자동 로그인

DROP TABLE IF EXISTS `persistence_logins`; CREATE TABLE `persistence_logins` ( `no` INT NOT NULL AUTO_INCREMENT PRIMARY KEY COMMENT '번호', `id` VARCHAR(255) NOT NULL COMMENT 'ID (UUID)', `username` VARCHAR(100) NOT NULL COMMENT '회원 아이디', `token` VARCHAR(255) NOT NULL COMMENT '인증 토큰', `expiry_date` TIMESTAMP NOT NULL COMMENT '만료시간', `created_at` TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '등록일자', `updated_at` TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '수정일자' );

package board.DTO; import java.util.Date; import com.alohaclass.jdbc.annotation.*; import lombok.*; @Table("persistence_logins") @Data @NoArgsConstructor @AllArgsConstructor @Builder public class PersistenceLogins { @Pk private int no; private String id; private String username; private String token; private Date expiryDate; private Date createdAt; private Date updatedAt; }

package board.DAO; import com.alohaclass.jdbc.dao.BaseDAOImpl; import board.DTO.PersistenceLogins; public class PersistenceLoginsDAO extends BaseDAOImpl<PersistenceLogins> { }

package board.Service; import board.DTO.PersistenceLogins; public interface PersistenceLoginsService { // 토큰 등록 public PersistenceLogins insert(String username); // 토큰 조회 (아이디) public PersistenceLogins select(String username); // 토큰 조회 (토큰) public PersistenceLogins selectByToken(String token); // 토큰 수정 public PersistenceLogins update(String username); // 토큰 갱신 (없으면 등록, 있으면 수정) public PersistenceLogins refresh(String username); // 토큰 유효성 체크 (만료여부 확인) public boolean isValid(String token); // 토큰 삭제 public boolean delete(String username); }

package board.Service; import java.util.Calendar; import java.util.Date; import java.util.HashMap; import java.util.Map; import java.util.UUID; import board.DAO.PersistenceLoginsDAO; import board.DTO.PersistenceLogins; public class PersistenceLoginsServiceImpl implements PersistenceLoginsService { private PersistenceLoginsDAO persistenceLoginsDAO = new PersistenceLoginsDAO(); @Override public PersistenceLogins insert(String username) { // 현재 시각 + 7일 후 계산 Calendar calendar = Calendar.getInstance(); calendar.add(Calendar.DAY_OF_YEAR, 7); Date expiryDate = calendar.getTime(); // Builder를 사용한 객체 생성 PersistenceLogins login = PersistenceLogins.builder() .id(UUID.randomUUID().toString()) .username(username) .token(UUID.randomUUID().toString()) .expiryDate(expiryDate) .build(); try { login = persistenceLoginsDAO.insertKey(login); } catch (Exception e) { e.printStackTrace(); } return login; } @Override public PersistenceLogins select(String username) { PersistenceLogins login = null; Map<String, Object> map = new HashMap<>(); map.put("username", username); try { login = persistenceLoginsDAO.selectBy(map); } catch (Exception e) { e.printStackTrace(); } return login; } @Override public PersistenceLogins selectByToken(String token) { PersistenceLogins login = null; Map<String, Object> map = new HashMap<>(); map.put("token", token); try { login = persistenceLoginsDAO.selectBy(map); } catch (Exception e) { e.printStackTrace(); } return login; } @Override public PersistenceLogins update(String username) { // 현재 시각 + 7일 후 계산 Calendar calendar = Calendar.getInstance(); calendar.add(Calendar.DAY_OF_YEAR, 7); Date expiryDate = calendar.getTime(); PersistenceLogins login = PersistenceLogins.builder() .id(UUID.randomUUID().toString()) .username(username) .expiryDate(expiryDate) .updatedAt(new Date()) .build(); Map<String, Object> map = new HashMap<String, Object>(); map.put("username", username); PersistenceLogins origin = null; int result = 0; try { origin = persistenceLoginsDAO.selectBy(map); login.setNo(origin.getNo()); login.setToken(origin.getToken()); result = persistenceLoginsDAO.update(login); System.out.println("토큰 수정 여부 : " + result); } catch (Exception e) { e.printStackTrace(); } return login; } @Override public PersistenceLogins refresh(String username) { Map<String, Object> map = new HashMap<String, Object>(); map.put("username", username); PersistenceLogins origin = null; PersistenceLogins refresh = null; try { origin = persistenceLoginsDAO.selectBy(map); } catch (Exception e) { e.printStackTrace(); } // 토큰이 없는 경우, 생성 if( origin == null ) { refresh = insert(username); } // 토큰이 있는 경우, 갱신 else { refresh = update(username); } return refresh; } @Override public boolean isValid(String token) { PersistenceLogins login = selectByToken(token); if (login == null) return false; Date expiryDate = login.getExpiryDate(); Date now = new Date(); return expiryDate.after(now); // 현재 시간보다 만료일이 나중이면 유효 } @Override public boolean delete(String username) { Map<String, Object> map = new HashMap<String, Object>(); map.put("username", username); int result = 0; try { result = persistenceLoginsDAO.deleteBy(map); } catch (Exception e) { e.printStackTrace(); } return result > 0; } }

