- [이전 수업 내용](https://www.slog.gg/p/13343) - [레포지터리](https://github.com/sik2/sksb_2401) ## 1강 - [p 13363, 스벨트킷 + 스프링부트 스타트 팩, 1강, 회원 기능 추가 영상 x]() - [GIT](https://github.com/sik2/sksb_2401/commit/0431123) - svelte - src/routes/login/+page.svelte ```html ``` - ApiV1MemberController ```java @RestController @RequestMapping("/api/v1/members") @RequiredArgsConstructor public class ApiV1MembersController { private final MemberService memberService; @Getter public static class LoginResponseBody { private String username; public LoginResponseBody(String username) { this.username = username; } } @Getter @Setter public static class LoginRequestBody { @NotBlank private String username; @NotBlank private String password; } @PostMapping("/login") public LoginResponseBody login( @Valid @RequestBody LoginRequestBody body ) { Member member = memberService.findByUsername(body.getUsername()) .orElseThrow(() -> new GlobalException("400-1", "해당 유저가 존재하지 않습니다.")); if (memberService.passwordMatches(member, body.getPassword()) == false) { throw new GlobalException("400-2", "비밀번호가 일치하지 않습니다."); } return new LoginResponseBody(member.getUsername()); } } ``` - Member ```java @Entity @Builder @NoArgsConstructor(access = lombok.AccessLevel.PROTECTED) @AllArgsConstructor(access = lombok.AccessLevel.PROTECTED) @Getter @Setter @EntityListeners(AuditingEntityListener.class) @EqualsAndHashCode(onlyExplicitlyIncluded = true) public class Member { @Id @GeneratedValue(strategy = IDENTITY) @EqualsAndHashCode.Include private Long id; @CreatedDate private LocalDateTime createDate; @LastModifiedDate private LocalDateTime modifyDate; private String username; private String password; public List getAuthoritiesAsStringList() { return List.of("ROLE_MEMBER"); } } ``` - MemberServie ```java @Service @Transactional(readOnly = true) @RequiredArgsConstructor public class MemberService { private final MemberRepository memberRepository; private final PasswordEncoder passwordEncoder; public Optional findByUsername(String username) { return memberRepository.findByUsername(username); } @Transactional public void join(String username, String password) { Member member = Member.builder() .username(username) .password(passwordEncoder.encode(password)) .build(); memberRepository.save(member); } public boolean passwordMatches(Member member, String password) { return passwordEncoder.matches(password, member.getPassword()); } } ``` - MemberRepository ```java public interface MemberRepository extends JpaRepository { Optional findByUsername(String username); } ``` - exceptions/GlobalException ```java public class GlobalException extends RuntimeException { public GlobalException(String resultCode, String msg) { super("resultCode=" + resultCode + ",msg=" + msg); } } ``` - SecurityConfig ```java @Configuration public class SecurityConfig { @Bean SecurityFilterChain filterChain(HttpSecurity http) throws Exception { http .csrf( csrf -> csrf .ignoringRequestMatchers("/h2-console/**") ) .headers( headers -> headers .addHeaderWriter( new XFrameOptionsHeaderWriter( XFrameOptionsHeaderWriter.XFrameOptionsMode.SAMEORIGIN ) ) ); return http.build(); } @Bean PasswordEncoder passwordEncoder() { return new BCryptPasswordEncoder(); } } ` ``` - global/initData/NotProd ```java @Configuration @RequiredArgsConstructor public class NotProd { private final MemberService memberService; @Bean ApplicationRunner initNotProd() { return args -> { memberService.join("admin", "1234"); memberService.join("user1", "1234"); memberService.join("user2", "1234"); }; } } ` ``` ## 2강 - [p 13363, 스벨트킷 + 스프링부트 스타트 팩, 2강, 스프링부트 JWT 관련 의존성 설치, RsData 도입 - 2강 영상x]() - [GIT](https://github.com/sik2/sksb_2401/commit/334c496) - build.gradle ``` // JWT implementation 'io.jsonwebtoken:jjwt-api:0.12.3' runtimeOnly 'io.jsonwebtoken:jjwt-impl:0.12.3', 'io.jsonwebtoken:jjwt-jackson:0.12.3' ``` - application-sceret.yml ```yml custom: jwt: secretKey: abcdefghasdxyz0123456789abcdefghijklmnoasdz0123456789abcdefghijklmasdadsdasdvwxyz015677675456789 # 외부에 노출되면 안되는 정보 ``` - member/controller/MemberService ```java @Getter public static class AuthAndMakeTokensResponseBody { private String accessToken; private String refreshToken; public AuthAndMakeTokensResponseBody(String accessToken, String refreshToken) { this.accessToken = accessToken; this.refreshToken = refreshToken; } } @Transactional public RsData authAndMakeTokens(String username, String password) { Member member = findByUsername(username) .orElseThrow(() -> new GlobalException("400-1", "해당 유저가 존재하지 않습니다.")); if (!passwordMatches(member, password)) throw new GlobalException("400-2", "비밀번호가 일치하지 않습니다."); String refreshToken = "refreshToken"; String accessToken = "accessToken"; return RsData.of( "200-1", "로그인 성공", new AuthAndMakeTokensResponseBody(accessToken, refreshToken) ); } ``` - member/controller/MemberController ```java @RestController @RequestMapping("/api/v1/members") @RequiredArgsConstructor public class ApiV1MembersController { private final MemberService memberService; @AllArgsConstructor @Getter public static class LoginResponseBody { @NotBlank private String refreshToken; @NotBlank private String accessToken; } @Getter @Setter public static class LoginRequestBody { @NotBlank private String username; @NotBlank private String password; } @PostMapping("/login") public RsData login( @Valid @RequestBody LoginRequestBody body ) { RsData authAndMakeTokensRs = memberService.authAndMakeTokens(body.getUsername(), body.getPassword()); return RsData.of( authAndMakeTokensRs.getResultCode(), authAndMakeTokensRs.getMsg(), new LoginResponseBody( authAndMakeTokensRs.getData().getRefreshToken(), authAndMakeTokensRs.getData().getAccessToken() ) ); } } ` ``` - /global/Rsdata ```java @Getter @Builder(access = PRIVATE) @NoArgsConstructor(access = PRIVATE) @AllArgsConstructor(access = PRIVATE) public class RsData { private String resultCode; private int statusCode; private String msg; private T data; public static RsData of(String resultCode, String msg) { return of(resultCode, msg, null); } public static RsData of(String resultCode, String msg, T data) { int statusCode = Integer.parseInt(resultCode.split("-", 2)[0]); return RsData.builder() .resultCode(resultCode) .statusCode(statusCode) .msg(msg) .data(data) .build(); } } ``` ## 3강 - [p 13363, 스벨트킷 + 스프링부트 스타트 팩, 3강, 토큰 생성 기능 추가 - 영상 x]() - [GIT](https://github.com/sik2/sksb_2401/commit/420571b) - /global/app/AppConfig ```java @Configuration public class AppConfig { @Getter public static String jwtSecretKey; @Value("${custom.jwt.secretKey}") public void setJwtSecretKey(String jwtSecretKey) { AppConfig.jwtSecretKey = jwtSecretKey; } } ``` - member/entity/Meber ```java public List getAuthoritiesAsStringList() { return List.of("ROLE_MEMBER"); } ``` - member/service/AuthTokenService ```java @Service @RequiredArgsConstructor public class AuthTokenService { public String genToken(Member member, long expireSeconds) { Claims claims = Jwts .claims() .add("id", member.getId() + "") .add("username", member.getUsername()) .add("authorities", member.getAuthoritiesAsStringList()) .build(); Date now = new Date(); Date validity = new Date(now.getTime() + 1000 * expireSeconds); return Jwts.builder() .setClaims(claims) .setIssuedAt(now) .setExpiration(validity) .signWith(SignatureAlgorithm.HS256, AppConfig.getJwtSecretKey()) .compact(); } public String genRefreshToken(Member member) { return genToken(member, 60 * 60 * 24 * 365 * 1); // 1년 } public String genAccessToken(Member member) { return genToken(member, 60 * 10); // 10분 } } ``` - /service/MemberService ```java String refreshToken = authTokenService.genRefreshToken(member); String accessToken = authTokenService.genAccessToken(member); ``` ## 4강 - [p 13363, 스벨트킷 + 스프링부트 스타트 팩, 4강, 클라이언트의 쿠키저장소에 토큰이 보관 되도록 작업 - 영상x]() - [GIT - 크로스도메인 쿠키 담기](https://github.com/sik2/sksb_2401/commit/c278e46) - [GIT - DTO 추가 후 코드 수정](https://github.com/sik2/sksb_2401/commit/0929844) - /global/rq/Rq ```java @Component @RequestScope @RequiredArgsConstructor public class Rq { private final MemberService memberService; private final HttpServletRequest req; private final HttpServletResponse resp; // 일반 public boolean isAjax() { if ("application/json".equals(req.getHeader("Accept"))) return true; return "XMLHttpRequest".equals(req.getHeader("X-Requested-With")); } // 쿠키 관련 public void setCookie(String name, String value) { Cookie cookie = new Cookie(name, value); cookie.setPath("/"); resp.addCookie(cookie); } public void setCrossDomainCookie(String name, String value) { ResponseCookie cookie = ResponseCookie.from(name, value) .path("/") .sameSite("None") .secure(true) .httpOnly(true) .build(); resp.addHeader("Set-Cookie", cookie.toString()); } public Cookie getCookie(String name) { Cookie[] cookies = req.getCookies(); if (cookies == null) { return null; } for (Cookie cookie : cookies) { if (cookie.getName().equals(name)) { return cookie; } } return null; } public String getCookieValue(String name, String defaultValue) { Cookie cookie = getCookie(name); if (cookie == null) { return defaultValue; } return cookie.getValue(); } private long getCookieAsLong(String name, int defaultValue) { String value = getCookieValue(name, null); if (value == null) { return defaultValue; } return Long.parseLong(value); } public void removeCookie(String name) { Cookie cookie = getCookie(name); if (cookie == null) { return; } cookie.setPath("/"); cookie.setMaxAge(0); resp.addCookie(cookie); ResponseCookie responseCookie = ResponseCookie.from(name, null) .path("/") .maxAge(0) .sameSite("None") .secure(true) .httpOnly(true) .build(); resp.addHeader("Set-Cookie", responseCookie.toString()); } } ``` - /member/dto/memberDto ```java @NoArgsConstructor(access = PROTECTED) @Getter public class MemberDto { private long id; private LocalDateTime createDate; private LocalDateTime modifyDate; private String username; private List authorities; public MemberDto(Member member) { this.id = member.getId(); this.createDate = member.getCreateDate(); this.modifyDate = member.getModifyDate(); this.username = member.getUsername(); this.authorities = member.getAuthoritiesAsStringList(); } } ``` - member/controller/ApiV1MembersController ```java @RestController @RequestMapping("/api/v1/members") @RequiredArgsConstructor public class ApiV1MembersController { private final MemberService memberService; private final Rq rq; @AllArgsConstructor @Getter public static class LoginResponseBody { private MemberDto item; } @Getter @Setter public static class LoginRequestBody { @NotBlank private String username; @NotBlank private String password; } @PostMapping("/login") public RsData login( @Valid @RequestBody LoginRequestBody body ) { RsData authAndMakeTokensRs = memberService.authAndMakeTokens(body.getUsername(), body.getPassword()); rq.setCrossDomainCookie("refreshToken", authAndMakeTokensRs.getData().getRefreshToken()); rq.setCrossDomainCookie("accessToken", authAndMakeTokensRs.getData().getAccessToken()); return RsData.of( authAndMakeTokensRs.getResultCode(), authAndMakeTokensRs.getMsg(), new LoginResponseBody( new MemberDto( authAndMakeTokensRs.getData().getMember() ) ) ); } } ``` - memberService 수정 ```java @Service @Transactional(readOnly = true) @RequiredArgsConstructor public class MemberService { private final MemberRepository memberRepository; private final PasswordEncoder passwordEncoder; private final AuthTokenService authTokenService; public Optional findByUsername(String username) { return memberRepository.findByUsername(username); } @Transactional public void join(String username, String password) { Member member = Member.builder() .username(username) .password(passwordEncoder.encode(password)) .build(); memberRepository.save(member); } public boolean passwordMatches(Member member, String password) { return passwordEncoder.matches(password, member.getPassword()); } @AllArgsConstructor @Getter public static class AuthAndMakeTokensResponseBody { private Member member; private String accessToken; private String refreshToken; } @Transactional public RsData authAndMakeTokens(String username, String password) { Member member = findByUsername(username) .orElseThrow(() -> new GlobalException("400-1", "해당 유저가 존재하지 않습니다.")); if (!passwordMatches(member, password)) throw new GlobalException("400-2", "비밀번호가 일치하지 않습니다."); String refreshToken = authTokenService.genRefreshToken(member); String accessToken = authTokenService.genAccessToken(member); return RsData.of( "200-1", "로그인 성공", new AuthAndMakeTokensResponseBody(member, accessToken, refreshToken) ); } } ``` - member/login/+page.svelte ```html ``` ## 5강 - [p 13363, 스벨트킷 + 스프링부트 스타트 팩, 5강, 토큰 관련 백엔드 처리 - 영상 x]() - [GIT](https://github.com/sik2/sksb_2401/commit/c4b4739) - ApiSecurityConfig ```java @Configuration @EnableMethodSecurity @RequiredArgsConstructor public class ApiSecurityConfig { private final JwtAuthenticationFilter jwtAuthenticationFilter; @Bean SecurityFilterChain apiFilterChain(HttpSecurity http) throws Exception { http .securityMatcher("/api/**") .csrf( csrf -> csrf .disable() ) .sessionManagement( sessionManagement -> sessionManagement .disable() ) .cors(cors -> cors .configure(http) ) .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class); return http.build(); } } ``` - JwtAuthenticationFilter ```java @Component @RequiredArgsConstructor public class JwtAuthenticationFilter extends OncePerRequestFilter { private final Rq rq; private final MemberService memberService; @Override @SneakyThrows protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) { String accessToken = rq.getCookieValue("accessToken", ""); if (!accessToken.isBlank()) { String refreshToken = rq.getCookieValue("refreshToken", ""); SecurityUser securityUser = memberService.getUserFromAccessToken(accessToken); rq.setLogin(securityUser); } filterChain.doFilter(request, response); } } ``` - [GIT](https://github.com/sik2/sksb_2401/commit/a2b2ac7) # 6강 - [me api 만들기](https://github.com/sik2/sksb_2401/commit/8efffc6) # 7강 - [로그아웃](https://github.com/sik2/sksb_2401/commit/2a8dd5c) ``` ``` $$hide ```