[FEAT] 9주차 미션_오아시스

oasis/week4/umc10th/build.gradle

@@ -34,6 +34,11 @@ dependencies {
     //Validation
     implementation 'org.springframework.boot:spring-boot-starter-validation'
 
+    // JWT
+    implementation 'io.jsonwebtoken:jjwt-api:0.12.3'
+    implementation 'io.jsonwebtoken:jjwt-impl:0.12.3'
+    implementation 'io.jsonwebtoken:jjwt-jackson:0.12.3'
+
     //Swagger
     implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.1'
     implementation 'org.springdoc:springdoc-openapi-starter-webmvc-api:3.0.1'

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/api/HomeApiSpecification.java

@@ -2,13 +2,14 @@
 
 import com.example.umc10th.domain.member.dto.HomeResDTO;
 import com.example.umc10th.domain.member.dto.MemberResDTO;
+import com.example.umc10th.global.security.AuthMember;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.responses.ApiResponse;
 import io.swagger.v3.oas.annotations.responses.ApiResponses;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
 import org.springframework.web.bind.annotation.RequestParam;
 
 @Tag(name = "Home", description = "홈/마이페이지 관련 API")
@@ -20,18 +21,18 @@ public interface HomeApiSpecification {
             @ApiResponse(responseCode = "404", description = "회원을 찾을 수 없음")
     })
     ResponseEntity<com.example.umc10th.global.apiPayload.ApiResponse<HomeResDTO.HomeResponse>> home(
-            @Parameter(description = "사용자 ID", example = "1") @PathVariable Long userId,
+            @AuthenticationPrincipal AuthMember authMember,
             @Parameter(description = "지역 ID", example = "1") @RequestParam Long regionId,
             @Parameter(description = "페이지 번호 (0부터 시작)", example = "0") @RequestParam(defaultValue = "0") int page,
             @Parameter(description = "페이지 크기", example = "10") @RequestParam(defaultValue = "10") int size
     );
 
-    @Operation(summary = "마이페이지 조회", description = "사용자의 마이페이지 정보를 조회합니다.")
+    @Operation(summary = "마이페이지 조회", description = "인증된 사용자의 마이페이지 정보를 조회합니다.")
     @ApiResponses(value = {
             @ApiResponse(responseCode = "200", description = "마이페이지 조회 성공"),
-            @ApiResponse(responseCode = "404", description = "회원을 찾을 수 없음")
+            @ApiResponse(responseCode = "401", description = "인증되지 않은 사용자")
     })
     ResponseEntity<com.example.umc10th.global.apiPayload.ApiResponse<MemberResDTO.MypageResponse>> mypage(
-            @Parameter(description = "사용자 ID", example = "1") @PathVariable Long userId
+            @AuthenticationPrincipal AuthMember authMember
     );
 }

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/api/MemberApiSpecification.java

@@ -20,4 +20,14 @@ public interface MemberApiSpecification {
     ResponseEntity<com.example.umc10th.global.apiPayload.ApiResponse<MemberResDTO.SignupResponse>> signup(
             @RequestBody MemberReqDTO.SignupRequest request
     );
+
+    @Operation(summary = "로그인", description = "이메일과 비밀번호로 로그인하여 JWT 토큰을 발급합니다.")
+    @ApiResponses(value = {
+            @ApiResponse(responseCode = "200", description = "로그인 성공"),
+            @ApiResponse(responseCode = "401", description = "비밀번호 불일치"),
+            @ApiResponse(responseCode = "404", description = "사용자를 찾을 수 없음")
+    })
+    ResponseEntity<com.example.umc10th.global.apiPayload.ApiResponse<MemberResDTO.LoginResponse>> login(
+            @RequestBody MemberReqDTO.LoginRequest request
+    );
 }

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/controller/HomeController.java

@@ -6,35 +6,37 @@
 import com.example.umc10th.domain.member.exception.code.MemberSuccessCode;
 import com.example.umc10th.domain.member.service.MemberService;
 import com.example.umc10th.global.apiPayload.ApiResponse;
+import com.example.umc10th.global.security.AuthMember;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
 import org.springframework.web.bind.annotation.*;
 
 @RestController
 @RequiredArgsConstructor
-@RequestMapping("/api/users/{userId}")
+@RequestMapping("/api/users")
 public class HomeController implements HomeApiSpecification {
 
     private final MemberService memberService;
 
     @GetMapping("/home")
     public ResponseEntity<ApiResponse<HomeResDTO.HomeResponse>> home(
-            @PathVariable Long userId,
+            @AuthenticationPrincipal AuthMember authMember,
             @RequestParam Long regionId,
             @RequestParam(defaultValue = "0") int page,
             @RequestParam(defaultValue = "10") int size
     ) {
-        HomeResDTO.HomeResponse response = memberService.getHome(userId, regionId, page, size);
+        HomeResDTO.HomeResponse response = memberService.getHome(authMember.getMember().getId(), regionId, page, size);
         return ResponseEntity
                 .status(MemberSuccessCode.MEMBER_HOME_SUCCESS.getStatus())
                 .body(ApiResponse.onSuccess(MemberSuccessCode.MEMBER_HOME_SUCCESS, response));
     }
 
