Update code

app/api/paste/[id]/route.ts

@@ -0,0 +1,68 @@
+import { prisma } from '@/lib/prisma';
+import bcrypt from 'bcryptjs';
+import { NextRequest, NextResponse } from 'next/server';
+
+export const dynamic = 'force-dynamic';
+export const revalidate = 0;
+
+export async function POST(
+  request: NextRequest,
+  context: { params: { id: string } }
+) {
+  const { params } = context;
+  const pasteId = params.id;
+
+  const { password = '' } = await request.json();
+
+  if (!pasteId) {
+    return NextResponse.json({ error: 'Invalid ID' }, { status: 400 });
+  }
+
+  const paste = await prisma.paste.findUnique({ where: { id: pasteId } });
+  if (!paste) {
+    return NextResponse.json({ error: 'Not found' }, { status: 404 });
+  }
+
+  if (paste.maxViews !== null && paste.views >= paste.maxViews) {
+    await prisma.paste.delete({ where: { id: paste.id } });
+    return NextResponse.json({ error: 'Max views exceeded' }, { status: 404 });
+  }
+
+  if (paste.password) {
+    const valid = await bcrypt.compare(password, paste.password);
+    if (!valid) {
+      return NextResponse.json({ error: 'Invalid password' }, { status: 403 });
+    }
+  }
+
+  const updated = await prisma.paste.update({
+    where: { id: paste.id },
+    data: { views: { increment: 1 } },
+    select: {
+      id: true,
+      title: true,
+      content: true,
+      createdAt: true,
+      views: true,
+      maxViews: true,
+      password: true,
+    },
+  });
+
+  const payload = {
+    id: updated.id,
+    title: updated.title,
+    content: updated.content,
+    createdAt: updated.createdAt,
+    views: updated.views,
+    protected: !!updated.password,
+  };
+
+  if (updated.maxViews !== null && updated.views >= updated.maxViews) {
+    prisma.paste.delete({ where: { id: updated.id } }).catch(() => {});
+  }
+
+  return NextResponse.json(payload, {
+    headers: { 'Cache-Control': 'no-store' },
+  });
+}