feat(step3) : 3단계 - 관리자 기능

Author: jsoonworld

src/main/java/roomescape/auth/AdminInterceptor.java

@@ -0,0 +1,52 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.web.servlet.HandlerInterceptor;
+import roomescape.domain.Member;
+import roomescape.domain.MemberRepository;
+import roomescape.util.JwtUtil;
+
+import java.util.Arrays;
+import java.util.Optional;
+
+public class AdminInterceptor implements HandlerInterceptor {
+
+    private final JwtUtil jwtUtil;
+    private final MemberRepository memberRepository;
+
+    public AdminInterceptor(JwtUtil jwtUtil, MemberRepository memberRepository) {
+        this.jwtUtil = jwtUtil;
+        this.memberRepository = memberRepository;
+    }
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+        Optional<String> token = extractToken(request.getCookies());
+        if (token.isEmpty()) {
+            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+            return false;
+        }
+
+        Long memberId = jwtUtil.getMemberIdFromToken(token.get());
+        Optional<Member> member = memberRepository.findById(memberId);
+
+        if (member.isEmpty() || !"ADMIN".equals(member.get().getRole())) {
+            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+            return false;
+        }
+
+        return true;
+    }
+
+    private Optional<String> extractToken(Cookie[] cookies) {
+        if (cookies == null) {
+            return Optional.empty();
+        }
+        return Arrays.stream(cookies)
+                .filter(cookie -> "token".equals(cookie.getName()))
+                .map(Cookie::getValue)
+                .findFirst();
+    }
+}

src/main/java/roomescape/util/LoginMemberArgumentResolver.java renamed to src/main/java/roomescape/auth/LoginMemberArgumentResolver.java

@@ -1,4 +1,4 @@
-package roomescape.util;
+package roomescape.auth;
 
 import jakarta.servlet.http.Cookie;
 import jakarta.servlet.http.HttpServletRequest;
@@ -10,6 +10,7 @@
 import roomescape.domain.Member;
 import roomescape.domain.MemberRepository;
 import roomescape.dto.LoginMember;
+import roomescape.util.JwtUtil;
 
 import java.util.Arrays;
 import java.util.Optional;

src/main/java/roomescape/config/WebConfig.java

@@ -2,10 +2,12 @@
 
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
-import roomescape.util.LoginMemberArgumentResolver;
 import roomescape.domain.MemberRepository;
+import roomescape.auth.AdminInterceptor;
 import roomescape.util.JwtUtil;
+import roomescape.auth.LoginMemberArgumentResolver;
 
 import java.util.List;
 
@@ -24,4 +26,10 @@ public WebConfig(JwtUtil jwtUtil, MemberRepository memberRepository) {
     public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
         resolvers.add(new LoginMemberArgumentResolver(jwtUtil, memberRepository));
     }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(new AdminInterceptor(jwtUtil, memberRepository))
+                .addPathPatterns("/admin/**");
+    }
 }

src/main/java/roomescape/controller/PageController.java

@@ -20,4 +20,14 @@ public String reservationPage() {
     public String timePage() {
         return "time";
     }
+
+    @GetMapping("/login")
+    public String loginPage() {
+        return "login";
+    }
+
+    @GetMapping("/admin")
+    public String adminPage() {
+        return "admin";
+    }
 }

src/main/resources/schema.sql

@@ -23,3 +23,4 @@ CREATE TABLE member (
 );
 
 INSERT INTO member (email, password, name, role) VALUES ('admin@email.com', 'password', '어드민', 'ADMIN');
+INSERT INTO member (email, password, name, role) VALUES ('brown@email.com', 'password', '브라운', 'USER');