[Spring Data JPA] 신혜빈 미션 제출합니다.

.run/MissionStepTest.삼단계.run.xml

@@ -0,0 +1,31 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="MissionStepTest.삼단계" type="GradleRunConfiguration" factoryName="Gradle">
+    <ExternalSystemSettings>
+      <option name="env">
+        <map>
+          <entry key="JWT_SECRET_KEY" value="bOjgcSvj4CvncQT6+XFS7IJSdTCvsSdIjLaVBAyKG6g=" />
+        </map>
+      </option>
+      <option name="executionName" />
+      <option name="externalProjectPath" value="$PROJECT_DIR$" />
+      <option name="externalSystemIdString" value="GRADLE" />
+      <option name="scriptParameters" value="" />
+      <option name="taskDescriptions">
+        <list />
+      </option>
+      <option name="taskNames">
+        <list>
+          <option value=":test" />
+          <option value="--tests" />
+          <option value="&quot;roomescape.MissionStepTest.삼단계&quot;" />
+        </list>
+      </option>
+      <option name="vmOptions" />
+    </ExternalSystemSettings>
+    <ExternalSystemDebugServerProcess>false</ExternalSystemDebugServerProcess>
+    <ExternalSystemReattachDebugProcess>true</ExternalSystemReattachDebugProcess>
+    <DebugAllEnabled>false</DebugAllEnabled>
+    <RunAsTest>true</RunAsTest>
+    <method v="2" />
+  </configuration>
+</component>

build.gradle

@@ -15,7 +15,7 @@ repositories {
 dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
-    implementation 'org.springframework.boot:spring-boot-starter-jdbc'
+    implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
 
     implementation 'dev.akkinoc.spring.boot:logback-access-spring-boot-starter:4.0.0'
 
@@ -26,6 +26,7 @@ dependencies {
     testImplementation 'org.springframework.boot:spring-boot-starter-test'
     testImplementation 'io.rest-assured:rest-assured:5.3.1'
 
+    implementation 'com.h2database:h2'
     runtimeOnly 'com.h2database:h2'
 }
 

src/main/java/roomescape/ExceptionController.java

@@ -1,14 +1,33 @@
 package roomescape;
 
+import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.ControllerAdvice;
 import org.springframework.web.bind.annotation.ExceptionHandler;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.util.HashMap;
+import java.util.Map;
 
 @ControllerAdvice
 public class ExceptionController {
+
+    @ExceptionHandler(ResponseStatusException.class)
+    public ResponseEntity<Void> handleResponseStatusException(ResponseStatusException e) {
+        return ResponseEntity.status(e.getStatusCode()).build();
+    }
+
+    @ExceptionHandler(IllegalArgumentException.class)
+    public ResponseEntity<Map<String, Object>> handleIllegalArgumentException(IllegalArgumentException e) {
+        Map<String, Object> errorResponse = new HashMap<>();
+        errorResponse.put("message", e.getMessage());
+        return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body(errorResponse);
+    }
+
     @ExceptionHandler(Exception.class)
     public ResponseEntity<Void> handleRuntimeException(Exception e) {
         e.printStackTrace();
         return ResponseEntity.badRequest().build();
     }
 }
+

