jwt 미인증 logou, password

This commit is contained in:
2025-12-15 17:53:24 +09:00
parent 5d0943f8c1
commit 39ef86b218

View File

@@ -44,9 +44,13 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
String path = request.getServletPath();
// JWT 필터를 타지 않게 할 URL 패턴들
return path.startsWith("/api/auth/signin") || path.startsWith("/api/auth/refresh");
return path.startsWith("/api/auth/signin")
|| path.startsWith("/api/auth/refresh")
|| path.startsWith("/api/auth/logout")
|| path.startsWith("/api/members/*/password");
}
// /api/members/{memberId}/password
private String resolveToken(HttpServletRequest request) {
String bearer = request.getHeader("Authorization");
if (bearer != null && bearer.startsWith("Bearer ")) {