[Spring MVC(인증)] 안금서 미션 제출합니다.

build.gradle

@@ -16,6 +16,9 @@ dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
     implementation 'org.springframework.boot:spring-boot-starter-jdbc'
+    implementation 'org.springframework.boot:spring-boot-starter-validation'
+    compileOnly 'org.projectlombok:lombok'
+    annotationProcessor 'org.projectlombok:lombok'
 
     implementation 'dev.akkinoc.spring.boot:logback-access-spring-boot-starter:4.0.0'
 

src/main/java/roomescape/authentication/AuthAdminRoleInterceptor.java

@@ -0,0 +1,33 @@
+package roomescape.authentication;
+
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+import roomescape.jwt.JwtProvider;
+import roomescape.jwt.JwtResponse;
+import roomescape.jwt.JwtUtils;
+
+@Component
+@RequiredArgsConstructor
+public class AuthAdminRoleInterceptor implements HandlerInterceptor {
+
+    private final JwtProvider jwtProvider;
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+        JwtResponse jwtResponse = JwtUtils.extractTokenFromCookie(request.getCookies());
+        if (jwtResponse.accessToken() == null || !isAdmin(jwtResponse.accessToken())) {
+            response.setStatus(401);
+            return false;
+        }
+
+        return true;
+    }
+
+    private boolean isAdmin(String token) {
+        MemberAuthInfo memberAuthInfo = JwtUtils.extractMemberAuthInfoFromToken(token);
+        return "ADMIN".equals(memberAuthInfo.role());
+    }
+}

src/main/java/roomescape/authentication/AuthenticationConfig.java

@@ -0,0 +1,28 @@
+package roomescape.authentication;
+
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import java.util.List;
+
+@Configuration
+@RequiredArgsConstructor
+public class AuthenticationConfig implements WebMvcConfigurer {
+
+    private final LoginMemberArgumentResolver loginMemberArgumentResolver;
+    private final AuthAdminRoleInterceptor authAdminRoleInterceptor;
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
+        resolvers.add(loginMemberArgumentResolver);
+    }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(authAdminRoleInterceptor)
+                .addPathPatterns("/admin/**");
+    }
+}

src/main/java/roomescape/authentication/LoginMemberArgumentResolver.java

@@ -0,0 +1,38 @@
+package roomescape.authentication;
+
+import jakarta.servlet.http.HttpServletRequest;
+import lombok.RequiredArgsConstructor;
+import org.springframework.core.MethodParameter;
+import org.springframework.stereotype.Component;
+import org.springframework.web.bind.support.WebDataBinderFactory;
+import org.springframework.web.context.request.NativeWebRequest;
+import org.springframework.web.context.request.ServletWebRequest;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.method.support.ModelAndViewContainer;
+import roomescape.jwt.JwtProvider;
+import roomescape.jwt.JwtResponse;
+import roomescape.jwt.JwtUtils;
+
+@Component
+@RequiredArgsConstructor
+public class LoginMemberArgumentResolver implements HandlerMethodArgumentResolver {
+
+    private final JwtProvider jwtProvider;
+
+    @Override
+    public boolean supportsParameter(MethodParameter parameter) {
+        return parameter.getParameterType().equals(MemberAuthInfo.class);
+    }
+
+    @Override
+    public Object resolveArgument(MethodParameter parameter, ModelAndViewContainer mavContainer, NativeWebRequest webRequest, WebDataBinderFactory binderFactory) throws Exception {
+        HttpServletRequest request = ((ServletWebRequest) webRequest).getRequest();
+
+        JwtResponse jwtResponse = JwtUtils.extractTokenFromCookie(request.getCookies());
+        if (jwtResponse.accessToken() == null) {
+            return null;
+        }
+
+        return JwtUtils.extractMemberAuthInfoFromToken(jwtResponse.accessToken());
+    }
+}

src/main/java/roomescape/authentication/MemberAuthInfo.java

@@ -0,0 +1,6 @@
+package roomescape.authentication;
+
+public record MemberAuthInfo(
+        String name,
+        String role) {
+}

