[Spring MVC(인증)] 정상희 미션 제출합니다.

README.md

@@ -0,0 +1,37 @@
+# 🌀 Spring MVC (인증)
+
+# 1단계
+___
+## 로그인
+#### 로그인 페이지
+   + 이메일, 비밀번호 입력
+#### 로그인 요청
+   + 이메일, 비밀번호 -> 멤버 조회
+   + 조회한 멤버로 토큰 발급
+   + Cookie를 만들어 응답
+#### 인증 정보 조회
+   + Cookie -> 토큰 정보 추출
+   + 멤버를 찾아서 응답
+
+로그인 관련 API
++ GET/login : 로그인 페이지 호출
++ POST/login : 로그인 요청
++ GET/login/check : 인증 정보 조회
+
+# 2단계
+___
+## 로그인 리팩터링
+#### HandlerMethodArgumentResolver
++ 컨트롤러 메서드 파라미터로 자동 주입
+
+## 예약 생성 기능 변경
++ 예약 : ReservationRequest(요청 DTO)
+    -> name이 있으면 name으로 Member 찾기
+    -> name이 없으면 Cookie에 담긴 정보 활용
+
+# 3단계
+___
+## 관리자 기능
++ admin 페이지 진입 (HandlerInterceptor 이용)
+    -> 관리자 : 진입 가능
+    -> 관리자 X : 401 코드 응답

build.gradle

@@ -23,6 +23,11 @@ dependencies {
     implementation 'io.jsonwebtoken:jjwt-impl:0.11.2'
     implementation 'io.jsonwebtoken:jjwt-gson:0.11.2'
 
+    compileOnly 'org.projectlombok:lombok'
+    annotationProcessor 'org.projectlombok:lombok'
+    testCompileOnly 'org.projectlombok:lombok'
+    testAnnotationProcessor 'org.projectlombok:lombok'
+
     testImplementation 'org.springframework.boot:spring-boot-starter-test'
     testImplementation 'io.rest-assured:rest-assured:5.3.1'
 

src/main/java/roomescape/auth/AuthClaims.java

@@ -0,0 +1,7 @@
+package roomescape.auth;
+
+public record AuthClaims(
+        String name,
+        String role
+) {
+}

src/main/java/roomescape/auth/AuthClaimsArgumentResolver.java

@@ -0,0 +1,40 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import lombok.RequiredArgsConstructor;
+import org.springframework.core.MethodParameter;
+import org.springframework.stereotype.Component;
+import org.springframework.web.bind.support.WebDataBinderFactory;
+import org.springframework.web.context.request.NativeWebRequest;
+import org.springframework.web.context.request.ServletWebRequest;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.method.support.ModelAndViewContainer;
+import roomescape.member.MemberService;
+
+import java.util.Arrays;
+
+@Component
+@RequiredArgsConstructor
+public class AuthClaimsArgumentResolver implements HandlerMethodArgumentResolver {
+
+    private final MemberService memberService;
+
+    @Override
+    public boolean supportsParameter(MethodParameter parameter) {
+        return parameter.getParameterType().equals(AuthClaims.class);
+    }
+
+    @Override
+    public Object resolveArgument(MethodParameter parameter, ModelAndViewContainer mavContainer, NativeWebRequest webRequest, WebDataBinderFactory binderFactory) throws Exception {
+        HttpServletRequest request = ((ServletWebRequest) webRequest).getRequest();
+        String token = Arrays.stream(request.getCookies())
+                .filter(cookie -> "token".equals(cookie.getName()))
+                .findFirst()
+                .map(Cookie::getValue)
+                .orElseThrow(() -> new IllegalArgumentException("토큰을 찾을 수 없습니다."));
+
+        return memberService.checkLogin(new AuthToken(token));
+    }
+}
+

src/main/java/roomescape/auth/AuthRoleInterceptor.java

@@ -0,0 +1,34 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+import roomescape.member.MemberService;
+
+import java.util.Arrays;
+
+@Component
+@RequiredArgsConstructor
+public class AuthRoleInterceptor implements HandlerInterceptor {
+    private final MemberService memberService;
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+        String token = Arrays.stream(request.getCookies())
+                .filter(cookie -> "token".equals(cookie.getName()))
+                .findFirst()
+                .map(Cookie::getValue)
+                .orElseThrow(() -> new IllegalArgumentException("토큰을 찾을 수 없습니다."));
+
+        AuthClaims userClaims = memberService.checkLogin(new AuthToken(token));
+        if (!userClaims.role().equals("ADMIN")) {
+            response.setStatus(401);
+            return false;
+        }
+
+        return true;
+    }
+}

src/main/java/roomescape/auth/AuthToken.java

@@ -0,0 +1,6 @@
+package roomescape.auth;
+
+public record AuthToken(
+        String token
+) {
+}

src/main/java/roomescape/auth/AuthWebConfig.java

@@ -0,0 +1,27 @@
+package roomescape.auth;
+
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import java.util.List;
+
+@Configuration
+@RequiredArgsConstructor
+public class AuthWebConfig implements WebMvcConfigurer {
+
+    private final AuthClaimsArgumentResolver loginMemberArgumentResolver;
+    private final AuthRoleInterceptor roleCheckInterceptor;
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
+        resolvers.add(loginMemberArgumentResolver);
+    }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(roleCheckInterceptor).addPathPatterns("/admin/**");
+    }
+}

