Refactor: AbstractSocialAuthService 수정 #104
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow uses actions that are not certified by GitHub. | |
| # They are provided by a third-party and are governed by | |
| # separate terms of service, privacy policy, and support | |
| # documentation. | |
| # This workflow will build a Java project with Gradle and cache/restore any dependencies to improve the workflow execution time | |
| # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-gradle | |
| name: Java CI with Gradle | |
| on: | |
| # push: | |
| # branches: [ "feature/ci-cd" ] | |
| pull_request: | |
| branches: [ "develop" ] | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| env: | |
| DB_URL: ${{secrets.DB_URL}} | |
| DB_DRIVER: ${{secrets.DB_DRIVER}} | |
| DB_USER: ${{secrets.DB_USER}} | |
| DB_PASSWORD: ${{secrets.DB_ROOT_PASSWORD}} | |
| REDIS_HOST: ${{secrets.REDIS_HOST}} | |
| REDIS_PORT: 6379 | |
| APPLE_CLIENT_ID: ${{secrets.APPLE_CLIENT_ID}} | |
| APPLE_KEY_ID: ${{secrets.APPLE_KEY_ID}} | |
| APPLE_PRIVATE_KEY_URL: ${{secrets.APPLE_PRIVATE_KEY_URL}} | |
| APPLE_PUBLIC_KEY_URL: ${{secrets.APPLE_PUBLIC_KEY_URL}} | |
| APPLE_TEAM_ID: ${{secrets.APPLE_TEAM_ID}} | |
| EC2_HOST: ${{secrets.EC2_HOST}} | |
| EC2_SSH_KEY: ${{secrets.EC2_SSH_KEY}} | |
| EC2_USER: ${{secrets.EC2_USER}} | |
| ENCRYPTION_KEY: ${{secrets.ENCRYPTION_KEY}} | |
| JWT_ACCESS_EXPIRATION: ${{secrets.JWT_ACCESS_EXPIRATION}} | |
| JWT_REFRESH_EXPIRATION: ${{secrets.JWT_REFRESH_EXPIRATION}} | |
| JWT_SECRET: ${{secrets.JWT_SECRET}} | |
| KAKAO_REDIRECT_URL: ${{secrets.KAKAO_REDIRECT_URL}} | |
| KAKAO_REST_API_KEY: ${{secrets.KAKAO_REST_API_KEY}} | |
| KAKAO_STORE_API_URL: ${{secrets.KAKAO_STORE_API_URL}} | |
| S3_ACCESS_KEY: ${{secrets.S3_ACCESS_KEY}} | |
| S3_BUCKET: ${{secrets.S3_BUCKET}} | |
| S3_CLOUD_FRONT_URL: ${{secrets.S3_CLOUD_FRONT_URL}} | |
| S3_REGION: ${{secrets.S3_REGION}} | |
| S3_SECRET_KEY: ${{secrets.S3_SECRET_KEY}} | |
| SMTP_ADDRESS: ${{secrets.SMTP_ADDRESS}} | |
| SMTP_PASSWORD: ${{secrets.SMTP_PASSWORD}} | |
| TEST_DB_URL: ${{secrets.TEST_DB_URL}} | |
| services: | |
| redis: | |
| image: redis:7.2 | |
| ports: | |
| - 6379:6379 | |
| options: >- | |
| --health-cmd "redis-cli ping" | |
| --health-interval 10s | |
| --health-timeout 5s | |
| --health-retries 5 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| # Configure Gradle for optimal use in GitHub Actions, including caching of downloaded dependencies. | |
| # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md | |
| - name: setup MySQL | |
| uses: mirromutth/[email protected] | |
| with: | |
| host port: 3306 | |
| container port: 3306 | |
| mysql database: 'test' | |
| mysql root password: ${{secrets.DB_ROOT_PASSWORD}} | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0 | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Build with Gradle Wrapper | |
| run: ./gradlew build -Dspring.profiles.active=test -i | |
| # artifact(jar 파일) 업로드 | |
| - name: Upload JAR artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: jar-artifact | |
| path: build/libs/*.jar | |
| # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html). | |
| # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version. | |
| # | |
| # - name: Setup Gradle | |
| # uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0 | |
| # with: | |
| # gradle-version: '8.9' | |
| # | |
| # - name: Build with Gradle 8.9 | |
| # run: gradle build | |
| # 한글 인코딩 테스트 | |
| deploy: | |
| needs: build | |
| runs-on: ubuntu-latest | |
| env: | |
| EC2_HOST: ${{ secrets.EC2_HOST }} | |
| EC2_USER: ${{ secrets.EC2_USER }} | |
| SSH_PRIVATE_KEY: ${{ secrets.EC2_SSH_KEY }} | |
| steps: | |
| # artifact(jar 파일) 다운로드 | |
| - uses: actions/checkout@v4 | |
| - name: Download JAR artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: jar-artifact | |
| path: build/libs | |
| # SSH 키 생성 | |
| - name: Prepare SSH Key | |
| run: | | |
| echo "$SSH_PRIVATE_KEY" > private_key.pem | |
| chmod 600 private_key.pem | |
| # jar 파일 빌드 후 EC2 환경으로 복사 | |
| - name: Transfer artifact to EC2 | |
| run: | | |
| rsync -avz -e "ssh -i private_key.pem -o StrictHostKeyChecking=no" build/libs/*.jar $EC2_USER@$EC2_HOST:/home/$EC2_USER/ | |
| # SSH 접속 후 기존 실행중인 jar 파일 제거 | |
| # 이후 환경 변수 설정, log 파일 생성, 배포 파일 실행 | |
| - name: Deploy on EC2 | |
| run: | | |
| ssh -i private_key.pem -o StrictHostKeyChecking=no $EC2_USER@$EC2_HOST <<EOF | |
| echo "🔄 기존 실행 중인 애플리케이션 종료 중..." | |
| # 실행 중인 Java 프로세스 찾기 | |
| PID=\$(sudo pgrep -fa "java -jar" | awk '{print \$1}') | |
| if [ -n "\$PID" ]; then | |
| echo "✅ 기존 프로세스 종료: \$PID" | |
| sudo kill -9 \$PID | |
| else | |
| echo "⚠️ 실행 중인 프로세스 없음, 계속 진행..." | |
| fi | |
| echo "📂 로그 디렉토리 생성 (없으면 생성)" | |
| mkdir -p /home/$EC2_USER/log | |
| echo "🆕 최신 JAR 파일 찾기..." | |
| LATEST_JAR=\$(ls -t /home/$EC2_USER/*.jar | head -n 1) | |
| # 새로운 애플리케이션 실행 전에 기존 프로세스가 완전히 종료되었는지 확인 | |
| sleep 3 | |
| STILL_RUNNING_PID=\$(sudo pgrep -fa "java -jar" | awk '{print \$1}') | |
| if [ -n "\$STILL_RUNNING_PID" ]; then | |
| echo "❌ 기존 프로세스가 종료되지 않음! 강제 종료." | |
| sudo kill -9 \$STILL_RUNNING_PID | |
| sleep 2 | |
| fi | |
| echo "🚀 새 애플리케이션 실행: \$LATEST_JAR" | |
| sudo -E nohup java -jar "\$LATEST_JAR" > /home/$EC2_USER/log/app.log 2>&1 & | |
| echo "✅ 배포 완료!" | |
| EOF | |
| dependency-submission: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies. | |
| # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md | |
| - name: Generate and submit dependency graph | |
| uses: gradle/actions/dependency-submission@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0 | |