// 자동 로그인 --------------------------------------------------- String rememberMe = request.getParameter("rememberMe"); Cookie cookieRememberMe = new Cookie("rememberMe", ""); Cookie cookieToken = new Cookie("token", ""); // 쿠키 설정 cookieRememberMe.setPath("/"); cookieToken.setPath("/"); // 쿠키 만료시간 설정 - 7일 (/초) cookieRememberMe.setMaxAge(60*60*24*7); cookieToken.setMaxAge(60*60*24*7); // 자동 로그인 체크 여부 if( rememberMe != null && rememberMe.equals("on") ) { // 자동 로그인 체크 시 // - 토큰 발행 PersistenceLoginsService persistenceLoginsService = new PersistenceLoginsServiceImpl(); PersistenceLogins persistenceLogins = persistenceLoginsService.refresh(username); String token = null; if( persistenceLogins != null ) { token = persistenceLogins.getToken(); } // - 쿠키 생성 cookieRememberMe.setValue( URLEncoder.encode(rememberMe, "UTF-8") ); cookieToken.setValue( URLEncoder.encode(token, "UTF-8") ); } else { // 자동 로그인 미체크 시 // 쿠키 삭제 cookieRememberMe.setMaxAge(0); cookieToken.setMaxAge(0); } response.addCookie(cookieRememberMe); response.addCookie(cookieToken); // 자동 로그인 끝 ---------------------------------------------------

package board.servlet; import java.io.IOException; import java.net.URLDecoder; import java.net.URLEncoder; import board.DTO.PersistenceLogins; import board.DTO.Users; import board.Service.PersistenceLoginsService; import board.Service.PersistenceLoginsServiceImpl; import board.Service.UserService; import board.Service.UserServiceImpl; import jakarta.servlet.RequestDispatcher; import jakarta.servlet.ServletException; import jakarta.servlet.annotation.WebServlet; import jakarta.servlet.http.Cookie; import jakarta.servlet.http.HttpServlet; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpSession; @WebServlet({"/login", "/login.jsp"}) public class LoginServlet extends HttpServlet { private static final long serialVersionUID = 1L; private UserService userService = new UserServiceImpl(); protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { String page = ""; // 아이디 저장 쿠키 확인 System.out.println("아이디 저장 쿠키 확인 ..."); String rememberId = ""; String username = ""; Cookie[] cookies = request.getCookies(); if( cookies != null ) { for( Cookie cookie : cookies ) { String cookieName = cookie.getName(); String cookieValue = URLDecoder.decode( cookie.getValue(), "UTF-8" ); switch(cookieName) { case "username" : username = cookieValue; break; case "rememberId" : rememberId = cookieValue; break; } } } request.setAttribute("username", username); request.setAttribute("rememberId", rememberId); page = "/page/login.jsp"; RequestDispatcher dispatcher = request.getRequestDispatcher(page); dispatcher.forward(request, response); } @Override protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { String root = request.getContextPath(); String path = request.getPathInfo(); // /login - 로그인 String username = request.getParameter("username"); String password = request.getParameter("password"); // 아이디 저장 --------------------------------------------------- String rememberId = request.getParameter("rememberId"); Cookie cookieRememberId = new Cookie("rememberId", ""); Cookie cookieUsername = new Cookie("username", ""); cookieRememberId.setPath("/"); cookieUsername.setPath("/"); System.out.println("rememberId : " + rememberId); // 아이디 저장 체크 시 - 값 : on if( rememberId != null && rememberId.equals("on") ) { // 쿠키 생성 cookieRememberId.setValue( URLEncoder.encode(rememberId, "UTF-8") ); cookieUsername.setValue( URLEncoder.encode(username, "UTF-8") ); // 쿠키 만료시간 설정 - 7일 (/초) cookieRememberId.setMaxAge(60*60*24*7); cookieUsername.setMaxAge(60*60*24*7); } // 아이디 저장 체크 해제 시 else { // 쿠키 삭제 - 쿠키 유효시간을 0으로 하고 응답 cookieRememberId.setMaxAge(0); cookieUsername.setMaxAge(0); } // 응답에 쿠키 등록 response.addCookie(cookieRememberId); response.addCookie(cookieUsername); // 아이디 저장 끝 --------------------------------------------------- // 자동 로그인 --------------------------------------------------- String rememberMe = request.getParameter("rememberMe"); Cookie cookieRememberMe = new Cookie("rememberMe", ""); Cookie cookieToken = new Cookie("token", ""); // 쿠키 설정 cookieRememberMe.setPath("/"); cookieToken.setPath("/"); // 쿠키 만료시간 설정 - 7일 (/초) cookieRememberMe.setMaxAge(60*60*24*7); cookieToken.setMaxAge(60*60*24*7); // 자동 로그인 체크 여부 if( rememberMe != null && rememberMe.equals("on") ) { // 자동 로그인 체크 시 // - 토큰 발행 PersistenceLoginsService persistenceLoginsService = new PersistenceLoginsServiceImpl(); PersistenceLogins persistenceLogins = persistenceLoginsService.refresh(username); String token = null; if( persistenceLogins != null ) { token = persistenceLogins.getToken(); } // - 쿠키 생성 cookieRememberMe.setValue( URLEncoder.encode(rememberMe, "UTF-8") ); cookieToken.setValue( URLEncoder.encode(token, "UTF-8") ); } else { // 자동 로그인 미체크 시 // 쿠키 삭제 cookieRememberMe.setMaxAge(0); cookieToken.setMaxAge(0); } response.addCookie(cookieRememberMe); response.addCookie(cookieToken); // 자동 로그인 끝 --------------------------------------------------- Users user = Users.builder() .username(username) .password(password) .build(); boolean result = userService.login(user); // 로그인 성공 if( result ) { // 회원 조회 Users loginUser = userService.selectByUsername(username); loginUser.setPassword(null); // 세션에 사용자 정보 등록 HttpSession session = request.getSession(); session.setAttribute("loginId", user.getUsername()); session.setAttribute("loginUser", loginUser); response.sendRedirect(root + "/"); } // 로그인 실패 else { response.sendRedirect(root + "/login.jsp?error=true"); } // [로그인 끝] ############################################################## } }

