[Feature] 아이템 구매 기능

.gitignore

@@ -1,2 +1,9 @@
 .idea/
-*.iml
+*.iml
+### yml ###
+application.yml
+
+
+.env
+
+.vscode

README.md

@@ -10,3 +10,4 @@
 | <img src="https://avatars.githubusercontent.com/u/75060858?s=400&u=4917b902ce67c045926c2dcc84052a307ef7b615&v=4" width="200" /> |  <img src="https://avatars.githubusercontent.com/u/163461154?v=4" width="160">  |  <img src="https://avatars.githubusercontent.com/u/127640204?v=4" width="160" />  | <img src="https://avatars.githubusercontent.com/u/158552165?v=4" width="180" /> | <img src="https://avatars.githubusercontent.com/u/183798149?v=4" width="200" /> |  
 |                                                               윤민섭                                                               |                                       김혜림                                       |                                        박채연                                        |                                       박세웅                                       |                                       김민주                                       | 
 |                                             [Minsub](https://github.com/minsubyun1)                                             |                  [kimhyerim01](https://github.com/kimhyerim01)                  |                  [yeonchaepark](https://github.com/yeonchaepark)                  |                    [hardwoong](https://github.com/hardwoong)                    |                   [calla1102](https://github.com/calla1102)                   | 
+

retrigger.txt

@@ -0,0 +1,2 @@
+// retrigger CI after base branch change
+//ABCD CI after base branch change

server/.gitignore

@@ -35,3 +35,7 @@ out/
 
 ### VS Code ###
 .vscode/
+
+
+### yml
+application.yml

server/build.gradle

@@ -27,12 +27,23 @@ dependencies {
 	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
 	implementation 'org.springframework.boot:spring-boot-starter-validation'
 	implementation 'org.springframework.boot:spring-boot-starter-web'
+	implementation 'org.springframework.boot:spring-boot-starter-oauth2-client'
+	implementation("io.jsonwebtoken:jjwt-api:0.12.4")
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+	runtimeOnly("io.jsonwebtoken:jjwt-impl:0.12.4")
+	runtimeOnly("io.jsonwebtoken:jjwt-jackson:0.12.4")
 	compileOnly 'org.projectlombok:lombok'
 	developmentOnly 'org.springframework.boot:spring-boot-devtools'
 	runtimeOnly 'com.mysql:mysql-connector-j'
 	annotationProcessor 'org.projectlombok:lombok'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+
+	implementation 'io.jsonwebtoken:jjwt-api:0.11.5'
+	runtimeOnly  'io.jsonwebtoken:jjwt-impl:0.11.5'
+	runtimeOnly  'io.jsonwebtoken:jjwt-jackson:0.11.5'
+	implementation 'io.github.cdimascio:dotenv-java:3.0.0'
+	implementation 'me.paulschwarz:spring-dotenv:4.0.0'
 }
 
 tasks.named('test') {

server/src/main/java/com/soopgyeol/api/common/dto/NicknameUpdateRequest.java

@@ -0,0 +1,13 @@
+package com.soopgyeol.api.common.dto;
+
+import jakarta.validation.constraints.Pattern;
+import jakarta.validation.constraints.Size;
+import lombok.Getter;
+
+@Getter
+public class NicknameUpdateRequest {
+    @Size(min = 2, max = 12, message = "닉네임은 2자 이상 12자 이하로 입력해주세요.")
+    @Pattern(regexp = ".*[a-zA-Z가-힣]+.*", message = "닉네임에는 한글 또는 영문자가 최소 1자 이상 포함되어야 합니다.")
+    private String nickname;
+
+}

server/src/main/java/com/soopgyeol/api/common/dto/NicknameUpdateResponse.java

@@ -0,0 +1,10 @@
+package com.soopgyeol.api.common.dto;
+
+import lombok.AllArgsConstructor;
+import lombok.Data;
+
+@Data
+@AllArgsConstructor
+public class NicknameUpdateResponse {
+    private String nickname;
+}

server/src/main/java/com/soopgyeol/api/common/exception/InsufficientBalanceException.java

@@ -0,0 +1,7 @@
+package com.soopgyeol.api.common.exception;
+
+public class InsufficientBalanceException extends RuntimeException {
+    public InsufficientBalanceException(String message) {
+        super(message);
+    }
+}

server/src/main/java/com/soopgyeol/api/common/exception/ItemAlreadyOwnedException.java