src/main/java/roomescape/auth/AdminInterceptor.java

@@ -0,0 +1,49 @@
+package roomescape.auth;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.http.HttpStatus;
+import org.springframework.stereotype.Component;
+import org.springframework.web.server.ResponseStatusException;
+import org.springframework.web.servlet.HandlerInterceptor;
+import roomescape.jwt.JwtService;
+import roomescape.member.Member;
+
+import java.util.Arrays;
+
+@Component
+public class AdminInterceptor implements HandlerInterceptor {
+    private final JwtService jwtService;
+
+    public AdminInterceptor(JwtService jwtService) {
+        this.jwtService = jwtService;
+    }
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
+        String token = extractTokenFromCookies(request.getCookies());
+        if (token == null) {
+            throw new ResponseStatusException(HttpStatus.UNAUTHORIZED, "토큰을 찾을 수 없습니다.");
+        }
+
+        Member member = jwtService.getMemberFromToken(token);
+        if (!"ADMIN".equals(member.getRole())) {
+            throw new ResponseStatusException(HttpStatus.UNAUTHORIZED, "사용자를 찾을 수 없습니다.");
+        }
+
+        return true;
+    }
+
+    private String extractTokenFromCookies(Cookie[] cookies) {
+        if (cookies == null) {
+            return null;
+        }
+
+        return Arrays.stream(cookies)
+                .filter(cookie -> "token".equals(cookie.getName()))
+                .map(Cookie::getValue)
+                .findFirst()
+                .orElse(null);
+    }
+}

src/main/java/roomescape/auth/Authentication.java

@@ -0,0 +1,9 @@
+package roomescape.auth;
+
+import java.lang.annotation.*;
+
+@Target(ElementType.PARAMETER)
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+public @interface Authentication {
+}

src/main/java/roomescape/auth/AuthenticationArgumentResolver.java

@@ -0,0 +1,37 @@
+package roomescape.auth;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.core.MethodParameter;
+import org.springframework.stereotype.Component;
+import org.springframework.web.bind.support.WebDataBinderFactory;
+import org.springframework.web.context.request.NativeWebRequest;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.method.support.ModelAndViewContainer;
+import roomescape.jwt.JwtService;
+import roomescape.member.Member;
+import roomescape.util.CookieUtil;
+
+@Component
+public class AuthenticationArgumentResolver implements HandlerMethodArgumentResolver {
+
+    @Autowired
+    private JwtService jwtService;
+
+    @Override
+    public boolean supportsParameter(MethodParameter parameter) {
+        return parameter.hasParameterAnnotation(Authentication.class)
+                && parameter.getParameterType().equals(Member.class);
+    }
+
+    @Override
+    public Object resolveArgument(MethodParameter parameter,
+                                  ModelAndViewContainer mavContainer,
+                                  NativeWebRequest webRequest,
+                                  WebDataBinderFactory binderFactory) {
+
+        String token = CookieUtil.extractTokenFromHeader(webRequest)
+                .orElseThrow(() -> new IllegalArgumentException("토큰이 존재하지 않습니다. 로그인이 필요합니다."));
+
+        return jwtService.getMemberFromToken(token);
+    }
+}

src/main/java/roomescape/auth/WebConfig.java

@@ -0,0 +1,32 @@
+package roomescape.auth;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import java.util.List;
+
+@Configuration
+public class WebConfig implements WebMvcConfigurer {
+
+    private final AdminInterceptor adminInterceptor;
+    private final AuthenticationArgumentResolver authenticationArgumentResolver;
+
+    public WebConfig(AdminInterceptor adminInterceptor, AuthenticationArgumentResolver authenticationArgumentResolver) {
+        this.adminInterceptor = adminInterceptor;
+        this.authenticationArgumentResolver = authenticationArgumentResolver;
+    }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(adminInterceptor)
+                .addPathPatterns("/admin");
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
+        resolvers.add(authenticationArgumentResolver);
+    }
+}
+

src/main/java/roomescape/jwt/JwtService.java

@@ -0,0 +1,35 @@
+package roomescape.jwt;
+
+import io.jsonwebtoken.Claims;
+import org.springframework.stereotype.Service;
+import roomescape.member.Member;
+import roomescape.member.MemberRepository;
+
+@Service
+public class JwtService {
+    private final JwtUtil jwtUtil;
+    private final MemberRepository memberRepository;
+
+    public JwtService(JwtUtil jwtUtil, MemberRepository memberRepository) {
+        this.jwtUtil = jwtUtil;
+        this.memberRepository = memberRepository;
+    }
+
+    public Long getUserIdFromToken(String token) {
+        Claims claims = jwtUtil.getClaimsFromToken(token);
+        try {
+            return Long.valueOf(claims.getSubject());
+        } catch (Exception e) {
+            throw new IllegalArgumentException("Claims에서 User ID를 추출할 수 없습니다.", e);
+        }
+    }
+
+    public Member getMemberFromToken(String token) {
+        Long userId = getUserIdFromToken(token);
+        Member member = memberRepository.findById(userId).get();
+        if (member == null) {
+            throw new IllegalArgumentException("토큰으로부터 유저를 찾을 수 없습니다.");
+        }
+        return member;
+    }
+}

