Merge pull request 'jwt 미인증 logou, password' (#60) from feat/dev_251201 into develop

Reviewed-on: https://kamco.gitea.gs.dabeeo.com/dabeeo/kamco-dabeeo-backoffice/pulls/60
This commit is contained in:
2025-12-15 17:53:54 +09:00

View File

@@ -44,9 +44,13 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
String path = request.getServletPath();
// JWT 필터를 타지 않게 할 URL 패턴들
return path.startsWith("/api/auth/signin") || path.startsWith("/api/auth/refresh");
return path.startsWith("/api/auth/signin")
|| path.startsWith("/api/auth/refresh")
|| path.startsWith("/api/auth/logout")
|| path.startsWith("/api/members/*/password");
}
// /api/members/{memberId}/password
private String resolveToken(HttpServletRequest request) {
String bearer = request.getHeader("Authorization");
if (bearer != null && bearer.startsWith("Bearer ")) {