src/main/java/roomescape/auth/JWTUtils.java

@@ -0,0 +1,36 @@
+package roomescape.auth;
+
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.security.Keys;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+import roomescape.member.Member;
+
+@Component
+public class JWTUtils {
+
+    @Value("${roomescape.auth.jwt.secret}")
+    private String secretKey;
+
+    public AuthToken createToken(Member member) {
+        String accessToken = Jwts.builder()
+                .setSubject(member.getId().toString())
+                .claim("name", member.getName())
+                .claim("role", member.getRole())
+                .signWith(Keys.hmacShaKeyFor(secretKey.getBytes()))
+                .compact();
+
+        return new AuthToken(accessToken);
+    }
+
+    public AuthClaims getClaimsFromToken(String token) {
+        Claims claims = Jwts.parserBuilder()
+                .setSigningKey(Keys.hmacShaKeyFor(secretKey.getBytes()))
+                .build()
+                .parseClaimsJws(token)
+                .getBody();
+
+        return new AuthClaims(claims.get("name", String.class), claims.get("role", String.class));
+    }
+}

src/main/java/roomescape/member/LoginRequest.java

@@ -0,0 +1,7 @@
+package roomescape.member;
+
+public record LoginRequest(
+        String email,
+        String password
+) {
+}

src/main/java/roomescape/member/MemberController.java

@@ -1,28 +1,42 @@
 package roomescape.member;
 
 import jakarta.servlet.http.Cookie;
-import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.CookieValue;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RestController;
+import roomescape.auth.AuthClaims;
+import roomescape.auth.AuthToken;
 
 import java.net.URI;
 
 @RestController
+@RequiredArgsConstructor
 public class MemberController {
-    private MemberService memberService;
-
-    public MemberController(MemberService memberService) {
-        this.memberService = memberService;
-    }
+    private final MemberService memberService;
 
     @PostMapping("/members")
     public ResponseEntity createMember(@RequestBody MemberRequest memberRequest) {
         MemberResponse member = memberService.createMember(memberRequest);
-        return ResponseEntity.created(URI.create("/members/" + member.getId())).body(member);
+        return ResponseEntity.created(URI.create("/members/" + member.id())).body(member);
+    }
+
+    @PostMapping("/login")
+    public void login(@RequestBody LoginRequest loginRequest, HttpServletResponse response) {
+        String token = memberService.getToken(loginRequest).token();
+        Cookie cookie = new Cookie("token", token);
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+        response.addCookie(cookie);
+    }
+
+    @GetMapping("/login/check")
+    public AuthClaims checkLogin(@CookieValue("token") String token) {
+        return memberService.checkLogin(new AuthToken(token));
     }
 
     @PostMapping("/logout")

src/main/java/roomescape/member/MemberRequest.java

@@ -1,19 +1,10 @@
 package roomescape.member;
 
-public class MemberRequest {
-    private String name;
-    private String email;
-    private String password;
 
-    public String getName() {
-        return name;
-    }
-
-    public String getEmail() {
-        return email;
-    }
-
-    public String getPassword() {
-        return password;
-    }
+public record MemberRequest(
+        String name,
+        String email,
+        String password
+) {
 }
+

src/main/java/roomescape/member/MemberResponse.java

@@ -1,25 +1,8 @@
 package roomescape.member;
 
-public class MemberResponse {
-    private Long id;
-    private String name;
-    private String email;
-
-    public MemberResponse(Long id, String name, String email) {
-        this.id = id;
-        this.name = name;
-        this.email = email;
-    }
-
-    public Long getId() {
-        return id;
-    }
-
-    public String getName() {
-        return name;
-    }
-
-    public String getEmail() {
-        return email;
-    }
+public record MemberResponse(
+        Long id,
+        String name,
+        String email
+) {
 }

src/main/java/roomescape/member/MemberService.java

@@ -1,17 +1,39 @@
 package roomescape.member;
 
+import lombok.RequiredArgsConstructor;
+import org.springframework.dao.EmptyResultDataAccessException;
 import org.springframework.stereotype.Service;
+import roomescape.auth.AuthClaims;
+import roomescape.auth.AuthToken;
+import roomescape.auth.JWTUtils;
 
 @Service
+@RequiredArgsConstructor
 public class MemberService {
-    private MemberDao memberDao;
-
-    public MemberService(MemberDao memberDao) {
-        this.memberDao = memberDao;
-    }
+    private final MemberDao memberDao;
+    private final JWTUtils jwtUtils;
 
     public MemberResponse createMember(MemberRequest memberRequest) {
-        Member member = memberDao.save(new Member(memberRequest.getName(), memberRequest.getEmail(), memberRequest.getPassword(), "USER"));
+        Member member = memberDao.save(new Member(memberRequest.name(), memberRequest.email(), memberRequest.password(), "USER"));
         return new MemberResponse(member.getId(), member.getName(), member.getEmail());
     }
+
+    public AuthToken getToken(LoginRequest loginRequest) {
+        try {
+            Member member = memberDao.findByEmailAndPassword(loginRequest.email(), loginRequest.password());
+            return jwtUtils.createToken(member);
+        } catch (EmptyResultDataAccessException e) {
+            throw new IllegalArgumentException("로그인 정보가 잘못되었습니다.");
+        }
+    }
+
+    public AuthClaims checkLogin(AuthToken userToken) {
+        try {
+            AuthClaims userClaims = jwtUtils.getClaimsFromToken(userToken.token());
+            memberDao.findByName(userClaims.name());
+            return userClaims;
+        } catch (EmptyResultDataAccessException exception) {
+            throw new IllegalArgumentException("존재하지 않는 회원입니다.");
+        }
+    }
 }