인프런 커뮤니티 질문&답변

@Configuration
@EnableWebSecurity
@RequiredArgsConstructor
public class SecurityConfig {

private final AuthenticationConfiguration authenticationConfiguration;

@Bean
protected SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.csrf().disable()
;
http
.headers().frameOptions().disable()
;
http
.authorizeHttpRequests(authorize -> {
try {
authorize
.requestMatchers(new IpAddressMatcher("127.0.0.1")).permitAll();
} catch (Exception e) {
e.printStackTrace();
}
}
)
;
http
.formLogin().disable()
.httpBasic().disable()
;
http
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
;
http
.addFilterBefore(new CustomAuthenticationFilter(authenticationManagerBean()), UsernamePasswordAuthenticationFilter.class)
;

return http.build();
}

@Bean
public AuthenticationManager authenticationManagerBean() throws Exception {
return authenticationConfiguration.getAuthenticationManager();
}

@Bean
public PasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
}

-- custofilter

@Slf4j
public class CustomAuthenticationFilter extends UsernamePasswordAuthenticationFilter {

private final AuthenticationManager authenticationManager;

public CustomAuthenticationFilter(AuthenticationManager authenticationManager) {
this.authenticationManager = authenticationManager;
setFilterProcessesUrl("/login"); // 로그인 경로 설정
}


@Override
public Authentication attemptAuthentication(HttpServletRequest request,
HttpServletResponse response) throws AuthenticationException {
try {
RequestLogin requestLogin = new ObjectMapper().readValue(request.getInputStream(), RequestLogin.class);

UsernamePasswordAuthenticationToken authenticationToken =
new UsernamePasswordAuthenticationToken(requestLogin.getEmail(), requestLogin.getPassword());
Authentication authenticate = getAuthenticationManager().authenticate(authenticationToken);

AccountContext principal = (AccountContext) authenticate.getPrincipal();
return authenticate;

} catch (IOException e) {
e.printStackTrace();
throw new RuntimeException(e);
}
}

@Override
protected void successfulAuthentication(HttpServletRequest request,
HttpServletResponse response,
FilterChain chain,
Authentication authResult) throws IOException, ServletException {
super.successfulAuthentication(request, response, chain, authResult);
}

@Override
public AuthenticationManager getAuthenticationManager() {
return authenticationManager;
}
}

-- customuserdetailservice
@Service
@RequiredArgsConstructor
public class CustomUserDetailService implements UserDetailsService {

private final UserRepository userRepository;

@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
UserEntity userEntity = userRepository.findByEmail(username).orElseThrow(
() -> new UsernameNotFoundException("user not found exception"));
return new AccountContext(userEntity, List.of(new SimpleGrantedAuthority("ROLE_USER")));
}
}