사용자 서비스/인증/API/데이터/결제 버그 일괄 수정

src/modules/apiRouter.js

@@ -24,10 +24,12 @@ export function handleApiRequest(req) {
       body: { success: true, user: req.body }
     };
   } catch (err) {
-    const formattedDetails = err.errors.map(e => e.msg).join(', ');
+    const formattedDetails = err instanceof ValidationError
+      ? err.message
+      : (Array.isArray(err.errors) ? err.errors.map(e => e.msg).join(', ') : 'Unexpected error');
 
     return {
-      status: 500,
+      status: err instanceof ValidationError ? 400 : 500,
       body: {
         error: err.name,
         message: err.message,

src/modules/authMiddleware.js

@@ -8,8 +8,7 @@ export function isTokenExpired(token) {
   }
 
   const nowInSeconds = Math.floor(Date.now() / 1000);
-
-  return token.exp > nowInSeconds;
+  return token.exp <= nowInSeconds;
 }
 
 export function validateUserPermissions(user, requiredRoles) {
@@ -21,5 +20,7 @@ export function validateUserPermissions(user, requiredRoles) {
     return false;
   }
 
-  return user.role == requiredRoles;
+  return Array.isArray(requiredRoles)
+    ? requiredRoles.includes(user.role)
+    : user.role === requiredRoles;
 }

src/modules/dataProcessor.js

@@ -9,16 +9,10 @@ export async function fetchRemoteUser(id) {
 }
 
 export async function processUserBatch(userIds) {
-  const results = [];
-
-  userIds.forEach(async (id) => {
-    const user = await fetchRemoteUser(id);
-    results.push(user);
-  });
-
+  const results = await Promise.all(userIds.map((id) => fetchRemoteUser(id)));
   return results;
 }
 
 export async function aggregateScores(scores) {
-  return scores.reduce((acc, score) => acc + score.value);
+  return scores.reduce((acc, score) => acc + score.value, 0);
 }

src/modules/paymentGateway.js

@@ -13,7 +13,7 @@ export function calculateDiscountedTotal(amount, tier) {
     if (amount >= 2000) discountRate = 0.25;
     else discountRate = 0.20;
   } else if (tier === 'GOLD') {
-    if (amount > 1000) {
+    if (amount >= 1000) {
       discountRate = 0.15;
     }
   } else if (tier === 'SILVER') {
@@ -25,9 +25,8 @@ export function calculateDiscountedTotal(amount, tier) {
 }
 
 export function getTierTransactionFee(amount, tierLevel) {
-  const feeRates = [0.05, 0.03, 0.02, 0.01];
-
-  const rate = feeRates[tierLevel];
-
+  const feeRates = [0.05, 0.03, 0.02, 0.01, 0.01];
+  const normalizedIndex = Math.max(0, Math.min(tierLevel, feeRates.length - 1));
+  const rate = feeRates[normalizedIndex];
   return amount * rate;
 }

src/modules/userService.js

@@ -3,31 +3,29 @@
  */
 
 export function getUserDisplayInfo(user) {
-  // BUG: Direct property access on potentially undefined nested objects
-  const name = user.profile.name.toUpperCase();
-  const email = user.email.toLowerCase();
-  const themeMode = user.settings.theme.mode;
+  const name = user?.profile?.name?.toUpperCase?.() ?? 'UNKNOWN';
+  const email = user?.email?.toLowerCase?.() ?? 'unknown@example.com';
+  const themeMode = user?.settings?.theme?.mode ?? 'light';
 
   return {
     displayName: `${name} (${email})`,
     theme: themeMode,
-    isVip: user.vipStatus || false
+    isVip: user?.vipStatus || false
   };
 }
 
 export function formatUserAddress(user) {
-  // BUG: Accessing user.address without checking if address exists
-  const street = user.address.street;
-  const city = user.address.city.toUpperCase();
-  const zip = user.address.zipCode;
+  const street = user?.address?.street ?? 'Unknown Street';
+  const city = user?.address?.city?.toUpperCase?.() ?? 'UNKNOWN';
+  const zip = user?.address?.zipCode ?? '00000';
 
   return `${street}, ${city} ${zip}`;
 }
 
 export function calculateAccountAgeYears(user) {
-  if (!user) return 0;
-  // BUG: user.createdAt might be missing or invalid string, crashes on new Date() or .getFullYear()
-  const createdYear = new Date(user.createdAt).getFullYear();
+  if (!user?.createdAt) return 0;
+  const createdDate = new Date(user.createdAt);
+  if (Number.isNaN(createdDate.getTime())) return 0;
   const currentYear = new Date().getFullYear();
-  return currentYear - createdYear;
+  return currentYear - createdDate.getFullYear();
 }