Request Body의 필드마다 서명하지 않고, 데이터 전체에 대해 서명하도록 개선

src/routes/api/client/register/verify/+server.ts

@@ -0,0 +1,24 @@
+import { error, text } from "@sveltejs/kit";
+import { z } from "zod";
+import { authenticate } from "$lib/server/modules/auth";
+import { verifyUserClient } from "$lib/server/services/client";
+import type { RequestHandler } from "./$types";
+
+export const POST: RequestHandler = async ({ request, cookies, getClientAddress }) => {
+  const { userId, clientId } = authenticate(cookies);
+  if (clientId) {
+    error(403, "Forbidden");
+  }
+
+  const zodRes = z
+    .object({
+      answer: z.string().base64().nonempty(),
+      sigAnswer: z.string().base64().nonempty(),
+    })
+    .safeParse(await request.json());
+  if (!zodRes.success) error(400, "Invalid request body");
+  const { answer, sigAnswer } = zodRes.data;
+
+  await verifyUserClient(userId, getClientAddress(), answer, sigAnswer);
+  return text("Client verified", { headers: { "Content-Type": "text/plain" } });
+};