret: !!isSecret,
+      secretPasswordHash,
     },
   });
   return NextResponse.json({ comment }, { status: 201 });