Skip to content

Commit 4145cbc

Browse files
authored
Merge pull request #270 from CodIN-INU/develop
fix : logout 시 AT 쿠키 삭제
2 parents 3f94a13 + 40349ff commit 4145cbc

File tree

1 file changed

+12
-1
lines changed

1 file changed

+12
-1
lines changed

src/main/java/inu/codin/codin/common/security/service/JwtService.java

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -142,8 +142,10 @@ private void createBothToken(HttpServletResponse response) {
142142
log.info("[createBothToken] Access Token, Refresh Token 발급 완료, email = {}, Access: {}", authentication.getName(), newToken.getAccessToken());
143143
}
144144

145+
145146
/**
146-
* 로그아웃 - Refresh Token 삭제
147+
* 로그아웃 -
148+
* Access,Refresh Token 제거/ 서버측 RT 삭제
147149
*/
148150
public void deleteToken(HttpServletResponse response) {
149151
// 어차피 JwtAuthenticationFilter 단에서 토큰을 검증하여 인증을 처리하므로
@@ -163,6 +165,15 @@ private void deleteCookie(HttpServletResponse response) {
163165
refreshCookie.setPath("/");
164166
refreshCookie.setMaxAge(0); // 7일
165167
response.addCookie(refreshCookie);
168+
log.info("[deleteToken] Refresh Cookie 삭제 완료");
169+
170+
Cookie AccessCookie = new Cookie("x-access-token", "");
171+
AccessCookie.setHttpOnly(true);
172+
AccessCookie.setSecure(true);
173+
AccessCookie.setPath("/");
174+
AccessCookie.setMaxAge(0);
175+
response.addCookie(AccessCookie);
176+
log.info("[deleteToken] Access Cookie 삭제 완료");
166177
}
167178

168179
public void setAuthentication(HttpServletRequest request){

0 commit comments

Comments
 (0)