사용자 정의 인증

plugins { id 'java' id 'war' id 'org.springframework.boot' version '3.3.5' id 'io.spring.dependency-management' version '1.1.6' } group = 'com.aloha' version = '0.0.1-SNAPSHOT' java { toolchain { languageVersion = JavaLanguageVersion.of(17) } } configurations { compileOnly { extendsFrom annotationProcessor } } repositories { mavenCentral() } dependencies { implementation 'org.springframework.boot:spring-boot-starter-security' implementation 'org.springframework.boot:spring-boot-starter-web' implementation 'org.mybatis.spring.boot:mybatis-spring-boot-starter:3.0.3' implementation 'org.thymeleaf.extras:thymeleaf-extras-springsecurity6' compileOnly 'org.projectlombok:lombok' developmentOnly 'org.springframework.boot:spring-boot-devtools' runtimeOnly 'com.mysql:mysql-connector-j' annotationProcessor 'org.projectlombok:lombok' providedRuntime 'org.springframework.boot:spring-boot-starter-tomcat' testImplementation 'org.springframework.boot:spring-boot-starter-test' testImplementation 'org.mybatis.spring.boot:mybatis-spring-boot-starter-test:3.0.3' testImplementation 'org.springframework.security:spring-security-test' testRuntimeOnly 'org.junit.platform:junit-platform-launcher' } tasks.named('test') { useJUnitPlatform() }

spring.application.name=login # 데이터 소스 - MySQL spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver spring.datasource.url=jdbc:mysql://127.0.0.1:3306/aloha?serverTimezone=Asia/Seoul&allowPublicKeyRetrieval=true&useSSL=false&autoReconnection=true&autoReconnection=true spring.datasource.username=aloha spring.datasource.password=123456 # Mybatis 설정 mybatis.configuration.map-underscore-to-camel-case=true mybatis.type-aliases-package=com.aloha.login.domain mybatis.mapper-locations=classpath:mybatis/mapper/**/**.xml

@Data public class Users { private Long no; private String id; private String username; private String password; private String name; private String email; private Date createdAt; private Date updatedAt; private int enabled; private List<UserAuth> authList; }

@Data public class UserAuth { private Long no; private String username; private String auth; }

@Getter @ToString public class CustomUser implements UserDetails { // 사용자 DTO private Users user; public CustomUser(Users user) { this.user = user; } /** * 🔐 권한 정보 메소드 * ✅ UserDetails 를 CustomUser 로 구현하여, * Spring Security 의 User 대신 사용자 정의 인증 객체(CustomUser)로 적용 * ⚠ CustomUser 적용 시, 권한을 사용할 때는 'ROLE_' 붙여서 사용해야한다. */ @Override public Collection<? extends GrantedAuthority> getAuthorities() { return user.getAuthList().stream() .map( (auth) -> new SimpleGrantedAuthority(auth.getAuth()) ) .collect(Collectors.toList()); } @Override public String getPassword() { return user.getPassword(); } @Override public String getUsername() { return user.getUsername(); } @Override public boolean isAccountNonExpired() { return true; } @Override public boolean isAccountNonLocked() { return true; } @Override public boolean isCredentialsNonExpired() { return true; } @Override public boolean isEnabled() { return user.getEnabled() == 0 ? false : true; } }

/** * 🔐 UserDetailsService : 사용자 정보 불러오는 인터페이스 * ✅ 이 인터페이스를 구현하여, 사용자 정보를 로드하는 방법을 정의할 수 있습니다. */ @Slf4j @Service public class UserDetailServiceImpl implements UserDetailsService { @Autowired private UserMapper userMapper; @Override public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { log.info(":::::::::: UserDetailServiceImpl ::::::::::"); log.info("- 사용자 정의 인증을 위해, 사용자 정보 조회"); log.info("- username : " + username); Users user = null; try { // 👩‍💼 사용자 정보 및 권한 조회 user = userMapper.select(username); } catch (Exception e) { e.printStackTrace(); } if( user == null ) { throw new UsernameNotFoundException("사용자를 찾을 수 없습니다." + username); } // 🔐 CustomUser ➡ UserDetails CustomUser customUser = new CustomUser(user); return customUser; } }