src/main/java/roomescape/jwt/JwtUtil.java

@@ -0,0 +1,46 @@
+package roomescape.jwt;
+
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.SignatureAlgorithm;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+
+import javax.crypto.spec.SecretKeySpec;
+import java.security.Key;
+import java.util.Date;
+
+@Component
+public class JwtUtil {
+    private static final long EXPIRATION_TIME = 86400000;
+    @Value("${jwt.secret}")
+    private String secretKey;
+
+    private Key generateKey() {
+        return new SecretKeySpec(secretKey.getBytes(), SignatureAlgorithm.HS256.getJcaName());
+    }
+
+    public String generateToken(Long userId, String role) {
+        Key key = generateKey();
+        return Jwts.builder()
+                .setSubject(String.valueOf(userId))
+                .claim("role", role)
+                .setIssuedAt(new Date())
+                .setExpiration(new Date(System.currentTimeMillis() + EXPIRATION_TIME))
+                .signWith(key, SignatureAlgorithm.HS256)
+                .compact();
+    }
+
+    public Claims getClaimsFromToken(String token) {
+        try {
+            Key key = generateKey();
+            return Jwts.parserBuilder()
+                    .setSigningKey(key)
+                    .build()
+                    .parseClaimsJws(token)
+                    .getBody();
+        } catch (Exception e) {
+            throw new IllegalArgumentException("유효하지 않은 토큰입니다.", e);
+        }
+    }
+}

src/main/java/roomescape/login/LoginController.java

@@ -0,0 +1,41 @@
+package roomescape.login;
+
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+import roomescape.jwt.JwtService;
+import roomescape.member.Member;
+
+import java.util.HashMap;
+import java.util.Map;
+
+@RestController
+@RequestMapping("/login")
+public class LoginController {
+    private LoginService loginService;
+    private JwtService jwtService;
+
+    public LoginController(LoginService loginService, JwtService jwtService) {
+        this.loginService = loginService;
+        this.jwtService = jwtService;
+    }
+
+    @PostMapping
+    public ResponseEntity<Map<String, Object>> login(@RequestBody LoginRequestDto loginRequestDto, HttpServletResponse response) {
+        String token = loginService.authenticate(loginRequestDto.getEmail(), loginRequestDto.getPassword());
+        Cookie cookie = loginService.createAuthCookie(token);
+        response.addCookie(cookie);
+        Map<String, Object> responseBody = loginService.createLoginResponse(token);
+        return ResponseEntity.ok(responseBody);
+    }
+
+    @GetMapping("/check")
+    public ResponseEntity<Map<String, String>> checkLogin(@CookieValue(name = "token", required = true) String token) {
+        Member member = jwtService.getMemberFromToken(token);
+
+        Map<String, String> response = new HashMap<>();
+        response.put("name", member.getName());
+        return ResponseEntity.ok(response);
+    }
+}

src/main/java/roomescape/login/LoginRequestDto.java

@@ -0,0 +1,19 @@
+package roomescape.login;
+
+public class LoginRequestDto {
+    private String email;
+    private String password;
+
+    public LoginRequestDto(String email, String password) {
+        this.email = email;
+        this.password = password;
+    }
+
+    public String getEmail() {
+        return email;
+    }
+
+    public String getPassword() {
+        return password;
+    }
+}