[Fix] TmpCheck 쿠키 추가

src/main/java/com/ureca/uble/domain/auth/service/AuthService.java

@@ -19,6 +19,7 @@
 import com.ureca.uble.domain.users.repository.UserRepository;
 import com.ureca.uble.entity.Token;
 import com.ureca.uble.entity.User;
+import com.ureca.uble.entity.enums.Role;
 import com.ureca.uble.global.exception.GlobalException;
 import com.ureca.uble.global.security.jwt.JwtProvider;
 import com.ureca.uble.global.security.jwt.JwtValidator;
@@ -70,6 +71,10 @@ public User login(String code, HttpServletResponse response) {
 
 		jwtProvider.addAccessTokenHeader(response, accessToken);
 		jwtProvider.addRefreshTokenCookie(response, refreshToken);
+
+		if (user.getRole() == Role.TMP_USER){
+			jwtProvider.addTmpCheckCookie(response);
+		}
 		jwtProvider.addAuthCheckCookie(response);
 
 		return user;

src/main/java/com/ureca/uble/domain/users/controller/UserController.java

@@ -6,6 +6,7 @@
 import com.ureca.uble.domain.users.service.UserService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
+import jakarta.servlet.http.HttpServletResponse;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.core.annotation.AuthenticationPrincipal;
@@ -30,11 +31,12 @@ public CommonResponse<GetUserInfoRes> getUserInfo(
 	@Operation(summary = "사용자 정보 최초 입력 & 수정", description = "사용자 정보를 수정합니다.")
 	@PutMapping("/userInfo")
 	public CommonResponse<UpdateUserInfoRes>updateUserInfo(
+		HttpServletResponse response,
 		@Parameter(description = "사용자정보", required = true)
 		@AuthenticationPrincipal Long userId,
 		@Valid @RequestBody UpdateUserInfoReq request
 	){
-		return CommonResponse.success(userService.updateUserInfo(userId, request));
+		return CommonResponse.success(userService.updateUserInfo(response, userId, request));
 	}
 
 	@Operation(summary = "제휴처 매장 추천 정보 조회", description = "사용자에게 맞는 제휴처 매장 추천 정보를 조회합니다.")

src/main/java/com/ureca/uble/domain/users/service/UserService.java

@@ -16,6 +16,9 @@
 import com.ureca.uble.entity.UserCategory;
 import com.ureca.uble.entity.document.UsageHistoryDocument;
 import com.ureca.uble.global.exception.GlobalException;
+import com.ureca.uble.global.security.jwt.JwtProvider;
+
+import jakarta.servlet.http.HttpServletResponse;
 import lombok.RequiredArgsConstructor;
 import org.slf4j.MDC;
 import org.springframework.data.elasticsearch.client.elc.ElasticsearchAggregations;
@@ -43,6 +46,7 @@ public class UserService {
 	private final UsageHistoryDocumentRepository usageHistoryDocumentRepository;
 	private final BrandRepository brandRepository;
 	private final BookmarkRepository bookmarkRepository;
+	private final JwtProvider jwtProvider;
 
 	/**
 	 * 사용자 정보 조회
@@ -62,7 +66,7 @@ public GetUserInfoRes getUserInfo(Long userId) {
 	 * 사용자 정보 갱신
 	 */
 	@Transactional
-	public UpdateUserInfoRes updateUserInfo(Long userId, UpdateUserInfoReq request) {
+	public UpdateUserInfoRes updateUserInfo(HttpServletResponse response, Long userId, UpdateUserInfoReq request) {
 		User user = findUser(userId);
 
 		user.updateUserInfo(
@@ -80,6 +84,8 @@ public UpdateUserInfoRes updateUserInfo(Long userId, UpdateUserInfoReq request)
 			userCategoryRepository.save(userCategory);
 		});
 
