[그리디] 강동현 Spring JPA (1차) 4, 5, 6 단계 미션 제출합니다.

.gitignore

@@ -35,3 +35,6 @@ out/
 
 ### VS Code ###
 .vscode/
+
+
+application-local.properties

build.gradle

@@ -13,9 +13,12 @@ repositories {
 }
 
 dependencies {
+
+
     implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
-    implementation 'org.springframework.boot:spring-boot-starter-jdbc'
+    implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+    implementation 'org.springframework.boot:spring-boot-starter-validation'
 
     implementation 'dev.akkinoc.spring.boot:logback-access-spring-boot-starter:4.0.0'
 

src/main/java/roomescape/WebConfig.java

@@ -0,0 +1,30 @@
+package roomescape;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+import roomescape.auth.AdminAuthInterceptor;
+import roomescape.auth.LoginMemberArgumentResolver;
+
+import java.util.List;
+
+@Configuration
+public class WebConfig implements WebMvcConfigurer {
+    @Value("${roomescape.auth.jwt.secret}")
+    private String secretKey;
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
+        resolvers.add(new LoginMemberArgumentResolver(secretKey));
+    }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(new AdminAuthInterceptor(secretKey))
+                .addPathPatterns("/admin", "/admin/**");
+    }
+}
+
+

src/main/java/roomescape/auth/AdminAuthInterceptor.java

@@ -0,0 +1,41 @@
+package roomescape.auth;
+
+import io.jsonwebtoken.Claims;
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.web.servlet.HandlerInterceptor;
+import roomescape.util.JwtUtil;
+
+public class AdminAuthInterceptor implements HandlerInterceptor {
+
+    private final String secretKey;
+
+    public AdminAuthInterceptor(String secretKey) {
+        this.secretKey = secretKey;
+    }
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
+        String token = JwtUtil.extractTokenFromCookies(request.getCookies());
+        if (token.isEmpty()) {
+            response.setStatus(401);
+            return false;
+        }
+
+        try {
+            Claims claims = JwtUtil.parseClaims(token, secretKey);
+            String role = claims.get("role", String.class);
+            if (!"ADMIN".equals(role)) {
+                response.setStatus(401);
+                return false;
+            }
+            return true;
+        } catch (Exception e) {
+            response.setStatus(401);
+            return false;
+        }
+    }
+}
+
+

src/main/java/roomescape/auth/LoginMemberArgumentResolver.java

@@ -0,0 +1,44 @@
+package roomescape.auth;
+
+import io.jsonwebtoken.Claims;
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import org.springframework.core.MethodParameter;
+import org.springframework.web.bind.support.WebDataBinderFactory;
+import org.springframework.web.context.request.NativeWebRequest;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.method.support.ModelAndViewContainer;
+import roomescape.member.LoginMember;
+import roomescape.util.JwtUtil;
+
+public class LoginMemberArgumentResolver implements HandlerMethodArgumentResolver {
+
+    private final String secretKey;
+
+    public LoginMemberArgumentResolver(String secretKey) {
+        this.secretKey = secretKey;
+    }
+
+    @Override
+    public boolean supportsParameter(MethodParameter parameter) {
+        return parameter.getParameterType().equals(LoginMember.class);
+    }
+
+    @Override
+    public Object resolveArgument(MethodParameter parameter, ModelAndViewContainer mavContainer, NativeWebRequest webRequest, WebDataBinderFactory binderFactory) {
+        HttpServletRequest request = (HttpServletRequest) webRequest.getNativeRequest();
+        String token = JwtUtil.extractTokenFromCookies(request.getCookies());
+
+        if (token.isEmpty()) {
+            return null;
+        }
+
+        Claims claims = JwtUtil.parseClaims(token, secretKey);
+
+        Long id = Long.valueOf(claims.getSubject());
+        String name = claims.get("name", String.class);
+        String role = claims.get("role", String.class);
+
+        return new LoginMember(id, name, null, role);
+    }
+}

src/main/java/roomescape/member/LoginMember.java

@@ -0,0 +1,33 @@
+package roomescape.member;
+
+public class LoginMember {
+    private Long id;
+    private String name;
+    private String email;
+    private String role;
+
+    public LoginMember(Long id, String name, String email, String role) {
+        this.id = id;
+        this.name = name;
+        this.email = email;
+        this.role = role;
+    }
+
+    public Long getId() {
+        return id;
+    }
+
+    public String getName() {
+        return name;
+    }
+
+    public String getEmail() {
+        return email;
+    }
+
+    public String getRole() {
+        return role;
+    }
+}
+
+

src/main/java/roomescape/member/Member.java

@@ -1,12 +1,21 @@
 package roomescape.member;
 