src/main/java/roomescape/exception/GeneralExceptionHandler.java

@@ -0,0 +1,31 @@
+package roomescape.exception;
+
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.ExceptionHandler;
+import org.springframework.web.bind.annotation.RestControllerAdvice;
+
+@RestControllerAdvice
+public class GeneralExceptionHandler {
+
+    @ExceptionHandler(MemberNotFoundException.class)
+    public ResponseEntity<String> handleMemberNotFound(MemberNotFoundException e) {
+        return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body(e.getMessage());
+    }
+
+    @ExceptionHandler(JwtValidationException.class)
+    public ResponseEntity<String> handleJwtValidationException(JwtValidationException e) {
+        return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body(e.getMessage());
+    }
+
+    @ExceptionHandler(JwtProviderException.class)
+    public ResponseEntity<String> handleJwtProviderException(JwtProviderException e) {
+        return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body(e.getMessage());
+    }
+
+    @ExceptionHandler(Exception.class)
+    public ResponseEntity<String> handleGeneralException(Exception e) {
+        e.printStackTrace();
+        return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).body(e.getMessage());
+    }
+}

src/main/java/roomescape/exception/JwtProviderException.java

@@ -0,0 +1,7 @@
+package roomescape.exception;
+
+public class JwtProviderException extends RuntimeException {
+    public JwtProviderException(String message) {
+        super(message);
+    }
+}

src/main/java/roomescape/exception/JwtValidationException.java

@@ -0,0 +1,7 @@
+package roomescape.exception;
+
+public class JwtValidationException extends RuntimeException {
+    public JwtValidationException(String message) {
+        super(message);
+    }
+}

src/main/java/roomescape/exception/MemberNotFoundException.java

@@ -0,0 +1,7 @@
+package roomescape.exception;
+
+public class MemberNotFoundException extends RuntimeException {
+    public MemberNotFoundException(String message) {
+        super(message);
+    }
+}

src/main/java/roomescape/exception/PageExceptionHandler.java

@@ -0,0 +1,16 @@
+package roomescape.exception;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.web.bind.annotation.ControllerAdvice;
+import org.springframework.web.bind.annotation.ExceptionHandler;
+import roomescape.PageController;
+
+@Slf4j
+@ControllerAdvice(assignableTypes = PageController.class)
+public class PageExceptionHandler {
+    @ExceptionHandler(Exception.class)
+    public String handleException(Exception e) {
+        log.error("error: " + e.getMessage());
+        return "error/500"; //view 렌더링 페이지는 만들지 않음
+    }
+}

src/main/java/roomescape/jwt/JwtProvider.java

@@ -0,0 +1,31 @@
+package roomescape.jwt;
+
+import io.jsonwebtoken.JwtException;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.security.Keys;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+import roomescape.exception.JwtProviderException;
+import roomescape.member.Member;
+
+@Component
+public class JwtProvider {
+
+    @Value("${roomescape.auth.jwt.secret}")
+    private String secretKey;
+
+    public JwtResponse createAccessToken(Member member) {
+        try {
+            String accessToken = Jwts.builder()
+                    .setSubject(member.getId().toString())
+                    .claim("name", member.getName())
+                    .claim("role", member.getRole())
+                    .signWith(Keys.hmacShaKeyFor(secretKey.getBytes()))
+                    .compact();
+
+            return new JwtResponse(accessToken);
+        } catch (JwtException e) {
+            throw new JwtProviderException("JWT 생성에 실패하였습니다.");
+        }
+    }
+}

src/main/java/roomescape/jwt/JwtResponse.java

@@ -0,0 +1,6 @@
+package roomescape.jwt;
+
+public record JwtResponse(
+        String accessToken
+) {
+}

