[Sping MVC(인증)] 김예진 미션 제출합니다.

src/main/java/roomescape/auth/AdminRoleCheckInterceptor.java

@@ -0,0 +1,43 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+import java.util.Arrays;
+
+@Component
+public class AdminRoleCheckInterceptor implements HandlerInterceptor {
+    private final AuthService authService;
+
+    public AdminRoleCheckInterceptor(AuthService authService) {
+        this.authService = authService;
+    }
+
+    @Override
+    public boolean preHandle(final HttpServletRequest request, final HttpServletResponse response, final Object handler) throws Exception {
+        Cookie[] cookies = request.getCookies();
+
+        if (cookies == null) {
+            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+            return false;
+        }
+
+        String token = Arrays.stream(cookies)
+                .filter(cookie -> "token".equals(cookie.getName()))
+                .map(Cookie::getValue)
+                .findFirst()
+                .orElse(null);
+
+        LoginMember member = authService.parseMemberInfo(token);
+
+        if (member == null || !member.getRole().equals("ADMIN")) {
+            response.setStatus(401);
+            return false;
+        }
+        return true;
+    }
+
+}

src/main/java/roomescape/auth/AuthController.java

@@ -0,0 +1,56 @@
+package roomescape.auth;
+
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.ResponseCookie;
+import org.springframework.http.ResponseEntity;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import roomescape.member.MemberResponse;
+import roomescape.token.TokenResponse;
+
+@Controller
+public class AuthController {
+
+    private final AuthService authService;
+
+    public AuthController(AuthService authService) {
+        this.authService = authService;
+    }
+
+    @PostMapping("/logout")
+    public ResponseEntity logout(HttpServletResponse response) {
+        Cookie cookie = new Cookie("token", "");
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+        cookie.setMaxAge(0);
+        response.addCookie(cookie);
+        return ResponseEntity.ok().build();
+    }
+
+    @GetMapping("/login/check")
+    public ResponseEntity<MemberResponse> loginCheck(LoginMember loginMember) {
+        if (loginMember == null) {
+            return ResponseEntity.status(401).build();
+        }
+        MemberResponse response = new MemberResponse(loginMember.getId(), loginMember.getName(), loginMember.getEmail());
+        return ResponseEntity.ok().body(response);
+    }
+
+    @PostMapping("/login")
+    public ResponseEntity<Void> login(@RequestBody LoginRequest loginRequest) {
+        TokenResponse token = authService.createToken(loginRequest.email(), loginRequest.password());
+        ResponseCookie cookie = ResponseCookie.from("token", token.getAccessToken())
+                .httpOnly(true)
+                .path("/")
+                .build();
+
+        return ResponseEntity.ok()
+                .header(HttpHeaders.SET_COOKIE, cookie.toString())
+                .build();
+    }
+}

src/main/java/roomescape/auth/AuthService.java

@@ -0,0 +1,37 @@
+package roomescape.auth;
+
+import org.springframework.stereotype.Service;
+import roomescape.member.Member;
+import roomescape.member.MemberDao;
+import roomescape.token.TokenParser;
+import roomescape.token.TokenProvider;
+import roomescape.token.TokenResponse;
+
+@Service
+public class AuthService {
+    private final MemberDao memberDao;
+    private final TokenProvider tokenProvider;
+    private final TokenParser tokenParser;
+
+    public AuthService(MemberDao memberDao, TokenProvider tokenProvider, TokenParser tokenParser) {
+        this.memberDao = memberDao;
+        this.tokenProvider = tokenProvider;
+        this.tokenParser = tokenParser;
+    }
+
+    public TokenResponse createToken(String email, String password) {
+        Member member = memberDao.findByEmailAndPassword(email, password);
+        if (member == null) {
+            throw new IllegalArgumentException("등록 되지 않은 사용자입니다.");
+        }
+        String token = tokenProvider.createAccessToken(member);
+        return new TokenResponse(token);
+    }
+
+    public LoginMember parseMemberInfo(String token) {
+        if (token == null || token.isBlank()) {
+            throw new IllegalArgumentException("로그인 하지 않은 사용자입니다.");
+        }
+        return tokenParser.parseMemberInfo(token);
+    }
+}

