filter 코드 추가, jwt데이터 테스트, user 엔티티 수정

chobeebee · Jun 26, 2024 · ee35299 · ee35299
1 parent f90aa7d
commit ee35299
Show file tree

Hide file tree

Showing 3 changed files with 50 additions and 3 deletions.
diff --git a/src/main/java/com/sparta/binplay/config/SecurityConfig.java b/src/main/java/com/sparta/binplay/config/SecurityConfig.java
@@ -1,5 +1,6 @@
 package com.sparta.binplay.config;
 
+import com.sparta.binplay.jwt.JWTFilter;
 import com.sparta.binplay.oauth2.CustomSuccessHandler;
 import com.sparta.binplay.service.CustomOAuth2UserService;
 import com.sparta.binplay.service.JWTUtil;
@@ -8,7 +9,9 @@
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.CorsConfigurationSource;
 
@@ -30,6 +33,44 @@ public SecurityConfig(CustomOAuth2UserService customOAuth2UserService, CustomSuc
     @Bean
     public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
 
+        //csrf disable
+        http
+                .csrf((auth) -> auth.disable());
+
+        //From 로그인 방식 disable
+        http
+                .formLogin((auth) -> auth.disable());
+
+        http
+                .logout((auth) -> auth.disable());
+
+        //HTTP Basic 인증 방식 disable
+        http
+                .httpBasic((auth) -> auth.disable());
+
+        //JWTFilter 추가
+        http
+                .addFilterBefore(new JWTFilter(jwtUtil), UsernamePasswordAuthenticationFilter.class);
+
+        //oauth2
+        http
+                .oauth2Login((oauth2) -> oauth2
+                        .userInfoEndpoint((userInfoEndpointConfig) -> userInfoEndpointConfig
+                                .userService(customOAuth2UserService))
+                        .successHandler(customSuccessHandler)
+                );
+
+        //경로별 인가 작업
+        http
+                .authorizeHttpRequests((auth) -> auth
+                        .requestMatchers("/").permitAll()
+                        .anyRequest().authenticated());
+
+        //세션 설정 : STATELESS
+        http
+                .sessionManagement((session) -> session
+                        .sessionCreationPolicy(SessionCreationPolicy.STATELESS));
+
         http
                 .cors(corsCustomizer -> corsCustomizer.configurationSource(new CorsConfigurationSource() {
 

diff --git a/src/main/java/com/sparta/binplay/controller/MainController.java b/src/main/java/com/sparta/binplay/controller/MainController.java
@@ -12,4 +12,10 @@ public class MainController {
     public String mainAPI() {
         return "main route";
     }
+
+    @GetMapping("/loginTest")
+    @ResponseBody
+    public String loginAPI() {
+        return "login route";
+    }
 }
diff --git a/src/main/java/com/sparta/binplay/entity/Users.java b/src/main/java/com/sparta/binplay/entity/Users.java
@@ -19,13 +19,13 @@ public class Users extends Timestamped{
     @Column(name="email", nullable = false, unique = true)
     private String email;
 
-    @Column(name="password", nullable = false)
+    @Column(name="password")
     private String password;
 
-    @Column(name="username", nullable = false)
+    @Column(name="username")
     private String username;
 
-    @Column(name="name", nullable = false)
+    @Column(name="name")
     private String name;
 
     @Column(name="grade")