altbin.dev/app/api/paste/[id]/route.ts

import { prisma } from '@/lib/prisma';
import bcrypt from 'bcryptjs';
import { NextRequest, NextResponse } from 'next/server';

export const dynamic = 'force-dynamic';
export const revalidate = 0;

// --- GET pour raw ou JSON ---
export async function GET(
  request: NextRequest,
  context: { params: Promise<{ id: string }> }
) {
  const { id: pasteId } = await context.params;

  if (!pasteId) {
    return NextResponse.json({ error: 'Invalid ID' }, { status: 400 });
  }

  const paste = await prisma.paste.findUnique({ where: { id: pasteId } });
  if (!paste) {
    return NextResponse.json({ error: 'Not found' }, { status: 404 });
  }

  // Si paste protégé, on bloque le GET
  if (paste.password) {
    return NextResponse.json({ error: 'This paste is protected' }, { status: 403 });
  }

  const searchParams = request.nextUrl.searchParams;
  if (searchParams.get('raw') === '1') {
    return new NextResponse(paste.content, {
      status: 200,
      headers: { 'Content-Type': 'text/plain; charset=utf-8' },
    });
  }

  return NextResponse.json({
    id: paste.id,
    title: paste.title,
    content: paste.content,
    createdAt: paste.createdAt,
    views: paste.views,
    protected: !!paste.password,
  });
}

// --- POST pour récupérer en validant le password ---
export async function POST(
  request: NextRequest,
  context: { params: Promise<{ id: string }> }
) {
  const { id: pasteId } = await context.params; // ✅ ici aussi

  const { password = '' } = await request.json();

  if (!pasteId) {
    return NextResponse.json({ error: 'Invalid ID' }, { status: 400 });
  }

  const paste = await prisma.paste.findUnique({ where: { id: pasteId } });
  if (!paste) {
    return NextResponse.json({ error: 'Not found' }, { status: 404 });
  }

  if (paste.maxViews !== null && paste.views >= paste.maxViews) {
    await prisma.paste.delete({ where: { id: paste.id } });
    return NextResponse.json({ error: 'Max views exceeded' }, { status: 404 });
  }

  if (paste.password) {
    const valid = await bcrypt.compare(password, paste.password);
    if (!valid) {
      return NextResponse.json({ error: 'Invalid password' }, { status: 403 });
    }
  }

  const updated = await prisma.paste.update({
    where: { id: paste.id },
    data: { views: { increment: 1 } },
    select: {
      id: true,
      title: true,
      content: true,
      createdAt: true,
      views: true,
      maxViews: true,
      password: true,
    },
  });

  const payload = {
    id: updated.id,
    title: updated.title,
    content: updated.content,
    createdAt: updated.createdAt,
    views: updated.views,
    protected: !!updated.password,
  };

  if (updated.maxViews !== null && updated.views >= updated.maxViews) {
    prisma.paste.delete({ where: { id: updated.id } }).catch(() => {});
  }

  return NextResponse.json(payload, {
    headers: { 'Cache-Control': 'no-store' },
  });
}