jwt 미인증 logou, password
This commit is contained in:
@@ -44,9 +44,13 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
|
||||
String path = request.getServletPath();
|
||||
|
||||
// JWT 필터를 타지 않게 할 URL 패턴들
|
||||
return path.startsWith("/api/auth/signin") || path.startsWith("/api/auth/refresh");
|
||||
return path.startsWith("/api/auth/signin")
|
||||
|| path.startsWith("/api/auth/refresh")
|
||||
|| path.startsWith("/api/auth/logout")
|
||||
|| path.startsWith("/api/members/*/password");
|
||||
}
|
||||
|
||||
// /api/members/{memberId}/password
|
||||
private String resolveToken(HttpServletRequest request) {
|
||||
String bearer = request.getHeader("Authorization");
|
||||
if (bearer != null && bearer.startsWith("Bearer ")) {
|
||||
|
||||
Reference in New Issue
Block a user