Merge pull request #297 from snack-25/feature/86-auth

Feature/86 auth

Author: xcjnzvc

src/budgets/budgets.controller.ts

@@ -31,14 +31,9 @@ export class BudgetsController {
   })
   @ApiResponse({ status: 200, description: '예산 정보 수정에 성공했습니다' })
   @Put('update')
-  public async update(
-    @Body() dto: BudgetsRequestDto,
-    // @Req() req: Request,
-    @Res() res: Response,
-  ): Promise<void> {
+  public async update(@Body() dto: BudgetsRequestDto, @Res() res: Response): Promise<void> {
     const update = await this.budgetsService.update(dto);
     res.status(200).json({ data: update, message: '예산 변경에 성공했습니다' });
   }
-
   //TODO: /budgets/{budgetId} (DELETE) 예산 정보 삭제
 }

src/budgets/budgets.service.ts

@@ -1,4 +1,4 @@
-import { Injectable } from '@nestjs/common';
+import { Injectable, BadRequestException } from '@nestjs/common';
 import { PrismaService } from '@src/shared/prisma/prisma.service';
 import { BudgetsRequestDto, BudgetsResponseDto } from './dto/budgets.dto';
 
@@ -46,6 +46,12 @@ export class BudgetsService {
     try {
       // 특정 예산 레코드 조회
       console.log('dto', dto);
+
+      const MAX_AMOUNT = 500_000_000;
+      if (dto.currentAmount > MAX_AMOUNT || dto.initialAmount > MAX_AMOUNT) {
+        throw new BadRequestException('금액이 5억을 초과하였습니다.');
+      }
+
       const existingBudget = await this.prisma.budget.findUnique({
         where: {
           companyId_year_month: {
@@ -100,7 +106,7 @@ export class BudgetsService {
       };
     } catch (err) {
       console.error('예산 처리 중 에러 발생', err);
-      throw new Error('예산 처리 중 오류 발생');
+      throw err; // 덮어씌우지 않고 원래 에러 그대로 전달
     }
   }
 }

src/users/users.controller.ts

@@ -48,7 +48,7 @@ export class UsersController {
   @Patch('update/info')
   @ApiResponse({ status: 200, description: '유저 정보 수정' })
   public async updateData(
-    @Body() body: { password: string; company?: string },
+    @Body() body: { password?: string; company?: string },
     @Req() req: Request,
     @Res() res: Response,
   ): Promise<void> {

src/users/users.service.ts

@@ -190,6 +190,8 @@ export class UsersService {
     }
 
     if (body.password) {
+      this.validatePassword(body.password);
+
       const hashedPassword = await argon2.hash(body.password);
 
       const currentData = await this.prisma.user.findUnique({