인프런 커뮤니티 질문&답변

안녕하세요.

spring security 를 이용하여 회원가입을 하고 회원수정부분을 하고 있는 중입니다.

문제는 UserController.java 에서

Authentication authentication = authenticationManager.authenticate(new UsernamePasswordAuthenticationToken(userDto.getUsername(), userDto.getPassword()));
SecurityContextHolder.getContext().setAuthentication(authentication);

이 코드를 작성하면

error 메세지가 아래와 같이 뜹니다;;

2024-02-27T15:58:28.207+09:00 WARN 85046 --- [nio-8080-exec-2] .w.s.m.s.DefaultHandlerExceptionResolver : Resolved [org.springframework.web.HttpRequestMethodNotSupportedException: Request method 'PUT' is not supported]

수정페이지에서 버튼을 눌렀을 경우 js에서 put으로 잘보낸것같고 @PutMapping으로 잘 받은것 같은데 뭐가 문제일까요..?

UserController에서 위의 코드를 지우면 error메세지는 나오지않지만 authentication 객체정보가 변경되지않아 update.html에 변경된 정보로 나오지않고 있습니다.;;

update.html

<div class="row justify-content-center" sec:authorize="isAuthenticated()">
<section>
<div class="col-12 mb-30 text-center">
<h3>회원수정</h3>
</div>
<div class="col-12 mb-15">
<form>
<input type="text" name="id" Id="id" placeholder="id" th:value="${#authentication.principal.id}" >
<input type="text" name="role" Id="role" placeholder="role" th:value="${#authentication.principal.role}" >
<input type="text" name="provider" Id="provider" placeholder="provider" th:value="${#authentication.principal.provider}" >
<input type="text" name="providerId" Id="providerId" placeholder="providerId" th:value="${#authentication.principal.providerId}" >
<div class="form-group">
<label for="username">아이디</label>
<input type="text" name="username" Id="username" placeholder="id" th:value="${#authentication.principal.username}" pattern="[A-Za-z]+" >
</div>

<div class="form-group">
<label for="password">비밀번호</label>
<input type="password" name="password" id="password" placeholder="password" onkeyup="pwCheck()">
<div id="pw-result">
5자 이상이어야합니다.
</div>
</div>

<div class="form-group">
<label for="email">이메일</label>
<input type="email" name="email" id="email" placeholder="email" th:value="${#authentication.principal.emial}" readonly>
</div>

<div class="form-group">
<label for="email">닉네임</label>
<input type="text" name="nickname" id="nickname" placeholder="nickname" th:value="${#authentication.principal.nickname}" onkeyup="nicknameCheck()" required>
<div id="nickname-result">
3~8글자여야합니다.
</div>
</div>


</form>
<div class="text-center">
<button class="btn bg_03A3F1 color-fff" id="btn-update">회원수정</button>
</div>
</div>
</section>
</div>

update.js

let index = {
init: function(){

$("#btn-update").on("click", ()=>{ // function(){} , ()=>{} this를 바인딩하기 위해서!!
this.update();
});
},



update: function(){
//alert('user의 save함수 호출됨');
let data = {
id: $("#id").val(),
username: $("#username").val(),
password: $("#password").val(),
email: $("#email").val(),
nickname: $("#nickname").val(),
role: $("#role").val(),
provider: $("#provider").val(),
providerid: $("#providerid").val()
};

$.ajax({
type: "PUT",
url: "/update",
data: JSON.stringify(data), // http body데이터
contentType: "application/json; charset=utf-8",// body데이터가 어떤 타입인지(MIME)
dataType: "json" // 요청을 서버로해서 응답이 왔을 때 기본적으로 모든 것이 문자열 (생긴게 json이라면) => javascript오브젝트로 변경
}).done(function(resp){
alert("회원수정이 완료되었습니다.");
//console.log(resp);
location.href = "/";
}).fail(function(error){
alert(JSON.stringify(error));
});

},
}

index.init();

UserController.java

@RestControllerpublic class UserController {

@Autowired private UserService userService;

@Autowired private BCryptPasswordEncoder bCryptPasswordEncoder;


@Autowired private AuthenticationManager authenticationManager;

@PutMapping("/update")
public ResponseDto<Integer> update(@RequestBody UserDto userDto){
System.out.println(userDto);

String rawPW = userDto.getPassword();
String encPW = bCryptPasswordEncoder.encode(rawPW);
System.out.println("1");
userDto.setPassword(encPW);

userService.update(userDto);
System.out.println("2");

Authentication authentication = authenticationManager.authenticate(new UsernamePasswordAuthenticationToken(userDto.getUsername(), userDto.getPassword()));
SecurityContextHolder.getContext().setAuthentication(authentication);

// System.out.println("authentication 정보 : "+authentication); System.out.println("3");

return new ResponseDto<Integer>(HttpStatus.OK.value(), 1);//자바오브젝트를 JSON으로 변환해서 리턴 }
}

SecurityConfig.java

@Configuration //
@EnableWebSecurity // 스프링 시큐리티 필터가 스프링 필터체인에 등록
//@EnableGlobalMethodSecurity(securedEnabled = true,prePostEnabled = true)
@EnableMethodSecurity(securedEnabled = true)
public class SecurityConfig{

@Autowired
private PrincipalOauth2UserService principalOauth2UserService;

private final PrincipalDetailsService userDetailsService;

public SecurityConfig(PrincipalDetailsService userDetailsService) {
this.userDetailsService = userDetailsService;
}

@Bean
public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration)
throws Exception {
return authenticationConfiguration.getAuthenticationManager();
}

protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.userDetailsService(userDetailsService)
.passwordEncoder(encodePwd());
}


@Bean
public BCryptPasswordEncoder encodePwd() {
return new BCryptPasswordEncoder();
}

@Bean public LoginSuccessHandler loginSuccessHandler(){
return new LoginSuccessHandler();
}

@Bean
public LoginFailureHandler loginFailureHandler(){
return new LoginFailureHandler();
}



@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception{
http.csrf(CsrfConfigurer::disable).cors(Customizer.withDefaults());

http.formLogin((formLogin) ->
formLogin.loginPage("/loginForm").loginProcessingUrl("/login").successHandler(loginSuccessHandler()).failureHandler(loginFailureHandler()))
.authorizeHttpRequests(authorize ->
authorize
.requestMatchers("/admin/**").hasAnyRole("ADMIN") // /center/** url => admin 권한이 있는 사용자만 접근 가능
.anyRequest().permitAll() // 권한을 주지않은 url 이 아니면 접근 허용
).oauth2Login((oauth2) -> oauth2
.loginPage("/loginForm").userInfoEndpoint(userInfoEndpoint -> userInfoEndpoint
.userService(principalOauth2UserService)).successHandler(loginSuccessHandler()).failureHandler(loginFailureHandler())) ;



return http.build();
}

}

이렇게 작성이 되어있는 상태인데요.