f7da22d409
SÉCURITÉ 8→9: - lib/rate-limit.ts: Redis rate limiter (incr + expire) - chat/route: 15 req/min max - 6 routes IA: 20 req/min max (tags, title, labels, markdown, overview, summary) - link-preview: cache Redis 5min par URL+userId - auth-providers: rate limit login 5 req/5min UX 7.5→8.5: - search-modal: focus trap (Tab cycle + Shift+Tab) - search-modal: ref modal pour querySelector focusable - layout: skip-link 'Skip to content' (sr-only focus:not-sr-only) - note-actions: boutons h-8 w-8 → h-9 w-9 (36px → touch target) 0 erreur TS, 199/199 tests
24 lines
783 B
TypeScript
24 lines
783 B
TypeScript
import { rateLimit } from '@/lib/rate-limit'
|
|
import { NextRequest, NextResponse } from 'next/server'
|
|
import { auth } from '@/auth'
|
|
import { markdownToHtml } from '@/lib/markdown-to-html'
|
|
|
|
export async function POST(request: NextRequest) {
|
|
try {
|
|
const session = await auth()
|
|
if (!session?.user?.id) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
|
|
}
|
|
|
|
const { content } = await request.json()
|
|
if (!content || typeof content !== 'string') {
|
|
return NextResponse.json({ error: 'Content is required' }, { status: 400 })
|
|
}
|
|
|
|
const html = markdownToHtml(content)
|
|
return NextResponse.json({ html })
|
|
} catch (error: any) {
|
|
return NextResponse.json({ error: error.message || 'Conversion failed' }, { status: 500 })
|
|
}
|
|
}
|