     @GetMapping("/mypage")
     public ResponseEntity<ApiResponse<MemberResDTO.MypageResponse>> mypage(
-            @PathVariable Long userId
+            @AuthenticationPrincipal AuthMember authMember
     ) {
-        MemberResDTO.MypageResponse response = memberService.getMypage(userId);
+        MemberResDTO.MypageResponse response = memberService.getMypage(authMember.getMember().getId());
         return ResponseEntity
                 .status(MemberSuccessCode.MEMBER_MYPAGE_SUCCESS.getStatus())
                 .body(ApiResponse.onSuccess(MemberSuccessCode.MEMBER_MYPAGE_SUCCESS, response));

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/controller/MemberController.java

@@ -27,4 +27,14 @@ public ResponseEntity<ApiResponse<MemberResDTO.SignupResponse>> signup(
                 .status(MemberSuccessCode.MEMBER_SIGNUP_SUCCESS.getStatus())
                 .body(ApiResponse.onSuccess(MemberSuccessCode.MEMBER_SIGNUP_SUCCESS, response));
     }
+
+    @PostMapping("/login")
+    public ResponseEntity<ApiResponse<MemberResDTO.LoginResponse>> login(
+            @Valid @RequestBody MemberReqDTO.LoginRequest request
+    ) {
+        MemberResDTO.LoginResponse response = memberService.login(request);
+        return ResponseEntity
+                .status(MemberSuccessCode.MEMBER_LOGIN_SUCCESS.getStatus())
+                .body(ApiResponse.onSuccess(MemberSuccessCode.MEMBER_LOGIN_SUCCESS, response));
+    }
 }

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/dto/MemberReqDto.java

@@ -6,6 +6,15 @@
 
 public class MemberReqDTO {
 
+    public record LoginRequest(
+            @NotBlank(message = "이메일은 필수입니다.")
+            @Email(message = "올바른 이메일 형식이어야 합니다.")
+            String email,
+
+            @NotBlank(message = "비밀번호는 필수입니다.")
+            String password
+    ) {}
+
     public record SignupRequest(
             @NotBlank(message = "이메일은 필수입니다.")
             @Email(message = "올바른 이메일 형식이어야 합니다.")

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/dto/MemberResDTO.java

@@ -4,6 +4,11 @@
 
 public class MemberResDTO {
 
+    @Builder
+    public record LoginResponse(
+            String accessToken
+    ) {}
+
     @Builder
     public record SignupResponse(
             Long userId,

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/exception/code/MemberErrorCode.java

@@ -12,6 +12,7 @@ public enum MemberErrorCode implements BaseErrorCode {
     MEMBER_NOT_FOUND(HttpStatus.NOT_FOUND, "MEMBER404_1", "해당 사용자를 찾을 수 없습니다."),
     EMAIL_ALREADY_EXISTS(HttpStatus.CONFLICT, "MEMBER409_1", "이미 사용 중인 이메일입니다."),
     INVALID_GENDER(HttpStatus.BAD_REQUEST, "MEMBER400_1", "올바르지 않은 성별 값입니다."),
+    INVALID_PASSWORD(HttpStatus.UNAUTHORIZED, "MEMBER401_1", "비밀번호가 일치하지 않습니다."),
     ;
 
 

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/exception/code/MemberSuccessCode.java

@@ -10,6 +10,7 @@
 public enum MemberSuccessCode implements BaseSuccessCode {
 
     MEMBER_SIGNUP_SUCCESS(HttpStatus.CREATED, "MEMBER201_1", "회원가입이 성공적으로 완료되었습니다."),
+    MEMBER_LOGIN_SUCCESS(HttpStatus.OK, "MEMBER200_3", "로그인에 성공했습니다."),
     MEMBER_HOME_SUCCESS(HttpStatus.OK, "MEMBER200_1", "홈 화면 조회에 성공했습니다."),
     MEMBER_MYPAGE_SUCCESS(HttpStatus.OK, "MEMBER200_2", "마이페이지 조회에 성공했습니다."),
     ;

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/repository/MemberRepository.java

@@ -3,8 +3,12 @@
 import com.example.umc10th.domain.member.entity.Member;
 import org.springframework.data.jpa.repository.JpaRepository;
 
+import java.util.Optional;
+
 public interface MemberRepository extends JpaRepository<Member,Long> {
     void deleteByName(String name);
 
     boolean existsByEmail(String email);
+
+    Optional<Member> findByEmail(String email);
 }

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/member/service/MemberService.java

