feat: 댓글 수정(PUT /api/v1/comments/{commentId}) 기능 및 테스트 추가

.env.example

@@ -0,0 +1,12 @@
+# Copy this file to .env and replace the placeholders with local-only values.
+# Never commit the generated .env file.
+SNOWTHING_DB_USERNAME=snowuser
+SNOWTHING_DB_PASSWORD=replace-with-a-local-password
+SNOWTHING_DB_ROOT_PASSWORD=replace-with-a-different-root-password
+
+# Optional credentials for CommentCreateTest & CommentUpdateTest's real MySQL schema.
+# If SNOWTHING_TEST_DB_URL is unset, tests run against in-memory H2 by default.
+# When testing against MySQL, export these environment variables before running `./gradlew test`:
+SNOWTHING_TEST_DB_URL=jdbc:mysql://localhost:3306/snowthing_test?useSSL=false&allowPublicKeyRetrieval=true&characterEncoding=UTF-8&serverTimezone=Asia/Seoul
+SNOWTHING_TEST_DB_USERNAME=snowuser
+SNOWTHING_TEST_DB_PASSWORD=replace-with-a-local-test-password

.github/workflows/gemini-review.yml

@@ -11,67 +11,62 @@ permissions:
 
 jobs:
   review:
-    if: >
-      github.event.issue.pull_request &&
-      contains(github.event.comment.body, '/gemini-review')
+    if: github.event.issue.pull_request && contains(github.event.comment.body, '/gemini-review')
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
 
       - name: Run Gemini Review via REST API
         env:
           GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PR_NUMBER: ${{ github.event.issue.number }}
+          REPO: ${{ github.repository }}
         run: |
           if [ -z "$GEMINI_API_KEY" ]; then
             echo "::error::GEMINI_API_KEY secret is empty."
             exit 1
           fi
 
-          gh pr checkout "$PR_NUMBER"
+          PR_JSON=$(gh pr view "$PR_NUMBER" --repo "$REPO" --json title,body)
+          PR_TITLE=$(echo "$PR_JSON" | jq -r '.title')
+          PR_BODY=$(echo "$PR_JSON" | jq -r '.body' | head -c 2500)
 
-          PR_TITLE=$(gh pr view "$PR_NUMBER" --json title -q '.title')
-          PR_BODY=$(gh pr view "$PR_NUMBER" --json body -q '.body' | head -c 2500)
-          TARGET_BRANCH=$(gh pr view "$PR_NUMBER" --json baseRefName -q '.baseRefName')
-
-          git fetch origin "$TARGET_BRANCH"
-          PR_DIFF=$(git diff "origin/$TARGET_BRANCH...HEAD" -- 'backend/src/' | head -c 12000)
+          # PR Diff 추출 (backend/src Java 코드 위주)
+          PR_DIFF=$(gh pr diff "$PR_NUMBER" --repo "$REPO" | head -c 12000)
 
           if [ -z "$PR_DIFF" ]; then
-            PR_DIFF="No backend/src Java source changes to review."
+            PR_DIFF="리뷰할 코드 변경점이 없습니다."
           fi
 
           PROMPT=$(cat <<EOF
-You are a senior Java and Spring Boot architect reviewing a pull request for a junior backend developer.
+당신은 10년 차 이상의 시니어 자바/스프링 아키텍트이자 정교한 코드 리뷰 멘토입니다.
+주니어 개발자가 작성한 PR 코드 변경사항(Diff)을 분석하여 잠재적 위험을 예방하고 배움을 얻을 수 있도록 한국어로 정밀하게 리뷰해 주세요.
 
-Do not review CI/CD workflow files, labels, AGENTS.md, docs, or frontend files.
-Review only backend application source code, database behavior, security, and architecture.
+⛔ [엄격한 금지 지침]: CI/CD 워크플로우 설정 파일(.github/), 라벨러, AGENTS.md, docs 등은 리뷰하지 마세요. 오직 백엔드 애플리케이션 비즈니스 소스코드, 데이터베이스, 보안, 아키텍처에 대해서만 리뷰하세요.
 
