Merge Dev into Main#144
Merged
Merged
Conversation
- 만료되거나 유효하지 않은 JWT 토큰을 헤더에 포함하여 API를 요청할 경우, JwtAuthenticationFilter가 예외를 발생시켜 permitAll()로 지정된 경로까지 접근을 차단하는 문제가 있었음. - 필터 로직을 수정하여, 토큰 검증에 실패하더라도 요청을 즉시 차단하지 않고 다음 필터 체인으로 넘어가도록 변경함. - 이를 통해 익명 사용자는 토큰 유효성과 관계없이 permitAll() 경로에 정상적으로 접근할 수 있게 됨.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
연관된 이슈
작업 내용