<?xml version="1.0" encoding="UTF-8" ?> <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd"> <mapper namespace="com.aloha.login.mapper.UserMapper"> <resultMap type="Users" id="userMap"> <id property="no" column="no" /> <result property="no" column="no" /> <result property="id" column="id" /> <result property="username" column="username" /> <result property="password" column="password" /> <result property="name" column="name" /> <result property="email" column="email" /> <result property="enabled" column="enabled" /> <result property="createdAt" column="created_at" /> <result property="updatedAt" column="updated_at" /> <collection property="authList" resultMap="authMap"></collection> </resultMap> <resultMap type="UserAuth" id="authMap"> <result property="no" column="no" /> <result property="username" column="username" /> <result property="auth" column="auth" /> </resultMap> <!-- 회원 조회 - id --> <select id="select" resultMap="userMap"> SELECT u.no ,u.username ,password ,name ,email ,enabled ,created_at ,updated_at ,auth FROM user u LEFT OUTER JOIN user_auth auth ON u.username = auth.username WHERE u.username = #{username} </select> <!-- 회원 가입 --> <insert id="join"> INSERT INTO user ( username, password, name, email ) VALUES ( #{username}, #{password}, #{name}, #{email} ) </insert> <!-- 회원 정보 수정 --> <update id="update"> UPDATE user SET name = #{name} ,email = #{email} ,updated_at = now() WHERE username = #{username} </update> <!-- 회원 권한 등록 --> <insert id="insertAuth"> INSERT INTO user_auth( username, auth ) VALUES ( #{username}, #{auth} ) </insert> </mapper>

@Mapper public interface UserMapper { // 회원 조회 public Users select(String id) throws Exception; // 회원 가입 public int join(Users user) throws Exception; // 회원 수정 public int update(Users user) throws Exception; // 회원 권한 등록 public int insertAuth(UserAuth userAuth) throws Exception; }

@Autowired private UserDetailServiceImpl userDetailServiceImpl;

// ✅ 사용자 정의 인증 설정 http.userDetailsService(userDetailServiceImpl);

@Slf4j @Configuration @EnableWebSecurity @EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true) //어노테이션에 prePostEnabled = true를 추가하면 AuthenticationManager를 자동으로 구성합니다. public class SecurityConfig { @Autowired private CustomUserDetailService customUserDetailService; @Autowired private JwtTokenProvider jwtTokenProvider; private AuthenticationManager authenticationManager; @Bean public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception { this.authenticationManager = authenticationConfiguration.getAuthenticationManager(); return authenticationManager; } @Bean public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { log.info("securityFilterChain..."); // 폼 기반 로그인 비활성화 http.formLogin( login -> login.disable() ); // HTTP 기본 인증 비활성화 http.httpBasic( basic -> basic.disable() ); // CSRF(Cross-Site Request Forgery) 공격 방어 기능 비활성화 http.csrf( csrf -> csrf.disable() ); // 필터 설정 // ✅ JWT 요청 필터 1️⃣ // ✅ JWT 인증 필터 2️⃣ http.addFilterAt(new JwtAuthenticationFilter(authenticationManager, jwtTokenProvider), UsernamePasswordAuthenticationFilter.class) .addFilterBefore(new JwtRequestFilter(authenticationManager, jwtTokenProvider), UsernamePasswordAuthenticationFilter.class) ; // 인가 설정 http.authorizeHttpRequests() .requestMatchers(PathRequest.toStaticResources().atCommonLocations()).permitAll() .antMatchers("/").permitAll() .antMatchers("/login").permitAll() .antMatchers("/user/**").hasAnyRole("USER" , "ADMIN") .antMatchers("/admin/**").hasRole("ADMIN") // .anyRequest().authenticated() ; // 사용자 정보를 불러오는 서비스 설정 http.userDetailsService(customUserDetailService); return http.build(); } @Bean public PasswordEncoder passwordEncoder() { return new BCryptPasswordEncoder(); } }

java.security.Principal (Interface) ↑ Authentication (Interface) ↑ UsernamePasswordAuthenticationToken (구현체) ↑ getPrincipal() ↳ org.springframework.security.core.userdetails.User (implements UserDetails)

java.security.Principal (Interface) ↑ Authentication (Interface) ↑ UsernamePasswordAuthenticationToken (구현체) ↑ getPrincipal() ↳ org.springframework.security.core.userdetails.User ↳ com.aloha.security6.domain.CustomUser (implements UserDetails) : Users (사용자 정보 객체)

public String home(@AuthenticationPrincipal CustomUser authUser, Model model) throws Exception { if( authUser != null ) { log.info("authUser : " + authUser); Users user = authUser.getUser(); model.addAttribute("user", user); } return "index"; }