src/main/java/roomescape/jwt/JwtUtils.java

@@ -0,0 +1,65 @@
+package roomescape.jwt;
+
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.JwtException;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.security.Keys;
+import jakarta.servlet.http.Cookie;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+import roomescape.authentication.MemberAuthInfo;
+import roomescape.exception.JwtValidationException;
+
+import java.util.Arrays;
+
+@Component
+@RequiredArgsConstructor
+public class JwtUtils {
+
+    private static String secretKey;
+
+    @Value("${roomescape.auth.jwt.secret}")
+    public void setSecretKey(String secretKey) {
+        JwtUtils.secretKey = secretKey;
+    }
+
+    public static MemberAuthInfo extractMemberAuthInfoFromToken(String token) {
+        if (token == null || token.isEmpty()) {
+            throw new JwtValidationException("토큰이 존재하지 않습니다.");
+        }
+
+        try {
+            Claims claims = Jwts.parserBuilder()
+                    .setSigningKey(Keys.hmacShaKeyFor(secretKey.getBytes()))
+                    .build()
+                    .parseClaimsJws(token)
+                    .getBody();
+
+            String name = claims.get("name", String.class);
+            String role = claims.get("role", String.class);
+
+            return new MemberAuthInfo(name, role);
+        } catch (JwtException e) {
+            throw new JwtValidationException("유효하지 않은 JWT 토큰입니다.");
+        }
+    }
+
+    public static JwtResponse extractTokenFromCookie(Cookie[] cookies) {
+        if (cookies == null) {
+            throw new JwtValidationException("쿠키가 존재하지 않습니다.");
+        }
+
+        try {
+            String accessToken = Arrays.stream(cookies)
+                    .filter(cookie -> cookie.getName().equals("token"))
+                    .map(Cookie::getValue)
+                    .findFirst()
+                    .orElseThrow(() -> new JwtValidationException("토큰이 존재하지 않습니다."));
+
+            return new JwtResponse(accessToken);
+        } catch (Exception e) {
+            throw new JwtValidationException("쿠키에서 토큰 추출 중 오류가 발생했습니다.");
+        }
+    }
+}

src/main/java/roomescape/login/LoginCheckResponse.java

@@ -0,0 +1,4 @@
+package roomescape.login;
+
+public record LoginCheckResponse(String name) {
+}

src/main/java/roomescape/login/LoginController.java

@@ -0,0 +1,54 @@
+package roomescape.login;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RestController;
+import roomescape.authentication.MemberAuthInfo;
+import roomescape.jwt.JwtResponse;
+import roomescape.jwt.JwtUtils;
+
+@RestController
+@RequiredArgsConstructor
+public class LoginController {
+
+    private final LoginService loginService;
+
+    @PostMapping("/login")
+    public ResponseEntity<Void> login(@Valid @RequestBody LoginRequest loginRequest, HttpServletResponse response) {
+        JwtResponse jwtResponse = loginService.login(loginRequest);
+
+        Cookie cookie = new Cookie("token", jwtResponse.accessToken());
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+        response.addCookie(cookie);
+
+        return ResponseEntity.ok().build();
+    }
+
+    @GetMapping("/login/check")
+    public ResponseEntity<LoginCheckResponse> checkLogin(HttpServletRequest request) {
+        JwtResponse jwtResponse = JwtUtils.extractTokenFromCookie(request.getCookies());
+        MemberAuthInfo memberAuthInfo = JwtUtils.extractMemberAuthInfoFromToken(jwtResponse.accessToken());
+        LoginCheckResponse loginCheckResponse = loginService.checkLogin(memberAuthInfo);
+
+        return ResponseEntity.ok(loginCheckResponse);
+    }
+
+    @PostMapping("/logout")
+    public ResponseEntity logout(HttpServletResponse response) {
+        Cookie cookie = new Cookie("token", "");
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+        cookie.setMaxAge(0);
+        response.addCookie(cookie);
+
+        return ResponseEntity.ok().build();
+    }
+}

src/main/java/roomescape/login/LoginRequest.java

@@ -0,0 +1,15 @@
+package roomescape.login;
+
+import jakarta.validation.constraints.NotEmpty;
+import lombok.Data;
+
+@Data
+public class LoginRequest {
+
+    @NotEmpty
+    private String email;
+
+    @NotEmpty
+    private String password;
+
+}