src/main/java/roomescape/auth/LoginMember.java

@@ -0,0 +1,32 @@
+package roomescape.auth;
+
+public class LoginMember {
+
+    private Long id;
+    private String name;
+    private String email;
+    private String role;
+
+    public LoginMember(final Long id, final String name, final String email, final String role) {
+        this.id = id;
+        this.name = name;
+        this.email = email;
+        this.role = role;
+    }
+
+    public Long getId() {
+        return id;
+    }
+
+    public String getName() {
+        return name;
+    }
+
+    public String getEmail() {
+        return email;
+    }
+
+    public String getRole() {
+        return role;
+    }
+}

src/main/java/roomescape/auth/LoginMemberArgumentResolver.java

@@ -0,0 +1,27 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.HttpServletRequest;
+import org.springframework.core.MethodParameter;
+import org.springframework.stereotype.Component;
+import org.springframework.web.bind.support.WebDataBinderFactory;
+import org.springframework.web.context.request.NativeWebRequest;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.method.support.ModelAndViewContainer;
+
+@Component
+public class LoginMemberArgumentResolver implements HandlerMethodArgumentResolver {
+
+    @Override
+    public boolean supportsParameter(final MethodParameter parameter) {
+        return parameter.getParameterType().equals(LoginMember.class);
+    }
+
+    @Override
+    public Object resolveArgument(final MethodParameter parameter, final ModelAndViewContainer mavContainer, final NativeWebRequest webRequest, final WebDataBinderFactory binderFactory) throws Exception {
+        HttpServletRequest request = (HttpServletRequest) webRequest.getNativeRequest();
+        LoginMember loginMember = (LoginMember) request.getAttribute("loginMember");
+        return loginMember;
+    }
+
+
+}

src/main/java/roomescape/auth/LoginRequest.java

@@ -0,0 +1,4 @@
+package roomescape.auth;
+
+public record LoginRequest(String email, String password) {
+}

src/main/java/roomescape/auth/TokenInterceptor.java

@@ -0,0 +1,39 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+import java.util.Arrays;
+
+@Component
+public class TokenInterceptor implements HandlerInterceptor {
+
+    private final AuthService authService;
+
+    public TokenInterceptor(AuthService authService) {
+        this.authService = authService;
+    }
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+        Cookie[] cookies = request.getCookies();
+
+        if (cookies == null) {
+            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+            return false;
+        }
+
+        String token = Arrays.stream(cookies)
+                .filter(cookie -> "token".equals(cookie.getName()))
+                .map(Cookie::getValue)
+                .findFirst()
+                .orElse(null);
+
+        LoginMember loginMember = authService.parseMemberInfo(token);
+        request.setAttribute("loginMember", loginMember);
+        return HandlerInterceptor.super.preHandle(request, response, handler);
+    }
+}