-[PR title]
+[PR 제목]
 $PR_TITLE
 
-[PR body]
+[PR 작성 목적 및 개요]
 $PR_BODY
 
-[Review structure]
-1. Compare the PR goal with the actual code changes.
-2. Identify security, concurrency, data integrity, performance, and failure-mode risks.
-3. Point out code-quality issues and edge cases from the Java/Spring source diff.
-4. Provide concrete Java/Spring Boot improvement examples where useful.
+[리뷰 구조]
+1. 🔍 **[PR 구현 목적 ↔ 실제 코드 대조 분석]**: 비즈니스 기능이 실제 소스코드에 부합하게 구현되었는지 1:1 대조 요약
+2. 🏛️ **[잠재적 위협 & 아키텍처 딥다이브]**: 보안 위협(세션/인증), 동시성(Race Condition), 데이터 무결성, 성능 병목, Trade-off 분석
+3. 💻 **[소스코드 품질 & 엣지 케이스]**: 예외 처리 누락, 엣지 케이스, N+1 쿼리, 객체지향 설계 개선점
+4. 🛠️ **[개선된 코드 예시 (Before vs After)]**: 가독성이 뛰어난 자바/스프링 코드 블록 예시
 
-[Backend Java source diff]
+[실제 코드 Diff]
 $PR_DIFF
 EOF
 )
 
           PAYLOAD=$(jq -n --arg prompt "$PROMPT" '{contents: [{parts: [{text: $prompt}]}]}')
 
-          RESPONSE=$(curl -s -X POST "https://generativelanguage.googleapis.com/v1beta/models/gemini-3.6-flash:generateContent?key=${GEMINI_API_KEY}" \
+          RESPONSE=$(curl -s -X POST "https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent?key=${GEMINI_API_KEY}" \
             -H "Content-Type: application/json" \
             -d "$PAYLOAD")
 
@@ -82,6 +77,6 @@ EOF
             exit 1
           fi
 
-          gh issue comment "$PR_NUMBER" --body "### Gemini AI PR Code Review
+          gh pr comment "$PR_NUMBER" --repo "$REPO" --body "### 🤖 Gemini AI PR Code Review
 
           $REVIEW_TEXT"

backend/src/main/java/com/ikae/snowthing/domain/comment/controller/CommentController.java

@@ -39,8 +39,28 @@ public ResponseEntity<CommentResponse> createComment(
 
     @GetMapping("/posts/{publicId}/comments")
     public ResponseEntity<PostCommentListResponse> getCommentsByPost(
-            @PathVariable String publicId) {
-        PostCommentListResponse response = commentService.getCommentsByPost(publicId);
+            @PathVariable String publicId,
+            @RequestParam(required = false) Long cursor,
+            @RequestParam(defaultValue = "20") int size) {
+        PostCommentListResponse response = commentService.getCommentsByPost(publicId, cursor, size);
+        return ResponseEntity.ok(response);
+    }
+
+    @GetMapping("/comments/{commentId}/replies")
+    public ResponseEntity<CommentReplyListResponse> getCommentReplies(
+            @PathVariable Long commentId,
+            @RequestParam(required = false) Long cursor,
+            @RequestParam(defaultValue = "20") int size) {
+        return ResponseEntity.ok(commentService.getCommentReplies(commentId, cursor, size));
+    }
+
+    @PutMapping("/comments/{commentId}")
+    public ResponseEntity<CommentUpdateResponse> updateComment(
+            @PathVariable Long commentId,
+            @Valid @RequestBody CommentUpdateRequest request,
+            @AuthenticationPrincipal CustomUserDetails userDetails) {
+        CommentUpdateResponse response =
+                commentService.updateComment(commentId, request, userDetails);
         return ResponseEntity.ok(response);
     }
 

backend/src/main/java/com/ikae/snowthing/domain/comment/dto/CommentReplyListResponse.java

@@ -0,0 +1,14 @@
+package com.ikae.snowthing.domain.comment.dto;
+
+import java.util.List;
+
+public record CommentReplyListResponse(
+        Long rootCommentId,
+        long totalReplyCount,
+        List<CommentResponse> replies,
+        Long nextCursor,
+        boolean hasNext) {
+    public CommentReplyListResponse {
+        replies = replies == null ? List.of() : List.copyOf(replies);
+    }
+}

backend/src/main/java/com/ikae/snowthing/domain/comment/dto/CommentResponse.java

@@ -1,35 +1,80 @@
 package com.ikae.snowthing.domain.comment.dto;
 
