관리자 레이아웃과 네비게이션 정리

server/api/auth/email-otp/request.post.js

@@ -7,7 +7,9 @@ import {
   countOtpSendsLastHour,
   hasRecentOtpSend,
   insertOtpChallenge,
-  invalidatePendingOtpChallenges
+  deleteOtpChallengeById,
+  invalidatePendingOtpChallenges,
+  invalidatePendingOtpChallengesExcept
 } from '../../../repositories/email-otp-repository'
 import { generateSixDigitOtp, hashOtpCode, normalizeOtpEmail } from '../../../utils/email-otp'
 import { isResendConfigured, sendResendEmail } from '../../../utils/resend-mail'
@@ -129,8 +131,7 @@ export default defineEventHandler(async (event) => {
   const expiresAt = new Date(Date.now() + OTP_TTL_MS)
   const createdIp = String(getRequestIP(event) || '')
 
-  await invalidatePendingOtpChallenges(sql, email, purpose)
-  await insertOtpChallenge(sql, {
+  const challengeId = await insertOtpChallenge(sql, {
     email,
     purpose,
     codeHash,
@@ -147,13 +148,20 @@ export default defineEventHandler(async (event) => {
     ? `<p>회원가입을 위한 인증번호입니다.</p><p style="font-size:24px;font-weight:700;letter-spacing:0.2em">${code}</p><p>15분 이내에 입력해 주세요.</p>`
     : `<p>비밀번호 재설정을 위한 인증번호입니다.</p><p style="font-size:24px;font-weight:700;letter-spacing:0.2em">${code}</p><p>15분 이내에 입력해 주세요.</p>`
 
-  await sendResendEmail({
-    apiKey: String(config.resendApiKey).trim(),
-    from: String(config.resendFromEmail).trim(),
-    to: email,
-    subject,
-    html
-  })
+  try {
+    await sendResendEmail({
+      apiKey: String(config.resendApiKey).trim(),
+      from: String(config.resendFromEmail).trim(),
+      to: email,
+      subject,
+      html
+    })
+  } catch (error) {
+    await deleteOtpChallengeById(sql, challengeId)
+    throw error
+  }
+
+  await invalidatePendingOtpChallengesExcept(sql, email, purpose, challengeId)
 
   return {
     ok: true,