69 lines
1.8 KiB
TypeScript
69 lines
1.8 KiB
TypeScript
|
import { prisma } from '@/lib/prisma';
|
||
|
|
import bcrypt from 'bcryptjs';
|
||
|
|
import { NextRequest, NextResponse } from 'next/server';
|
||
|
|
|
||
|
|
export const dynamic = 'force-dynamic';
|
||
|
|
export const revalidate = 0;
|
||
|
|
|
||
|
|
export async function POST(
|
||
|
|
request: NextRequest,
|
||
|
|
context: { params: { id: string } }
|
||
|
|
) {
|
||
|
|
const { params } = context;
|
||
|
|
const pasteId = params.id;
|
||
|
|
|
||
|
|
const { password = '' } = await request.json();
|
||
|
|
|
||
|
|
if (!pasteId) {
|
||
|
|
return NextResponse.json({ error: 'Invalid ID' }, { status: 400 });
|
||
|
|
}
|
||
|
|
|
||
|
|
const paste = await prisma.paste.findUnique({ where: { id: pasteId } });
|
||
|
|
if (!paste) {
|
||
|
|
return NextResponse.json({ error: 'Not found' }, { status: 404 });
|
||
|
|
}
|
||
|
|
|
||
|
|
if (paste.maxViews !== null && paste.views >= paste.maxViews) {
|
||
|
|
await prisma.paste.delete({ where: { id: paste.id } });
|
||
|
|
return NextResponse.json({ error: 'Max views exceeded' }, { status: 404 });
|
||
|
|
}
|
||
|
|
|
||
|
|
if (paste.password) {
|
||
|
|
const valid = await bcrypt.compare(password, paste.password);
|
||
|
|
if (!valid) {
|
||
|
|
return NextResponse.json({ error: 'Invalid password' }, { status: 403 });
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
const updated = await prisma.paste.update({
|
||
|
|
where: { id: paste.id },
|
||
|
|
data: { views: { increment: 1 } },
|
||
|
|
select: {
|
||
|
|
id: true,
|
||
|
|
title: true,
|
||
|
|
content: true,
|
||
|
|
createdAt: true,
|
||
|
|
views: true,
|
||
|
|
maxViews: true,
|
||
|
|
password: true,
|
||
|
|
},
|
||
|
|
});
|
||
|
|
|
||
|
|
const payload = {
|
||
|
|
id: updated.id,
|
||
|
|
title: updated.title,
|
||
|
|
content: updated.content,
|
||
|
|
createdAt: updated.createdAt,
|
||
|
|
views: updated.views,
|
||
|
|
protected: !!updated.password,
|
||
|
|
};
|
||
|
|
|
||
|
|
if (updated.maxViews !== null && updated.views >= updated.maxViews) {
|
||
|
|
prisma.paste.delete({ where: { id: updated.id } }).catch(() => {});
|
||
|
|
}
|
||
|
|
|
||
|
|
return NextResponse.json(payload, {
|
||
|
|
headers: { 'Cache-Control': 'no-store' },
|
||
|
|
});
|
||
|
|
}
|