 import java.time.LocalDateTime;
-import java.util.ArrayList;
 import java.util.List;
 
 import com.ikae.snowthing.domain.comment.entity.Comment;
+import com.ikae.snowthing.domain.member.entity.Member;
 import com.ikae.snowthing.global.util.WriterDisplayFormatter;
 
 public record CommentResponse(
         Long commentId,
+        Long postId,
         Long parentId,
-        String writerName,
+        WriterResponse writer,
+        boolean isAnonymous,
+        String writerIp,
         String content,
         boolean isDeleted,
-        LocalDateTime createdAt,
-        List<CommentResponse> children) {
-    public static CommentResponse from(Comment comment) {
-        String writerName =
-                WriterDisplayFormatter.format(
-                        comment.isAnonymous(), comment.getMember(), comment.getWriterIp());
+        long replyCount,
+        List<CommentResponse> previewReplies,
+        boolean hasMoreReplies,
+        LocalDateTime createdAt) {
+
+    public CommentResponse {
+        previewReplies = previewReplies == null ? List.of() : List.copyOf(previewReplies);
+    }
 
-        String displayContent = comment.isDeleted() ? "삭제된 댓글입니다." : comment.getContent();
-        Long parentIdValue = comment.getParent() != null ? comment.getParent().getId() : null;
+    public record WriterResponse(String publicId, String nickname, String profileImageUrl) {}
 
+    public static CommentResponse from(Comment comment) {
+        Member member = comment.getMember();
+        WriterResponse writer =
+                !comment.isAnonymous() && member != null
+                        ? new WriterResponse(
+                                member.getPublicId(),
+                                member.getNickname(),
+                                member.getProfileImageUrl())
+                        : null;
         return new CommentResponse(
                 comment.getId(),
-                parentIdValue,
-                writerName,
-                displayContent,
+                comment.getPost().getId(),
+                comment.getParent() == null ? null : comment.getParent().getId(),
+                writer,
+                comment.isAnonymous(),
+                WriterDisplayFormatter.maskIp(comment.getWriterIp()),
+                comment.isDeleted() ? "삭제된 댓글입니다." : comment.getContent(),
                 comment.isDeleted(),
-                comment.getCreatedAt(),
-                new ArrayList<>());
+                0,
+                List.of(),
+                false,
+                comment.getCreatedAt());
+    }
+
+    public CommentResponse withPreviewReplies(List<CommentResponse> replies) {
+        return new CommentResponse(
+                commentId,
+                postId,
+                parentId,
+                writer,
+                isAnonymous,
+                writerIp,
+                content,
+                isDeleted,
+                replyCount,
+                replies,
+                hasMoreReplies,
+                createdAt);
+    }
+
+    public List<CommentResponse> children() {
+        return previewReplies;
+    }
+
+    public String writerName() {
+        if (isAnonymous) {
+            return "익명 (" + writerIp + ")";
+        }
+        return writer == null ? "알 수 없음" : writer.nickname();
     }
 }

backend/src/main/java/com/ikae/snowthing/domain/comment/dto/CommentUpdateRequest.java

@@ -0,0 +1,10 @@
+package com.ikae.snowthing.domain.comment.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
+
+public record CommentUpdateRequest(
+        @NotBlank(message = "댓글 내용은 필수 입력값입니다.")
+                @Size(max = 1000, message = "댓글은 최대 1000자까지 입력 가능합니다.")
+                String content,
+        String anonymousPassword) {}

backend/src/main/java/com/ikae/snowthing/domain/comment/dto/CommentUpdateResponse.java

@@ -0,0 +1,5 @@
+package com.ikae.snowthing.domain.comment.dto;
+
+import java.time.LocalDateTime;
+
+public record CommentUpdateResponse(Long commentId, String content, LocalDateTime updatedAt) {}

backend/src/main/java/com/ikae/snowthing/domain/comment/dto/PostCommentListResponse.java

@@ -2,16 +2,13 @@
 
 import java.util.List;
 
