dev 토큰 유효시간 변경, 인증 Log 추가한거 삭제
This commit is contained in:
@@ -16,7 +16,6 @@ import org.springframework.util.AntPathMatcher;
|
||||
import org.springframework.web.filter.OncePerRequestFilter;
|
||||
|
||||
@Component
|
||||
@Log4j2
|
||||
@RequiredArgsConstructor
|
||||
public class JwtAuthenticationFilter extends OncePerRequestFilter {
|
||||
|
||||
@@ -33,24 +32,16 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
|
||||
HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
|
||||
throws ServletException, IOException {
|
||||
|
||||
log.info("JWT FILTER START uri={}", request.getRequestURI());
|
||||
|
||||
// HTTP 요청 헤더에서 JWT 토큰 꺼내기
|
||||
String token = resolveToken(request);
|
||||
|
||||
log.info("JWT TOKEN = {}", token);
|
||||
|
||||
// JWT 토큰을 검증하고, 인증된 사용자로 SecurityContext에 등록
|
||||
if (token != null && jwtTokenProvider.isValidToken(token)) {
|
||||
log.info("JWT TOKEN VALID");
|
||||
String username = jwtTokenProvider.getSubject(token);
|
||||
log.info("JWT USERNAME = {}", username);
|
||||
UserDetails userDetails = userDetailsService.loadUserByUsername(username);
|
||||
log.info("JWT AUTHORITIES = {}", userDetails.getAuthorities());
|
||||
UsernamePasswordAuthenticationToken authentication =
|
||||
new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());
|
||||
SecurityContextHolder.getContext().setAuthentication(authentication);
|
||||
log.info("JWT SECURITY CONTEXT SET");
|
||||
}
|
||||
|
||||
filterChain.doFilter(request, response);
|
||||
|
||||
@@ -21,7 +21,6 @@ import org.springframework.stereotype.Component;
|
||||
* <p>- Redis 사용 안 함 - ADMIN 예외 없음 (DB 매핑 기준) - 한 계정 = role 1개 - menu_url(prefix) 기반 API 접근 제어
|
||||
*/
|
||||
@Component
|
||||
@Log4j2
|
||||
@RequiredArgsConstructor
|
||||
public class MenuAuthorizationManager implements AuthorizationManager<RequestAuthorizationContext> {
|
||||
|
||||
@@ -60,15 +59,12 @@ public class MenuAuthorizationManager implements AuthorizationManager<RequestAut
|
||||
|
||||
for (MenuEntity menu : allowedMenus) {
|
||||
String baseUri = menu.getMenuUrl();
|
||||
log.info("MenuAuthorizationManager REQUEST = {}", requestPath);
|
||||
log.info("MenuAuthorizationManager BASE URI = {}", baseUri);
|
||||
|
||||
if (baseUri == null || baseUri.isBlank()) {
|
||||
continue;
|
||||
}
|
||||
|
||||
if (matchUri(baseUri, requestPath)) {
|
||||
log.info("MenuAuthorizationManager MATCH SUCCESS");
|
||||
return new AuthorizationDecision(true);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user