@@ -11,6 +11,8 @@
 import com.example.umc10th.domain.member.repository.MemberRepository;
 import com.example.umc10th.domain.mission.entity.Mission;
 import com.example.umc10th.domain.mission.repository.MissionRepository;
+import com.example.umc10th.global.security.AuthMember;
+import com.example.umc10th.global.security.jwt.JwtUtil;
 import lombok.RequiredArgsConstructor;
 import org.springframework.data.domain.Page;
 import org.springframework.data.domain.PageRequest;
@@ -24,6 +26,7 @@ public class MemberService {
     private final MemberRepository memberRepository;
     private final MissionRepository missionRepository;
     private final PasswordEncoder passwordEncoder;
+    private final JwtUtil jwtUtil;
 
     @Transactional
     public MemberResDTO.SignupResponse signup(MemberReqDTO.SignupRequest request) {
@@ -44,6 +47,23 @@ public MemberResDTO.SignupResponse signup(MemberReqDTO.SignupRequest request) {
         return MemberConverter.toSignupResponse(saved);
     }
 
+    @Transactional(readOnly = true)
+    public MemberResDTO.LoginResponse login(MemberReqDTO.LoginRequest request) {
+        Member member = memberRepository.findByEmail(request.email())
+                .orElseThrow(() -> new MemberException(MemberErrorCode.MEMBER_NOT_FOUND));
+
+        if (!passwordEncoder.matches(request.password(), member.getPassword())) {
+            throw new MemberException(MemberErrorCode.INVALID_PASSWORD);
+        }
+
+        AuthMember authMember = new AuthMember(member);
+        String accessToken = jwtUtil.createAccessToken(authMember);
+
+        return MemberResDTO.LoginResponse.builder()
+                .accessToken(accessToken)
+                .build();
+    }
+
     @Transactional(readOnly = true)
     public MemberResDTO.MypageResponse getMypage(Long userId) {
         Member member = memberRepository.findById(userId)

oasis/week4/umc10th/src/main/java/com/example/umc10th/domain/review/service/ReviewService.java

@@ -70,6 +70,7 @@ private List<Review> getReviewsSortedByRating(Long memberId, Long cursor, PageRe
                 memberId, cursorReview.getRating(), cursorReview.getId(), pageRequest);
     }
 
+
     @Transactional
     public ReviewResDTO.CreateReviewResponse createReview(ReviewReqDTO.CreateReviewRequest request) {
 

oasis/week4/umc10th/src/main/java/com/example/umc10th/global/security/AuthMember.java

@@ -0,0 +1,55 @@
+package com.example.umc10th.global.security;
+
+import com.example.umc10th.domain.member.entity.Member;
+import lombok.Getter;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+import java.util.List;
+
+@Getter
+public class AuthMember implements UserDetails {
+
+    private final Member member;
+
+    public AuthMember(Member member) {
+        this.member = member;
+    }
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        return List.of(new SimpleGrantedAuthority("ROLE_USER"));
+    }
+
+    @Override
+    public String getPassword() {
+        return member.getPassword();
+    }
+
+    @Override
+    public String getUsername() {
+        return member.getEmail();
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return true;
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return member.getIsEnabled();
+    }
+}

oasis/week4/umc10th/src/main/java/com/example/umc10th/global/security/CustomUserDetailsService.java

@@ -0,0 +1,23 @@
+package com.example.umc10th.global.security;
+
+import com.example.umc10th.domain.member.entity.Member;
+import com.example.umc10th.domain.member.repository.MemberRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+@Service
+@RequiredArgsConstructor
+public class CustomUserDetailsService implements UserDetailsService {
+
+    private final MemberRepository memberRepository;
+
+    @Override
+    public UserDetails loadUserByUsername(String email) throws UsernameNotFoundException {
+        Member member = memberRepository.findByEmail(email)
+                .orElseThrow(() -> new UsernameNotFoundException("사용자를 찾을 수 없습니다: " + email));
+        return new AuthMember(member);
+    }
+}

oasis/week4/umc10th/src/main/java/com/example/umc10th/global/security/SecurityConfig.java

@@ -1,5 +1,6 @@
 package com.example.umc10th.global.security;
 
+import com.example.umc10th.global.security.jwt.JwtAuthFilter;
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
@@ -9,13 +10,15 @@
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 
 @Configuration
 @RequiredArgsConstructor
 public class SecurityConfig {
 
     private final CustomAuthenticationEntryPoint authenticationEntryPoint;
     private final CustomAccessDeniedHandler accessDeniedHandler;
+    private final JwtAuthFilter jwtAuthFilter;
 
     private static final String[] PUBLIC_PATHS = {
             "/api/auth/**",
@@ -45,7 +48,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                         .anyRequest().authenticated())
                 .exceptionHandling(handler -> handler
                         .authenticationEntryPoint(authenticationEntryPoint)
-                        .accessDeniedHandler(accessDeniedHandler));
+                        .accessDeniedHandler(accessDeniedHandler))
+                .addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class);
 
         return http.build();
     }