-import lombok.Builder;
-
-@Builder
 public record PostCommentListResponse(
-        String publicId, int totalCommentCount, List<CommentResponse> comments) {
+        String publicId,
+        int totalCommentCount,
+        List<CommentResponse> comments,
+        Long nextCursor,
+        boolean hasNext) {
     public PostCommentListResponse {
-        if (comments == null) {
-            comments = List.of();
-        } else {
-            comments = List.copyOf(comments);
-        }
+        comments = comments == null ? List.of() : List.copyOf(comments);
     }
 }

backend/src/main/java/com/ikae/snowthing/domain/comment/entity/Comment.java

@@ -16,7 +16,16 @@
 import lombok.NoArgsConstructor;
 
 @Entity
-@Table(name = "comment")
+@Table(
+        name = "comment",
+        indexes = {
+            @Index(
+                    name = "idx_comment_post_parent_created",
+                    columnList = "post_id,parent_id,created_at,comment_id"),
+            @Index(
+                    name = "idx_comment_parent_deleted_created",
+                    columnList = "parent_id,is_deleted,created_at,comment_id")
+        })
 @Getter
 @NoArgsConstructor(access = AccessLevel.PROTECTED)
 @SQLDelete(sql = "UPDATE comment SET is_deleted = true, deleted_at = NOW() WHERE comment_id = ?")
@@ -76,8 +85,27 @@ public Comment(
         this.isDeleted = false;
     }
 
+    public static Comment create(
+            Post post,
+            Member member,
+            Comment parent,
+            String content,
+            String writerIp,
+            boolean isAnonymous,
+            String anonymousPassword) {
+        return new Comment(post, member, parent, content, writerIp, isAnonymous, anonymousPassword);
+    }
+
+    public Comment rootParent() {
+        return parent != null ? parent : this;
+    }
+
     public void softDelete() {
         this.isDeleted = true;
         this.deletedAt = LocalDateTime.now();
     }
+
+    public void updateContent(String newContent) {
+        this.content = newContent;
+    }
 }

backend/src/main/java/com/ikae/snowthing/domain/comment/repository/CommentRepository.java

@@ -1,16 +1,26 @@
 package com.ikae.snowthing.domain.comment.repository;
 
 import java.util.List;
+import java.util.Optional;
+
+import jakarta.persistence.LockModeType;
 
 import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.data.jpa.repository.Lock;
 import org.springframework.data.jpa.repository.Query;
 import org.springframework.data.repository.query.Param;
 
 import com.ikae.snowthing.domain.comment.entity.Comment;
 
-public interface CommentRepository extends JpaRepository<Comment, Long> {
+public interface CommentRepository extends JpaRepository<Comment, Long>, CommentRepositoryCustom {
+
+    @Lock(LockModeType.PESSIMISTIC_WRITE)
+    @Query("SELECT c FROM Comment c WHERE c.id = :commentId")
+    Optional<Comment> findByIdForUpdate(@Param("commentId") Long commentId);
+
+    long countByParentIdAndIsDeletedFalse(Long parentId);
 
-    @Query(
-            "SELECT c FROM Comment c LEFT JOIN FETCH c.member WHERE c.post.id = :postId ORDER BY c.createdAt ASC, c.id ASC")
-    List<Comment> findByPostIdWithMember(@Param("postId") Long postId);
+    @Lock(LockModeType.PESSIMISTIC_READ)
+    @Query("SELECT c.id FROM Comment c WHERE c.parent.id = :parentId AND c.isDeleted = false")
+    List<Long> findActiveReplyIdsForUpdate(@Param("parentId") Long parentId);
 }

backend/src/main/java/com/ikae/snowthing/domain/comment/repository/CommentRepositoryCustom.java

@@ -0,0 +1,25 @@
+package com.ikae.snowthing.domain.comment.repository;
+
+import java.time.LocalDateTime;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+
+import com.ikae.snowthing.domain.comment.dto.CommentResponse;
+
+public interface CommentRepositoryCustom {
+
+    record CursorPosition(LocalDateTime createdAt, Long commentId) {}
+
+    Optional<CursorPosition> findRootCursor(Long postId, Long cursorId);
+
+    Optional<CursorPosition> findReplyCursor(Long rootCommentId, Long cursorId);
+
+    List<CommentResponse> findRootComments(Long postId, CursorPosition cursor, int fetchSize);
+
+    Map<Long, List<CommentResponse>> findTopReplyPreviews(List<Long> rootCommentIds);
+
+    List<CommentResponse> findReplies(Long rootCommentId, CursorPosition cursor, int fetchSize);
+
+    long countActiveReplies(Long rootCommentId);
+}