@@ -0,0 +1,8 @@
+package com.soopgyeol.api.common.exception;
+
+public class ItemAlreadyOwnedException extends RuntimeException {
+    public ItemAlreadyOwnedException(String message) {
+        super(message);
+    }
+}
+

server/src/main/java/com/soopgyeol/api/config/DevDataInitializer.java

@@ -0,0 +1,33 @@
+package com.soopgyeol.api.config;
+
+import com.soopgyeol.api.domain.user.Role;
+import com.soopgyeol.api.domain.user.SocialLoginType;
+import com.soopgyeol.api.domain.user.User;
+import com.soopgyeol.api.repository.UserRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Component;
+import org.springframework.boot.CommandLineRunner;
+
+@Component
+@RequiredArgsConstructor
+public class DevDataInitializer implements CommandLineRunner{
+
+    private final UserRepository userRepository;
+
+    @Override
+    public void run(String... args) {
+        if(userRepository.count() == 0) {
+            User testUser = User.builder()
+                    .nickname("테스트 유저")
+                    .email("[email protected]")
+                    .password("1234")
+                    .role(Role.USER)
+                    .provider(SocialLoginType.GOOGLE)
+                    .build();
+
+            userRepository.save(testUser);
+
+            System.out.println("테스트 유저가 자동 등록되었습니다. ID: " + testUser.getId());
+        }
+    }
+}

server/src/main/java/com/soopgyeol/api/config/DotEnvConfig.java

@@ -0,0 +1,17 @@
+package com.soopgyeol.api.config;
+
+import io.github.cdimascio.dotenv.Dotenv;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration
+public class DotEnvConfig {
+
+    @Bean
+    public Dotenv dotenv() {
+        return Dotenv.configure()
+                .directory(System.getProperty("user.dir"))  // 👈 명확하게 루트 경로 지정
+                .ignoreIfMissing()
+                .load();
+    }
+}

server/src/main/java/com/soopgyeol/api/config/PasswordEncoderConfig.java

@@ -0,0 +1,15 @@
+package com.soopgyeol.api.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+
+@Configuration
+public class PasswordEncoderConfig {
+
+    @Bean
+    public PasswordEncoder passwordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+}

server/src/main/java/com/soopgyeol/api/config/SecurityConfig.java

@@ -0,0 +1,65 @@
+package com.soopgyeol.api.config;
+
+import com.soopgyeol.api.service.jwt.JwtAuthFilter;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.authorization.AuthorizationDecision;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.factory.PasswordEncoderFactories;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.access.IpAddressAuthorizationManager;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+
+@Configuration
+@EnableWebSecurity
+@RequiredArgsConstructor
+public class SecurityConfig {
+
+    private final JwtAuthFilter jwtAuthFilter;
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+
+        http.csrf(csrf -> csrf.disable());
+
+
+        http.sessionManagement(sm -> sm
+                .sessionCreationPolicy(SessionCreationPolicy.STATELESS));
+
+        http.authorizeHttpRequests(auth -> auth
+                .requestMatchers("/api/v1/auth/dev-login").permitAll()
+                .requestMatchers(
+                        "/oauth2/**",
+                        "/login/oauth2/**",
+                        "/login-success",
+                        "/auth/oauth2/**",
+                        "/favicon.ico",
+                        "/auth/login",
+                        "/oauth2/google/code-log",
+                        "/api/v1/auth/oauth/oauth2/**",
+                        "/api/v1/auth/oauth/**"
+                ).permitAll()
+                .anyRequest().authenticated()
+        );
+
+
+
+
+
+        http.exceptionHandling(eh -> eh
+                .authenticationEntryPoint(
+                        (req, res, ex) -> res.sendError(HttpServletResponse.SC_UNAUTHORIZED)));
+
+        http.addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class);
+
+        return http.build();
+    }
+
+
+}