+import jakarta.persistence.*;
+
+@Entity
 public class Member {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
     private Long id;
     private String name;
+    @Column(unique = true)
     private String email;
     private String password;
     private String role;
 
+    public Member() {
+    }
+
     public Member(Long id, String name, String email, String role) {
         this.id = id;
         this.name = name;

src/main/java/roomescape/member/MemberController.java

@@ -1,8 +1,11 @@
 package roomescape.member;
 
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.security.Keys;
 import jakarta.servlet.http.Cookie;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -14,6 +17,8 @@
 @RestController
 public class MemberController {
     private MemberService memberService;
+    @Value("${roomescape.auth.jwt.secret}")
+    private String secretKey;
 
     public MemberController(MemberService memberService) {
         this.memberService = memberService;
@@ -25,6 +30,63 @@ public ResponseEntity createMember(@RequestBody MemberRequest memberRequest) {
         return ResponseEntity.created(URI.create("/members/" + member.getId())).body(member);
     }
 
+    @PostMapping("/login")
+    public ResponseEntity login(@RequestBody MemberRequest memberRequest, HttpServletResponse response) {
+        Member member = memberService.login(memberRequest.getEmail(), memberRequest.getPassword());
+
+        String accessToken = createToken(member);
+
+        Cookie cookie = new Cookie("token", accessToken);
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+        response.addCookie(cookie);
+
+        return ResponseEntity.ok().build();
+    }
+
+    @GetMapping("/login/check")
+    public ResponseEntity<MemberResponse> checkLogin(HttpServletRequest request) {
+        String token = extractTokenFromCookie(request.getCookies());
+
+        String name = Jwts.parserBuilder()
+                .setSigningKey(Keys.hmacShaKeyFor(secretKey.getBytes()))
+                .build()
+                .parseClaimsJws(token)
+                .getBody()
+                .get("name", String.class);
+
+        MemberResponse body = new MemberResponse(null, name, null);
+        return ResponseEntity.ok(body);
+    }
+
+    public String createToken(Member member) {
+        return Jwts.builder()
+                .setSubject(member.getId().toString())
+                .claim("name", member.getName())
+                .claim("role", member.getRole())
+                .signWith(Keys.hmacShaKeyFor(secretKey.getBytes()))
+                .compact();
+    }
+
+
+    public String createTokenFromEmailAndPassword(String email, String password) {
+        Member member = memberService.login(email, password);
+        return createToken(member);
+    }
+
+
+    private String extractTokenFromCookie(Cookie[] cookies) {
+        if (cookies == null || cookies.length == 0) {
+            return "";
+        }
+        for (Cookie cookie : cookies) {
+            if ("token".equals(cookie.getName())) {
+                return cookie.getValue();
+            }
+        }
+        return "";
+    }
+
     @PostMapping("/logout")
     public ResponseEntity logout(HttpServletResponse response) {
         Cookie cookie = new Cookie("token", "");

src/main/java/roomescape/member/MemberRepository.java

@@ -0,0 +1,12 @@
+package roomescape.member;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.Optional;
+
+public interface MemberRepository extends JpaRepository<Member, Long> {
+    Optional<Member> findByEmailAndPassword(String email, String password);
+    Optional<Member> findByName(String name);
+}
+
+

src/main/java/roomescape/member/MemberService.java

@@ -4,14 +4,18 @@
 
 @Service
 public class MemberService {
-    private MemberDao memberDao;
+    private MemberRepository memberRepository;
 
-    public MemberService(MemberDao memberDao) {
-        this.memberDao = memberDao;
+    public MemberService(MemberRepository memberRepository) {
+        this.memberRepository = memberRepository;
     }
 
     public MemberResponse createMember(MemberRequest memberRequest) {
-        Member member = memberDao.save(new Member(memberRequest.getName(), memberRequest.getEmail(), memberRequest.getPassword(), "USER"));
+        Member member = memberRepository.save(new Member(memberRequest.getName(), memberRequest.getEmail(), memberRequest.getPassword(), "USER"));
         return new MemberResponse(member.getId(), member.getName(), member.getEmail());
     }
+
+    public Member login(String email, String password) {
+        return memberRepository.findByEmailAndPassword(email, password).orElseThrow();
+    }
 }