로그인 만들기

app/src/main/java/com/codesoom/assignment/common/auth/AuthenticationInterceptor.java

@@ -0,0 +1,57 @@
+package com.codesoom.assignment.common.auth;
+
+import com.codesoom.assignment.common.util.JwtUtil;
+import com.codesoom.assignment.domain.session.exception.TokenNotExistException;
+import org.springframework.http.HttpHeaders;
+import org.springframework.stereotype.Component;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+@Component
+public class AuthenticationInterceptor implements HandlerInterceptor {
+
+    private final JwtUtil jwtUtil;
+
+    public AuthenticationInterceptor(JwtUtil jwtUtil) {
+        this.jwtUtil = jwtUtil;
+    }
+
+    @Override
+    public boolean preHandle(final HttpServletRequest request,
+                             final HttpServletResponse response,
+                             final Object handler) throws Exception {
+        if (isNotHandlerMethod(handler) || isNotRequiredAuth(handler)) {
+            return true;
+        }
+
+        if (isNotExistAuthorization(request)) {
+            throw new TokenNotExistException();
+        }
+
+        validateAuthToken(request);
+
+        return true;
+    }
+
+    private void validateAuthToken(HttpServletRequest request) {
+        jwtUtil.validateAccessToken(request.getHeader(HttpHeaders.AUTHORIZATION));
+    }
+
+    private static boolean isNotExistAuthorization(HttpServletRequest request) {
+        return request.getHeader(HttpHeaders.AUTHORIZATION) == null;
+    }
+
+    private static boolean isNotHandlerMethod(Object handler) {
+        return !(handler instanceof HandlerMethod);
+    }
+
+    private boolean isNotRequiredAuth(Object handler) {
+        HandlerMethod handlerMethod = (HandlerMethod) handler;
+        Login auth = handlerMethod.getMethodAnnotation(Login.class);
+
+        return auth == null || !auth.required();
+    }
+}

app/src/main/java/com/codesoom/assignment/common/auth/Login.java

@@ -0,0 +1,13 @@
+package com.codesoom.assignment.common.auth;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+@Target(ElementType.METHOD)
+@Retention(RetentionPolicy.RUNTIME)
+public @interface Login {
+
+    boolean required() default true;
+}

app/src/main/java/com/codesoom/assignment/common/config/WebConfig.java

@@ -0,0 +1,25 @@
+package com.codesoom.assignment.common.config;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.HandlerInterceptor;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import java.util.List;
+
+@Configuration
+public class WebConfig implements WebMvcConfigurer {
+
+    private final List<HandlerInterceptor> interceptors;
+
+    public WebConfig(List<HandlerInterceptor> interceptors) {
+        this.interceptors = interceptors;
+    }
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        for (HandlerInterceptor interceptor : interceptors) {
+            registry.addInterceptor(interceptor);
+        }
+    }
+}

app/src/main/java/com/codesoom/assignment/common/util/JwtUtil.java

@@ -1,6 +1,7 @@
 package com.codesoom.assignment.common.util;
 
 import com.codesoom.assignment.domain.session.exception.InvalidTokenException;
+import com.codesoom.assignment.domain.session.exception.TokenNotExistException;
 import io.jsonwebtoken.Claims;
 import io.jsonwebtoken.Jwts;
 import io.jsonwebtoken.security.Keys;
@@ -12,6 +13,7 @@
 
 @Component
 public class JwtUtil {
+    private static final String ACCESS_TOKEN_TYPE = "Bearer";
     private final Key secretKey;
 
     public JwtUtil(@Value("${jwt.secret}") String secretKey) {
@@ -40,4 +42,16 @@ public Claims decode(String token) {
             throw new InvalidTokenException(token);
         }
     }
+
+    public void validateAccessToken(String authHeader) {
+        if (authHeader == null) {
+            throw new TokenNotExistException();
+        }
+
+        if (!authHeader.startsWith(ACCESS_TOKEN_TYPE)) {
+            throw new InvalidTokenException();
+        }
+
+        decode(authHeader.substring(ACCESS_TOKEN_TYPE.length()));
+    }
 }

app/src/main/java/com/codesoom/assignment/domain/session/exception/InvalidTokenException.java

@@ -1,6 +1,10 @@
 package com.codesoom.assignment.domain.session.exception;
 
-public class InvalidTokenException extends RuntimeException{
+public class InvalidTokenException extends RuntimeException {
+    public InvalidTokenException() {
+        super("토큰이 유효하지 않습니다");
+    }
+
     public InvalidTokenException(String token) {
         super("토큰이 유효하지 않습니다: " + token);
     }

app/src/main/java/com/codesoom/assignment/domain/session/exception/TokenNotExistException.java

@@ -0,0 +1,7 @@
+package com.codesoom.assignment.domain.session.exception;
+
+public class TokenNotExistException extends RuntimeException {
+    public TokenNotExistException() {
+        super("토큰이 존재하지 않습니다");
+    }
+}