server/src/main/java/com/soopgyeol/api/config/auth/CustomUserDetails.java

@@ -0,0 +1,62 @@
+package com.soopgyeol.api.config.auth;
+
+
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+
+
+public class CustomUserDetails implements UserDetails {
+    private final Long userId;
+    private final String username;
+    private final String password;
+    private final Collection<? extends GrantedAuthority> authorities;
+
+    public CustomUserDetails(Long userId, String username, String password, Collection<? extends GrantedAuthority> authorities) {
+        this.userId = userId;
+        this.username = username;
+        this.password = password;
+        this.authorities = authorities;
+    }
+
+    // userId getter
+    public Long getUserId() {
+        return userId;
+    }
+
+    @Override
+    public String getUsername() {
+        return username;
+    }
+
+    @Override
+    public String getPassword() {
+        return password;
+    }
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        return authorities;
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return true;
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return true;
+    }
+}

server/src/main/java/com/soopgyeol/api/controller/AuthController.java

@@ -0,0 +1,103 @@
+package com.soopgyeol.api.controller;
+
+import com.soopgyeol.api.dto.oauth.OAuthLoginRequest;
+import com.soopgyeol.api.dto.oauth.OAuthLoginResponse;
+import com.soopgyeol.api.service.auth.GoogleOauth;
+import com.soopgyeol.api.service.auth.KakaoOauth;
+import com.soopgyeol.api.service.auth.OAuthService;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+import java.io.IOException;
+import java.util.Map;
+
+//임시 토큰 코드 사용 시 활성화
+//import com.soopgyeol.api.domain.user.User;
+//import com.soopgyeol.api.repository.UserRepository;
+//import com.soopgyeol.api.service.jwt.JwtProvider;
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/api/v1/auth/oauth")
+public class AuthController {
+
+    private final OAuthService oAuthService;
+    private final GoogleOauth googleOauth;
+    private final KakaoOauth kakaoOauth;
+
+    @PostMapping("/login")
+    public OAuthLoginResponse login(@RequestBody OAuthLoginRequest request) {
+        return oAuthService.login(request);
+    }
+
+    @GetMapping("/oauth2/google/url")
+    public ResponseEntity<Map<String, String>> getGoogleLoginUrl() {
+        String url = googleOauth.getOauthRedirectURL();
+        return ResponseEntity.ok(Map.of("url", url));
+    }
+
+    @GetMapping("/oauth2/kakao/url")
+    public ResponseEntity<Map<String, String>> getKakaoLoginUrl() {
+        String url = kakaoOauth.getOauthRedirectURL();
+        return ResponseEntity.ok(Map.of("url", url));
+    }
+
+
+    @GetMapping("/oauth2/google/code-log")
+    public void googleAutoLogin(@RequestParam String code, HttpServletResponse response) throws IOException {
+        // 기존 login() 재활용
+        OAuthLoginRequest loginRequest = OAuthLoginRequest.builder()
+                .provider("GOOGLE")
+                .code(code)
+                .build();
+
+        OAuthLoginResponse loginResponse = oAuthService.login(loginRequest);
+
+        // JWT 꺼내기
+        String jwtToken = loginResponse.getJwtToken();
+
+        // 앱용 딥링크로 변경
+        response.sendRedirect("soopgyeol://oauth-callback/google?token=" + jwtToken);
+
+    }
+
+
+
+
+    @GetMapping("/oauth2/kakao/code-log")
+    public void kakaoAutoLogin(@RequestParam String code, HttpServletResponse response) throws IOException {
+        OAuthLoginRequest loginRequest = OAuthLoginRequest.builder()
+                .provider("KAKAO")
+                .code(code)
+                .build();
+
+        OAuthLoginResponse loginResponse = oAuthService.login(loginRequest);
+
+        String jwtToken = loginResponse.getJwtToken();
+
+        // 앱 용 딥링크로 변경
+        response.sendRedirect("soopgyeol://oauth-callback/kakao?token=" + jwtToken);
+    }
+
+
+
+
+    // 임시 토큰 생성시 활성화
+//    private final UserRepository userRepository;
+//    private final JwtProvider jwtProvider;
+//    @PostMapping("/dev-login")
+//    public OAuthLoginResponse devLogin(@RequestParam Long userId) {
+//        User user = userRepository.findById(userId)
+//                .orElseThrow(() -> new IllegalArgumentException("유저 없음"));
+//
+//        String jwt = jwtProvider.createToken(user.getId(), user.getRole());
+//
+//        return OAuthLoginResponse.builder()
+//                .jwtToken(jwt)
+//                .isNewUser(false)
+//                .build();
+//    }
+
+
+}