package board.filter; import java.io.IOException; import java.net.URLDecoder; import board.DTO.PersistenceLogins; import board.DTO.Users; import board.Service.PersistenceLoginsService; import board.Service.PersistenceLoginsServiceImpl; import board.Service.UserService; import board.Service.UserServiceImpl; import jakarta.servlet.Filter; import jakarta.servlet.FilterChain; import jakarta.servlet.FilterConfig; import jakarta.servlet.ServletException; import jakarta.servlet.ServletRequest; import jakarta.servlet.ServletResponse; import jakarta.servlet.annotation.WebFilter; import jakarta.servlet.http.Cookie; import jakarta.servlet.http.HttpFilter; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpSession; @WebFilter(description = "자동 로그인 등, 인증 처리 필터", urlPatterns = { "/*" }) public class LoginFilter extends HttpFilter implements Filter { private static final long serialVersionUID = 6470731114379833406L; PersistenceLoginsService persistenceLoginsService; UserService userService; public LoginFilter() { super(); } public void init(FilterConfig fConfig) throws ServletException { persistenceLoginsService = new PersistenceLoginsServiceImpl(); userService = new UserServiceImpl(); } public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { // 쿠키 확인 // 1. 자동 로그인 여부 // 2. 인증 토큰 HttpServletRequest httpRequest = (HttpServletRequest) request; Cookie[] cookies = httpRequest.getCookies(); String rememberMe = null; // 자동 로그이 여부 String token = null; // 인증 토큰 if( cookies != null ) { for (Cookie cookie : cookies) { String cookieName = cookie.getName(); String cookieValue = URLDecoder.decode( cookie.getValue(), "UTF-8") ; switch (cookieName) { case "rememberMe" : rememberMe = cookieValue; break; case "token" : token = cookieValue; break; } } } System.out.println("LoginFilter..."); System.out.println("rememberMe : " + rememberMe); System.out.println("token : " + token); // 로그인 여부 확인 HttpSession session = httpRequest.getSession(); String loginId = (String) session.getAttribute("loginId"); Users loginUser = (Users) session.getAttribute("loginUser"); // 이미 로그인 됨 if( loginId != null && loginUser != null ) { chain.doFilter(request, response); System.out.println("로그인된 사용자 : " + loginId); return; } // 자동 로그인 & 토큰 ok if( rememberMe != null && token != null ) { System.out.println("rememberMe : " + rememberMe); System.out.println("token : " + token); PersistenceLogins persistenceLogins = persistenceLoginsService.selectByToken(token); System.out.println("persistenceLogins : " + persistenceLogins); boolean isValid = persistenceLoginsService.isValid(token); // 토큰이 존재, 유효 if( persistenceLogins != null && isValid ) { loginId = persistenceLogins.getUsername(); loginUser = userService.selectByUsername(loginId); System.out.println("loginId : " + loginId); System.out.println("loginUser : " + loginUser); // 로그인 처리 session.setAttribute("loginId", loginId); session.setAttribute("loginUser", loginUser); System.out.println("자동 로그인 성공 : " + loginUser); } } chain.doFilter(request, response); } public void destroy() { } }