From eab800b6c178cf7eba3709fb7c2b4281f125ce3a Mon Sep 17 00:00:00 2001 From: zenn Date: Mon, 11 May 2026 17:20:50 +0900 Subject: [PATCH] =?UTF-8?q?feat(member):=20=EC=8D=B8=EB=84=A4=EC=9D=BC=20?= =?UTF-8?q?=EA=B5=90=EC=B2=B4/=EC=82=AD=EC=A0=9C=20=EC=8B=9C=20=EC=9E=90?= =?UTF-8?q?=EC=82=B0=20=EC=9E=90=EB=8F=99=20=EC=A0=95=EB=A6=AC=20=EC=B6=94?= =?UTF-8?q?=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 회원 아바타를 교체·삭제·탈퇴하는 흐름에서 이전 썸네일 파일과 메타데이터가 남지 않도록 공통 정리 로직을 연결했다. Co-authored-by: Cursor --- components/site/SiteHeader.vue | 2 +- docs/history.md | 6 +++ docs/map.md | 2 + docs/spec.md | 2 + docs/update.md | 6 +++ package.json | 2 +- pages/settings/index.vue | 34 ++++++++++++++++ server/api/auth/account.delete.js | 5 +++ server/api/auth/avatar.delete.js | 34 ++++++++++++++++ server/api/auth/avatar.post.js | 5 +++ server/utils/member-avatar.js | 66 +++++++++++++++++++++++++++++++ 11 files changed, 162 insertions(+), 2 deletions(-) create mode 100644 server/api/auth/avatar.delete.js create mode 100644 server/utils/member-avatar.js diff --git a/components/site/SiteHeader.vue b/components/site/SiteHeader.vue index 195dce4..106af7b 100644 --- a/components/site/SiteHeader.vue +++ b/components/site/SiteHeader.vue @@ -200,7 +200,7 @@ onBeforeUnmount(() => {
{ }) } + if (user.avatarUrl) { + await removeManagedAvatarAsset(user.avatarUrl) + } + await deleteMember(session.userId) clearMemberSession(event) diff --git a/server/api/auth/avatar.delete.js b/server/api/auth/avatar.delete.js new file mode 100644 index 0000000..e3ee079 --- /dev/null +++ b/server/api/auth/avatar.delete.js @@ -0,0 +1,34 @@ +import { createError } from 'h3' +import { getUserById, updateMemberProfile } from '../../repositories/member-repository' +import { requireMemberSession } from '../../utils/member-auth' +import { removeManagedAvatarAsset } from '../../utils/member-avatar' + +/** + * 회원 썸네일 삭제 API + * @param {import('h3').H3Event} event - 요청 이벤트 + * @returns {Promise<{ ok: true }>} 처리 결과 + */ +export default defineEventHandler(async (event) => { + const session = requireMemberSession(event) + const user = await getUserById(session.userId) + + if (!user) { + throw createError({ + statusCode: 404, + message: '회원 정보를 찾을 수 없습니다.' + }) + } + + if (user.avatarUrl) { + await removeManagedAvatarAsset(user.avatarUrl) + } + + await updateMemberProfile({ + userId: user.id, + username: user.username, + avatarUrl: '' + }) + + return { ok: true } +}) + diff --git a/server/api/auth/avatar.post.js b/server/api/auth/avatar.post.js index cbddbcd..ad00037 100644 --- a/server/api/auth/avatar.post.js +++ b/server/api/auth/avatar.post.js @@ -5,6 +5,7 @@ import { createError, readMultipartFormData } from 'h3' import { getPostgresClient } from '../../repositories/postgres-client' import { updateMemberProfile, getUserById } from '../../repositories/member-repository' import { requireMemberSession } from '../../utils/member-auth' +import { removeManagedAvatarAsset } from '../../utils/member-avatar' const allowedImageTypes = new Map([ ['image/jpeg', '.jpg'], @@ -114,6 +115,10 @@ export default defineEventHandler(async (event) => { ` } + if (currentUser.avatarUrl && currentUser.avatarUrl !== avatarUrl) { + await removeManagedAvatarAsset(currentUser.avatarUrl) + } + return { avatarUrl } diff --git a/server/utils/member-avatar.js b/server/utils/member-avatar.js new file mode 100644 index 0000000..3135ea2 --- /dev/null +++ b/server/utils/member-avatar.js @@ -0,0 +1,66 @@ +import { rm } from 'node:fs/promises' +import { join, relative } from 'node:path' +import { createError } from 'h3' +import { getPostgresClient } from '../repositories/postgres-client' + +const managedAvatarPrefix = '/uploads/members/avatars/' + +/** + * 회원 전용 썸네일 URL인지 확인한다. + * @param {string} url - 대상 URL + * @returns {boolean} 회원 썸네일 여부 + */ +export const isManagedAvatarUrl = (url) => String(url || '').startsWith(managedAvatarPrefix) + +/** + * 회원 썸네일 URL을 실제 파일 경로로 변환한다. + * @param {string} url - 썸네일 URL + * @returns {string} 파일 시스템 경로 + */ +export const resolveMemberAvatarPath = (url) => { + if (!isManagedAvatarUrl(url)) { + throw createError({ + statusCode: 400, + message: '회원 썸네일 경로가 아닙니다.' + }) + } + + const decodedUrl = decodeURIComponent(url) + const filePath = join(process.cwd(), 'public', decodedUrl) + const uploadRoot = join(process.cwd(), 'public', 'uploads') + const relativePath = relative(uploadRoot, filePath) + + if (relativePath.startsWith('..') || relativePath === '') { + throw createError({ + statusCode: 400, + message: '회원 썸네일 경로가 올바르지 않습니다.' + }) + } + + return filePath +} + +/** + * 회원 썸네일 파일과 메타데이터를 정리한다. + * @param {string} url - 정리 대상 URL + * @returns {Promise} + */ +export const removeManagedAvatarAsset = async (url) => { + if (!isManagedAvatarUrl(url)) { + return + } + + const filePath = resolveMemberAvatarPath(url) + await rm(filePath, { force: true }) + + const sql = getPostgresClient() + if (!sql) { + return + } + + await sql` + DELETE FROM media_metadata + WHERE url = ${url} + ` +} +