[22기_배승식] Spring Security & JWT 미션 제출합니다. #19
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| package com.ceos22.cgvclone.common.code; | ||
|
|
||
| import lombok.Getter; | ||
|
|
||
| @Getter | ||
| public enum ErrorCode { | ||
|
|
||
| // 잘못된 요청 | ||
| BAD_REQUEST_ERROR(400, "G001", "Bad Request Exception"), | ||
|
|
||
| // 인증/인가 관련 | ||
| UNAUTHORIZED_ERROR(401, "G002", "Unauthorized Exception"), | ||
|
|
||
| // 허용되지 않은 접근 | ||
| FORBIDDEN_ERROR(403, "G003", "Forbidden Exception"), | ||
|
|
||
| // 리소스 부재 | ||
| NOT_FOUND_ERROR(404, "G004", "Not Found Exception"), | ||
|
|
||
| // TODO: 임시 -> 도메인별 시나리오를 고려한 설계 | ||
| INTERNAL_SERVER_ERROR(500, "G005", "Internal Server Error"); | ||
|
|
||
| private final int status; | ||
| private final String divisionCode; | ||
|
Comment on lines
+23
to
+24
There was a problem hiding this comment. 도메인별 맥락이나 예외의 세부 내용을 내부적으로 더 구체화하기 위해 divisionCode를 두어 실제 HTTP 상태 코드를 나타내는 status와 구분했습니다! |
||
| private final String message; | ||
|
|
||
| ErrorCode(final int status, final String divisionCode, final String message) { | ||
| this.status = status; | ||
| this.divisionCode = divisionCode; | ||
| this.message = message; | ||
| } | ||
| } | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,24 @@ | ||
| package com.ceos22.cgvclone.common.response; | ||
|
|
||
| import com.ceos22.cgvclone.common.code.ErrorCode; | ||
| import lombok.AccessLevel; | ||
| import lombok.Getter; | ||
| import lombok.NoArgsConstructor; | ||
|
|
||
| @Getter | ||
| @NoArgsConstructor(access = AccessLevel.PROTECTED) | ||
| public class ErrorResponse { | ||
| private int status; | ||
| private String divisionCode; | ||
| private String resultMessage; | ||
| private String reason; | ||
|
|
||
| public static ErrorResponse of(ErrorCode errorCode, String reason) { | ||
| ErrorResponse response = new ErrorResponse(); | ||
| response.status = errorCode.getStatus(); | ||
| response.divisionCode = errorCode.getDivisionCode(); | ||
| response.resultMessage = errorCode.getMessage(); | ||
| response.reason = reason; | ||
| return response; | ||
| } | ||
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,62 @@ | ||
| package com.ceos22.cgvclone.config; | ||
|
|
||
| import com.ceos22.cgvclone.domain.auth.jwt.JwtAuthenticationFilter; | ||
| import com.ceos22.cgvclone.domain.auth.jwt.TokenProvider; | ||
| import lombok.RequiredArgsConstructor; | ||
| import org.springframework.context.annotation.Bean; | ||
| import org.springframework.context.annotation.Configuration; | ||
| import org.springframework.security.authentication.AuthenticationManager; | ||
| import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration; | ||
| import org.springframework.security.config.annotation.web.builders.HttpSecurity; | ||
| import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; | ||
| import org.springframework.security.config.http.SessionCreationPolicy; | ||
| import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; | ||
| import org.springframework.security.crypto.password.PasswordEncoder; | ||
| import org.springframework.security.web.SecurityFilterChain; | ||
| import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; | ||
|
|
||
|
|
||
| @Configuration | ||
| @RequiredArgsConstructor | ||
| public class SecurityConfig { | ||
|
|
||
| private final TokenProvider tokenProvider; | ||
|
|
||
| @Bean | ||
| public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { | ||
| http.csrf(AbstractHttpConfigurer::disable) | ||
| .sessionManagement(session -> | ||
| session.sessionCreationPolicy(SessionCreationPolicy.STATELESS) | ||
| ) | ||
| .authorizeHttpRequests(auth-> | ||
| auth.requestMatchers( | ||
| "/auth/**", | ||
| "/swagger-ui/**", | ||
| "/v3/api-docs/**", | ||
| "/api/movies/**", | ||
| "/api/theaters/**" | ||
| ) | ||
| .permitAll() | ||
| .anyRequest() | ||
| .authenticated() | ||
| ) | ||
| .addFilterBefore( | ||
| new JwtAuthenticationFilter(tokenProvider), | ||
| UsernamePasswordAuthenticationFilter.class | ||
| ); | ||
| return http.build(); | ||
| } | ||
|
|
||
| @Bean | ||
| public PasswordEncoder passwordEncoder() { | ||
| return new BCryptPasswordEncoder(); | ||
| } | ||
|
|
||
| @Bean | ||
| public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception { | ||
| return authenticationConfiguration.getAuthenticationManager(); | ||
| } | ||
|
|
||
|
|
||
|
|
||
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,27 @@ | ||
| package com.ceos22.cgvclone.config; | ||
|
|
||
| import io.swagger.v3.oas.models.Components; | ||
| import io.swagger.v3.oas.models.OpenAPI; | ||
| import io.swagger.v3.oas.models.info.Info; | ||
| import org.springframework.context.annotation.Bean; | ||
| import org.springframework.context.annotation.Configuration; | ||
| import org.springframework.web.servlet.config.annotation.EnableWebMvc; | ||
|
|
||
| @Configuration | ||
| @EnableWebMvc | ||
| public class SwaggerConfig { | ||
|
|
||
| @Bean | ||
| public OpenAPI openAPI() { | ||
| return new OpenAPI() | ||
| .components(new Components()) | ||
| .info(apiInfo()); | ||
| } | ||
|
|
||
| private Info apiInfo() { | ||
| return new Info() | ||
| .title("My CGV API") | ||
| .description("CEOS 22nd CGV Clone Coding") | ||
| .version("1.0.0"); | ||
| } | ||
| } |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
p2. 보통은 복호화 하지 못할거에요