From 1dcc0fff6c4f3f1812c459931f2bf563d475a033 Mon Sep 17 00:00:00 2001 From: teddy Date: Thu, 4 Dec 2025 18:07:42 +0900 Subject: [PATCH] =?UTF-8?q?=EB=A1=9C=EA=B7=B8=EC=9D=B8=20=EA=B8=B0?= =?UTF-8?q?=EB=8A=A5=20=EC=B6=94=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../cd/kamcoback/config/SecurityConfig.java | 14 +++----------- .../cd/kamcoback/config/SwaggerConfig.java | 18 +++++++++++------- 2 files changed, 14 insertions(+), 18 deletions(-) diff --git a/src/main/java/com/kamco/cd/kamcoback/config/SecurityConfig.java b/src/main/java/com/kamco/cd/kamcoback/config/SecurityConfig.java index e4a7a0ea..f0b5acf9 100644 --- a/src/main/java/com/kamco/cd/kamcoback/config/SecurityConfig.java +++ b/src/main/java/com/kamco/cd/kamcoback/config/SecurityConfig.java @@ -12,6 +12,7 @@ import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; import org.springframework.security.config.http.SessionCreationPolicy; import org.springframework.security.web.SecurityFilterChain; +import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; import org.springframework.web.cors.CorsConfiguration; import org.springframework.web.cors.CorsConfigurationSource; import org.springframework.web.cors.UrlBasedCorsConfigurationSource; @@ -26,7 +27,7 @@ public class SecurityConfig { @Bean public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { - /* + http.csrf(csrf -> csrf.disable()) // CSRF 보안 기능 비활성화 .sessionManagement( sm -> @@ -51,16 +52,7 @@ public class SecurityConfig { jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter .class) // 요청 들어오면 먼저 JWT 토큰 검사 후 security context 에 사용자 정보 저장. -*/ - http.csrf(csrf -> csrf.disable()) - .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) - .formLogin(form -> form.disable()) - .httpBasic(basic -> basic.disable()) - .logout(logout -> logout.disable()) - .authenticationProvider(customAuthenticationProvider) - .authorizeHttpRequests( - auth -> auth.anyRequest().permitAll() - ); + ; return http.build(); diff --git a/src/main/java/com/kamco/cd/kamcoback/config/SwaggerConfig.java b/src/main/java/com/kamco/cd/kamcoback/config/SwaggerConfig.java index 1290b4c7..b540c026 100644 --- a/src/main/java/com/kamco/cd/kamcoback/config/SwaggerConfig.java +++ b/src/main/java/com/kamco/cd/kamcoback/config/SwaggerConfig.java @@ -1,12 +1,16 @@ package com.kamco.cd.kamcoback.config; -//@Configuration -//@SecurityScheme( -// name = "BearerAuth", -// type = SecuritySchemeType.HTTP, -// scheme = "bearer", -// bearerFormat = "JWT" -//) +import io.swagger.v3.oas.annotations.enums.SecuritySchemeType; +import io.swagger.v3.oas.annotations.security.SecurityScheme; +import org.springframework.context.annotation.Configuration; + +@Configuration +@SecurityScheme( + name = "BearerAuth", + type = SecuritySchemeType.HTTP, + scheme = "bearer", + bearerFormat = "JWT" +) public class SwaggerConfig { }