[feat] Jwt, Security 설정 및 사용자 정의 예외처리 구현 (#13)

[feat] Jwt, Security  설정 및 사용자 정의 예외처리 구현

Author: Vloeiolzlr

.github/workflows/gradle.yml

@@ -45,6 +45,7 @@ jobs:
             echo "DB_URL=${{ secrets.DB_URL }}" > /home/ubuntu/.env
             echo "DB_USERNAME=${{ secrets.DB_USERNAME }}" >> /home/ubuntu/.env
             echo "DB_PASSWORD=${{ secrets.DB_PASSWORD }}" >> /home/ubuntu/.env
+            echo "JWT_SECRET=${{ secrets.JWT_SECRET }}" >> /home/ubuntu/.env
             
             docker login -u ${{ secrets.DOCKERHUB_USERNAME }} -p ${{ secrets.DOCKERHUB_TOKEN }}
             docker pull kjunh972/dasom_memoreal:latest

.github/workflows/inspect-test.yml

@@ -27,4 +27,5 @@ jobs:
           DB_URL: ${{ secrets.DB_URL }}
           DB_USERNAME: ${{ secrets.DB_USERNAME }}
           DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
+          JWT_SECRET: ${{ secrets.JWT_SECRET }}
         run: ./gradlew -Dspring.profiles.active=dev test

.gitignore

@@ -37,4 +37,7 @@ out/
 .vscode/
 
 ### env ###
-.env
+.env
+
+### macOS ###
+.DS_Store

build.gradle

@@ -24,6 +24,16 @@ repositories {
 }
 
 dependencies {
+	// Security
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+	testImplementation 'org.springframework.security:spring-security-test'
+
+	//JWT
+	implementation 'io.jsonwebtoken:jjwt-api:0.12.5'
+	runtimeOnly 'io.jsonwebtoken:jjwt-impl:0.12.5'
+	runtimeOnly 'io.jsonwebtoken:jjwt-jackson:0.12.5'
+
+
 	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
 	implementation 'org.springframework.boot:spring-boot-starter-security'
 	implementation 'org.springframework.boot:spring-boot-starter-web'

src/main/java/com/dasom/MemoReal/domain/user/controller/UserController.java

@@ -0,0 +1,40 @@
+package com.dasom.MemoReal.domain.user.controller;
+
+import com.dasom.MemoReal.domain.user.dto.JoinDTO;
+import com.dasom.MemoReal.domain.user.dto.LoginDTO;
+import com.dasom.MemoReal.domain.user.dto.UserDTO;
+import com.dasom.MemoReal.domain.user.service.UserService;
+import com.dasom.MemoReal.global.jwt.dto.JwtTokenDTO;
+import com.dasom.MemoReal.global.security.util.SecurityUtil;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequiredArgsConstructor
+public class UserController {
+    private final UserService userService;
+
+    @PostMapping("/login")
+    public JwtTokenDTO login(@RequestBody LoginDTO loginDto) {
+        String email = loginDto.getEmail();
+        String password = loginDto.getPassword();
+        JwtTokenDTO jwtToken = userService.login(email, password);
+        return jwtToken;
+    }
+
+    @PostMapping("/join")
+    public ResponseEntity<UserDTO> join(@RequestBody JoinDTO joinDto) {
+        UserDTO savedUserDto = userService.join(joinDto);
+        return ResponseEntity.ok(savedUserDto);
+    }
+
+
+    // 임시 테스트 토큰이 있는 사용자가 요청 시, 사용자의 닉네임 반환
+    @PostMapping("/test")
+    public String test() {
+        return SecurityUtil.getCurrentUsername();
+    }
+}

src/main/java/com/dasom/MemoReal/domain/user/dto/JoinDTO.java

@@ -0,0 +1,31 @@
+package com.dasom.MemoReal.domain.user.dto;
+
+
+import com.dasom.MemoReal.domain.user.entity.User;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@Getter
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class JoinDTO {
+    private String email;
+    private String password;
+    private String username;
+    private List<String> roles = new ArrayList<>();
+
+    public User toEntity(String encodedPassword, List<String> roles) {
+        return User.builder()
+                .username(username)
+                .password(encodedPassword)
+                .email(email)
+                .roles(roles)
+                .build();
+    }
+}

src/main/java/com/dasom/MemoReal/domain/user/dto/LoginDTO.java

@@ -0,0 +1,15 @@
+package com.dasom.MemoReal.domain.user.dto;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+import lombok.ToString;
+
+@Getter
+@Setter
+@ToString
+@NoArgsConstructor
+public class LoginDTO {
+    private String email;
+    private String password;
+}

src/main/java/com/dasom/MemoReal/domain/user/dto/UserDTO.java

@@ -0,0 +1,33 @@
+package com.dasom.MemoReal.domain.user.dto;
+
+
+import com.dasom.MemoReal.domain.user.entity.User;
+import lombok.*;
+
+@Getter
+@ToString
+@AllArgsConstructor
+@NoArgsConstructor
+@Builder
+public class UserDTO {
+    private Long id;
+    private String email;
+    private String username;
+
+    static public UserDTO toDto(User user) {
+        return UserDTO.builder()
+                .id(user.getId())
+                .username(user.getUsername())
+                .email(user.getEmail())
+                .build();
+    }
+
+    public User toEntity() {
+        return User.builder()
+                .id(id)
+                .username(username)
+                .email(email)
+                .build();
+    }
+
+}

src/main/java/com/dasom/MemoReal/domain/user/entity/User.java

@@ -0,0 +1,60 @@
+package com.dasom.MemoReal.domain.user.entity;
+
+import jakarta.persistence.*;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.List;
+import java.util.stream.Collectors;
+
+@Entity
+@Getter
+@NoArgsConstructor
+@AllArgsConstructor
+@Builder
+public class User implements UserDetails {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+    private String username;
+    private String password;
+    private String email;
+
+    @ElementCollection(fetch = FetchType.EAGER)
+    @Builder.Default // 기본값 지정
+    private List<String> roles = new ArrayList<>();
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        return this.roles.stream()
+                .map(SimpleGrantedAuthority::new)
+                .collect(Collectors.toList());
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return true;
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return true;
+    }
+}

src/main/java/com/dasom/MemoReal/domain/user/repository/UserRepository.java

@@ -0,0 +1,13 @@
+package com.dasom.MemoReal.domain.user.repository;
+
+import com.dasom.MemoReal.domain.user.entity.User;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.Optional;
+
+public interface UserRepository extends JpaRepository<User, Long> {
+    Optional<User> findByUsername(String username);
+    Optional<User> findByEmail(String email);
+
+    boolean existsByUsername(String username);
+}