src/main/java/roomescape/config/WebConfig.java

@@ -0,0 +1,49 @@
+package roomescape.config;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+import roomescape.auth.AdminRoleCheckInterceptor;
+import roomescape.auth.LoginMemberArgumentResolver;
+import roomescape.auth.TokenInterceptor;
+
+import java.util.List;
+
+@Configuration
+public class WebConfig implements WebMvcConfigurer {
+
+    private final LoginMemberArgumentResolver loginMemberArgumentResolver;
+    private final AdminRoleCheckInterceptor adminRoleCheckInterceptor;
+    private final TokenInterceptor tokenInterceptor;
+
+    public WebConfig(LoginMemberArgumentResolver loginMemberArgumentResolver, AdminRoleCheckInterceptor adminRoleCheckInterceptor, TokenInterceptor tokenInterceptor) {
+        this.loginMemberArgumentResolver = loginMemberArgumentResolver;
+        this.adminRoleCheckInterceptor = adminRoleCheckInterceptor;
+        this.tokenInterceptor = tokenInterceptor;
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
+        resolvers.add(loginMemberArgumentResolver);
+    }
+
+    @Override
+    public void addInterceptors(final InterceptorRegistry registry) {
+        registry.addInterceptor(adminRoleCheckInterceptor)
+                .addPathPatterns("/admin/**");
+
+        registry.addInterceptor(tokenInterceptor)
+                .addPathPatterns("/**")
+                .excludePathPatterns(
+                        "/",
+                        "/signup",
+                        "/signup/**",
+                        "/login",
+                        "/logout",
+                        "/error"
+                );
+
+
+    }
+}

src/main/java/roomescape/member/Member.java

@@ -5,16 +5,16 @@ public class Member {
     private String name;
     private String email;
     private String password;
-    private String role;
+    private Role role;
 
-    public Member(Long id, String name, String email, String role) {
+    public Member(Long id, String name, String email, Role role) {
         this.id = id;
         this.name = name;
         this.email = email;
         this.role = role;
     }
 
-    public Member(String name, String email, String password, String role) {
+    public Member(String name, String email, String password, Role role) {
         this.name = name;
         this.email = email;
         this.password = password;
@@ -37,7 +37,7 @@ public String getPassword() {
         return password;
     }
 
-    public String getRole() {
+    public Role getRole() {
         return role;
     }
 }

src/main/java/roomescape/member/MemberController.java

@@ -1,10 +1,6 @@
 package roomescape.member;
 
-import jakarta.servlet.http.Cookie;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.servlet.http.HttpServletResponse;
 import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RestController;
@@ -22,16 +18,7 @@ public MemberController(MemberService memberService) {
     @PostMapping("/members")
     public ResponseEntity createMember(@RequestBody MemberRequest memberRequest) {
         MemberResponse member = memberService.createMember(memberRequest);
-        return ResponseEntity.created(URI.create("/members/" + member.getId())).body(member);
+        return ResponseEntity.created(URI.create("/members/" + member.id())).body(member);
     }
 
-    @PostMapping("/logout")
-    public ResponseEntity logout(HttpServletResponse response) {
-        Cookie cookie = new Cookie("token", "");
-        cookie.setHttpOnly(true);
-        cookie.setPath("/");
-        cookie.setMaxAge(0);
-        response.addCookie(cookie);
-        return ResponseEntity.ok().build();
-    }
 }

src/main/java/roomescape/member/MemberDao.java

@@ -20,11 +20,11 @@ public Member save(Member member) {
             ps.setString(1, member.getName());
             ps.setString(2, member.getEmail());
             ps.setString(3, member.getPassword());
-            ps.setString(4, member.getRole());
+            ps.setString(4, member.getRole().name());
             return ps;
         }, keyHolder);
 
-        return new Member(keyHolder.getKey().longValue(), member.getName(), member.getEmail(), "USER");
+        return new Member(keyHolder.getKey().longValue(), member.getName(), member.getEmail(), member.getRole());
     }
 
     public Member findByEmailAndPassword(String email, String password) {
@@ -34,7 +34,7 @@ public Member findByEmailAndPassword(String email, String password) {
                         rs.getLong("id"),
                         rs.getString("name"),
                         rs.getString("email"),
-                        rs.getString("role")
+                        Role.valueOf(rs.getString("role"))
                 ),
                 email, password
         );
@@ -47,7 +47,7 @@ public Member findByName(String name) {
                         rs.getLong("id"),
                         rs.getString("name"),
                         rs.getString("email"),
-                        rs.getString("role")
+                        Role.valueOf(rs.getString("role"))
                 ),
                 name
         );