Kim hwan jun

.gitignore

@@ -0,0 +1 @@
+/.idea/

README.md

@@ -1,2 +1,14 @@
 # Backend
 TEAM2 백엔드 레포지토리입니다.
+
+## 사용기술
+- SpringBoot
+- Spring Data JPA
+- Spring Security
+- MySQL
+- JWT + OAuth2.0
+- NCP Server
+- NCP Object Storage
+
+## 아키텍처
+<img width="572" alt="프로젝트 아키텍처" src="https://github.com/B612-TEAM2/Backend/assets/121341289/326d2316-e5af-4afd-b598-d4db90ad9614">

ping/.gitignore

@@ -16,7 +16,6 @@ build/
 bin/
 !**/src/main/**/bin/
 !**/src/test/**/bin/
-
 ### IntelliJ IDEA ###
 .idea
 *.iws
@@ -26,13 +25,16 @@ out/
 !**/src/main/**/out/
 !**/src/test/**/out/
 application.yml
+JwtProperties.java
+OAuthProperties.java
+NcpObjectStorageConfig.java
 
 ### NetBeans ###
 /nbproject/private/
 /nbbuild/
 /dist/
 /nbdist/
 /.nb-gradle/
-
+frontend/
 ### VS Code ###
 .vscode/

ping/build.gradle

@@ -26,13 +26,24 @@ dependencies {
 	implementation 'org.springframework.boot:spring-boot-starter-oauth2-client'
 	implementation 'org.springframework.boot:spring-boot-starter-security'
 	implementation 'org.springframework.boot:spring-boot-starter-web'
+	implementation group: 'com.auth0', name: 'java-jwt', version: '4.3.0'
+	implementation 'org.springframework.boot:spring-boot-devtools'
+	implementation 'org.springframework.boot:spring-boot-starter-validation'
+	implementation 'com.github.gavlyukovskiy:p6spy-spring-boot-starter:1.5.6'
+	implementation 'org.apache.httpcomponents:httpclient:4.5.13'
 	compileOnly 'org.projectlombok:lombok'
 	runtimeOnly 'com.mysql:mysql-connector-j'
 	annotationProcessor 'org.projectlombok:lombok'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	testImplementation 'org.springframework.security:spring-security-test'
+	implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310'
+	implementation 'com.fasterxml.jackson.core:jackson-databind'
 }
 
 tasks.named('test') {
 	useJUnitPlatform()
 }
+
+bootJar {
+	duplicatesStrategy = DuplicatesStrategy.EXCLUDE
+}

ping/src/main/java/com/b6122/ping/ImgPathProperties.java

@@ -0,0 +1,6 @@
+package com.b6122.ping;
+
+public interface ImgPathProperties {
+
+    String postImgPath = "C:\\ping\\post\\image";
+}

ping/src/main/java/com/b6122/ping/PingApplication.java

@@ -2,10 +2,19 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.context.annotation.Bean;
+import org.springframework.data.jpa.repository.config.EnableJpaAuditing;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 
 @SpringBootApplication
+@EnableJpaAuditing
 public class PingApplication {
 
+	@Bean
+	public BCryptPasswordEncoder passwordEncoder() {
+		return new BCryptPasswordEncoder();
+	}
+
 	public static void main(String[] args) {
 		SpringApplication.run(PingApplication.class, args);
 	}

ping/src/main/java/com/b6122/ping/auth/PrincipalDetails.java

@@ -0,0 +1,57 @@
+package com.b6122.ping.auth;
+
+import com.b6122.ping.domain.User;
+import lombok.Data;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.ArrayList;
+import java.util.Collection;
+
+@Data
+public class PrincipalDetails implements UserDetails {
+
+    private User user;
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        Collection<GrantedAuthority> authorities = new ArrayList<>();
+        authorities.add(new SimpleGrantedAuthority(user.getRole().toString())); // Enum을 문자열로 변환하여 SimpleGrantedAuthority 생성
+        return authorities;
+    }
+
+    @Override
+    public String getPassword() {
+        return null;
+    }
+
+    @Override
+    public String getUsername() {
+        return null;
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return true;
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return true;
+    }
+
+    public PrincipalDetails(User user) {
+        this.user = user;
+    }
+}