+		jwtProvider.deleteTmpCheckCookie(response);
+
 		return UpdateUserInfoRes.of(user, request.getCategoryIds());
 	}
 

src/main/java/com/ureca/uble/global/security/jwt/JwtProvider.java

@@ -88,6 +88,19 @@ public void addAuthCheckCookie(HttpServletResponse response) {
 		response.addHeader("Set-Cookie", cookie.toString());
 	}
 
+	public void addTmpCheckCookie(HttpServletResponse response) {
+		ResponseCookie cookie = ResponseCookie.from("TmpCheck", "true")
+			.path("/")
+			.httpOnly(false)
+			.secure(isSecure)
+			.maxAge(REFRESH_TOKEN_VALIDITY_MILLIS / 1000)
+			.sameSite(sameSite)
+			.domain(cookieDomain.isBlank() ? null : cookieDomain)
+			.build();
+
+		response.addHeader("Set-Cookie", cookie.toString());
+	}
+
 	public void deleteRefreshTokenCookie(HttpServletResponse response){
 		ResponseCookie cookie = ResponseCookie.from("refreshToken", "")
 			.path("/")
@@ -114,6 +127,21 @@ public void deleteAuthCheckCookie(HttpServletResponse response){
 		response.addHeader("Set-Cookie", cookie.toString());
 	}
 
+	public void deleteTmpCheckCookie(HttpServletResponse response){
+		ResponseCookie cookie = ResponseCookie.from("TmpCheck", "")
+			.path("/")
+			.httpOnly(false)
+			.secure(isSecure)
+			.maxAge(0)
+			.sameSite(sameSite)
+			.domain(cookieDomain.isBlank() ? null : cookieDomain)
+			.build();
+
+		response.addHeader("Set-Cookie", cookie.toString());
+	}
+
+
+
 	public LocalDateTime getRefreshTokenExpiry(String token){
 		Claims claims = Jwts.parser()
 			.verifyWith(Keys.hmacShaKeyFor(secret.getBytes()))

src/test/java/com/ureca/uble/domain/users/service/UserServiceTest.java

@@ -28,6 +28,9 @@
 import com.ureca.uble.entity.enums.Gender;
 import com.ureca.uble.entity.enums.Rank;
 import com.ureca.uble.global.exception.GlobalException;
+import com.ureca.uble.global.security.jwt.JwtProvider;
+
+import jakarta.servlet.http.HttpServletResponse;
 
 @ExtendWith(MockitoExtension.class)
 public class UserServiceTest {
@@ -44,6 +47,12 @@ public class UserServiceTest {
 	@InjectMocks
 	private UserService userService;
 
+	@Mock
+	private HttpServletResponse response;
+
+	@Mock
+	private JwtProvider jwtProvider;
+
 	@Test
 	@DisplayName("사용자 ID로 사용자 정보를 조회한다.")
 	void getUserInfoSuccess(){
@@ -105,9 +114,10 @@ void updateUserInfoSuccess(){
 		when(categoryRepository.findAllById(categoryIds)).thenReturn(List.of(cat1, cat2));
 
 		//when
-		UpdateUserInfoRes result = userService.updateUserInfo(userId, request);
+		UpdateUserInfoRes result = userService.updateUserInfo(response, userId, request);
 
 		//then
+		verify(jwtProvider).deleteTmpCheckCookie(response);
 		verify(user).updateUserInfo(Rank.VIP, Gender.FEMALE, LocalDate.of(1999, 1, 1), "123456787654321");
 		verify(userCategoryRepository).deleteByUser(user);
 		verify(userCategoryRepository, times(2)).save(any(UserCategory.class));
@@ -126,7 +136,7 @@ void updateUserInfo_userNotFound(){
 
 		//when, then
 		GlobalException ex = assertThrows(GlobalException.class, () ->
-			userService.updateUserInfo(123L, req)
+			userService.updateUserInfo(response,123L, req)
 		);
 		assertThat(ex.getResultCode()).isEqualTo(UserErrorCode.USER_NOT_FOUND);
 	}