Spring Security를 이용한 인증/인가 구현

@Configuration
@EnableWebSecurity
@RequiredArgsConstructor
public class SecurityConfig {

    @Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
        /**
        	중간 생략
        */
        
        http
            .logout()
            .logoutUrl("/api/logout")
            .logoutSuccessHandler(new CustomLogoutHandler(refreshTokenRepository));

        http
            .authorizeRequests()
            .antMatchers(securityConstant().USER_ROLE_PERMIT_PATHS).hasRole(SecurityConstant.USER_ROLE)
            .anyRequest().denyAll();

        http.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
        http.addFilterAfter(jwtAuthorizationFilter, JwtAuthenticationFilter.class);

        return http.build();
    }

public JwtAuthenticationFilter(RefreshTokenRepository refreshTokenRepository, MemberSkillRepository memberSkillRepository) {
        this.refreshTokenRepository = refreshTokenRepository;
        this.memberSkillRepository = memberSkillRepository;
        setFilterProcessesUrl("/api/login");
}

@Override
public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws WrongLoginException {
	try {
	    // form으로 넘어온 값으로 member 객체를 생성
	    Member member = new ObjectMapper().readValue(request.getReader(), Member.class);
	
	    UsernamePasswordAuthenticationToken userToken =
		    new UsernamePasswordAuthenticationToken(member.getEmail(), member.getPassword());
	
	    this.setDetails(request, userToken);
	
	    // AuthenticationManager 에 인증을 위임한다.
	    return getAuthenticationManager().authenticate(userToken);
	} catch (IOException e) {
	    throw new AuthenticationServiceException("아이디와 비밀번호를 올바르게 입력해주세요.");
	}
}

@Override
protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain,
				    Authentication authResult) throws IOException, ServletException {
	// 1. 로그인 성공된 유저 조회
	Member member = ((CustomMemberDetails) authResult.getPrincipal()).getMember();
	
	// 2. Refresh Token DB 저장 (해당 유저의 리프레시 토큰이 이미 존재한다면, 삭제 후 저장)
	String refreshToken = JwtUtil.createRefreshToken(member);
	Long refreshTokenId = saveRefreshToken(member, refreshToken);
	
	// 3. AccessToken 발급
	String accessToken = JwtUtil.createAccessToken(member, refreshTokenId);
	
	LoginResponse loginResponse = new LoginResponse(accessToken);
	
	ResponseUtil.createResponseBody(response, loginResponse, HttpStatus.OK);
}

@Override
protected void unsuccessfulAuthentication(HttpServletRequest request, HttpServletResponse response, AuthenticationException failed) throws IOException, ServletException {
	BaseErrorResponse errorResponse = new BaseErrorResponse("email, password 가 일치하지 않습니다.");
	ResponseUtil.createResponseBody(response, errorResponse, HttpStatus.BAD_REQUEST);
}

@RequiredArgsConstructor
public class JwtAuthenticationProvider implements AuthenticationProvider {

    private final CustomMemberDetailsService customMemberDetailsService;
    private final BCryptPasswordEncoder passwordEncoder;

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        UsernamePasswordAuthenticationToken token = (UsernamePasswordAuthenticationToken) authentication;

        String email = token.getName();
        String password = token.getCredentials().toString();

        CustomMemberDetails savedMember = (CustomMemberDetails) customMemberDetailsService.loadUserByUsername(email);

        if (!passwordEncoder.matches(password, savedMember.getPassword())) {
            throw new BadCredentialsException("로그인 정보가 올바르지 않습니다.");
        }

        return new UsernamePasswordAuthenticationToken(savedMember, password, savedMember.getAuthorities());
    }

    @Override
    public boolean supports(Class<?> authentication) {
        return authentication.equals(UsernamePasswordAuthenticationToken.class);
    }
}

@Getter
public class CustomMemberDetails implements UserDetails {

    private Member member;

    public CustomMemberDetails(Member member) {
        this.member = member;
    }

    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        Collection<GrantedAuthority> authorities = new ArrayList<>();

        Role role = member.getRoles();
        authorities.add(new SimpleGrantedAuthority(role.name()));

        return authorities;
    }
}

@Service
@RequiredArgsConstructor
public class CustomMemberDetailsService implements UserDetailsService {
    private final MemberRepository memberRepository;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        return memberRepository.findByEmailAndProvider(username, "normal")
                .map(CustomMemberDetails::new)
                .orElseThrow(() -> new UsernameNotFoundException("사용자를 찾을 수 없습니다. 이메일: " + username));
    }
}