ping/src/main/java/com/b6122/ping/auth/PrincipalDetailsService.java

@@ -0,0 +1,26 @@
+package com.b6122.ping.auth;
+
+import com.b6122.ping.domain.User;
+import com.b6122.ping.repository.datajpa.UserDataRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+// http://localhost:8080/login을 통해 로그인을 안함(disable 해놔서) 따라서 아래 서비스가 동작하기 위한
+// 필터를 하나 만들어야 된다(JwtAuthenticationFilter)
+// 근데 우리 서비스는 ~/login을 통해 요청할 일이 없기 때문에, JwtAuthenticationFilter도 사실상 필요가 없다
+// jwt 토큰 발급 후 JwtAuthorizationFilter에서 시큐리티 세션에 Authentication 객체를 저장하여 권한 관리를 하고 있다.
+@Service
+@RequiredArgsConstructor
+public class PrincipalDetailsService implements UserDetailsService {
+
+    private final UserDataRepository userDataRepository;
+
+    @Override
+    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
+        User userEntity = userDataRepository.findByUsername(username).orElseThrow();
+        return new PrincipalDetails(userEntity);
+    }
+}

ping/src/main/java/com/b6122/ping/config/CorsConfig.java

@@ -0,0 +1,25 @@
+package com.b6122.ping.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
+import org.springframework.web.filter.CorsFilter;
+
+@Configuration
+public class CorsConfig {
+
+    @Bean
+    public CorsFilter corsFilter() {
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        CorsConfiguration config = new CorsConfiguration();
+        config.setAllowCredentials(true); // 내 서버가 응답을 할 때 json을 자바스크립트에서 처리할 수 있게 할지를 설정
+//        config.addAllowedOriginPattern("http://61.97.185.12");
+        config.addAllowedOriginPattern("http://localhost:3000");
+        config.addAllowedHeader("*"); // 모든 header에 응답을 허용
+        config.addAllowedMethod("*"); // 모든 http method를 허용
+        source.registerCorsConfiguration("/**", config);
+        return new CorsFilter(source);
+
+    }
+}

ping/src/main/java/com/b6122/ping/config/SecurityConfig.java

@@ -0,0 +1,54 @@
+package com.b6122.ping.config;
+
+import com.b6122.ping.config.jwt.JwtAuthorizationFilter;
+import com.b6122.ping.repository.datajpa.UserDataRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.web.SecurityFilterChain;
+
+
+@Configuration
+@EnableWebSecurity
+@RequiredArgsConstructor
+public class SecurityConfig {
+
+    private final CorsConfig corsConfig;
+    private final UserDetailsService userDetailsService;
+    private final UserDataRepository userDataRepository;
+
+    @Bean
+    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
+
+        //AuthenticaionManager 생성
+        AuthenticationManagerBuilder sharedObject = http.getSharedObject(AuthenticationManagerBuilder.class);
+        sharedObject.userDetailsService(this.userDetailsService); //이 userDetailsService와 PrincipalDetailsService에서 상속받는 인터페이스는 서로 같음.
+        AuthenticationManager authenticationManager = sharedObject.build();
+        http.authenticationManager(authenticationManager);
+        //세션 만들지 않기.
+        http
+                .addFilter(corsConfig.corsFilter())
+                .csrf(AbstractHttpConfigurer::disable)
+                .sessionManagement((sessionManagement) -> sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
+                .formLogin((formLogin) -> formLogin.disable())
+//                .addFilter(new JwtAuthenticationFilter((authenticationManager)))
+                .addFilter((new JwtAuthorizationFilter(authenticationManager, userDataRepository)))
+                .httpBasic((httpBasic) -> httpBasic.disable()) //Bearer 방식을 사용하기 위해 basic 인증 비활성화
+                .authorizeHttpRequests((authorize) ->
+                        authorize
+                                .requestMatchers("/api/oauth/jwt/**").permitAll()
+                                .requestMatchers("/admin/**").hasAnyRole("ADMIN")
+                                .requestMatchers("/**").hasAnyRole("ADMIN", "USER")
+                                .anyRequest().authenticated());
+
+
+        return http.build();
+    }
+}