New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add AOP LoginUser & LoginUserEmail #75

Open

eastmeet opened this issue Jan 21, 2023 · 1 comment

Assignees

Labels

BackEnd Security 이동우

Contributor

eastmeet commented Jan 21, 2023

No description provided.

Contributor Author

eastmeet commented Jan 21, 2023

취지

@loginuser 및 @LoginUserEmail을 통해 유저이메일, 오브젝트 정보를 바탕으로 수정, 삭제시 실 작성자가 맞는지 검증 진행하여 데이터를 보호함

과정

리소스를 얻기 위해 로그인한 사용자가 컨트롤러 접근 시 사용한 토큰을 파싱하여 Member 오브젝트와 유저이메일 정보를 조회

eastmeet added BackEnd Security labels

eastmeet self-assigned this

eastmeet added the 이동우 label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment