로그인 성공 후 어떻게 진행되는지 이해가 안갑니다.

@Override

protected void successfulAuthentication(HttpServletRequest req, HttpServletResponse res, FilterChain chain,

Authentication auth) throws IOException, ServletException {

String userName = ((User) auth.getPrincipal()).getUsername();

UserDto userDetails = userService.getUserDetailsByEmail(userName);

byte[] secretKeyBytes = Base64.getEncoder().encode(environment.getProperty("token.secret").getBytes());

SecretKey secretKey = Keys.hmacShaKeyFor(secretKeyBytes);

Instant now = Instant.now();

String token = Jwts.builder()

.subject(userDetails.getUserId())

.expiration(Date.from(now.plusMillis(Long.parseLong(environment.getProperty("token.expiration_time")))))

.issuedAt(Date.from(now))

.signWith(secretKey)

.compact();

res.addHeader("token", token);

res.addHeader("userId", userDetails.getUserId());

}

여기서 로그인 성공 후 토큰이 발급된 뒤에

@Component

@Slf4j

public class AuthorizationHeaderFilter extends AbstractGatewayFilterFactory<AuthorizationHeaderFilter.Config> {

Environment env;

public AuthorizationHeaderFilter(Environment env) {

super(Config.class);

this.env = env;

}

public static class Config {

// Put configuration properties here

}

@Override

public GatewayFilter apply(Config config) {

return (exchange, chain) -> {

ServerHttpRequest request = exchange.getRequest();

if (!request.getHeaders().containsKey(HttpHeaders.AUTHORIZATION)) {

return onError(exchange, "No authorization header", HttpStatus.UNAUTHORIZED);

}

HttpHeaders headers = request.getHeaders();

Set<String> keys = headers.keySet();

log.info(">>>");

keys.stream().forEach(v -> {

log.info(v + "=" + request.getHeaders().get(v));

});

log.info("<<<");

String authorizationHeader = request.getHeaders().get(HttpHeaders.AUTHORIZATION).get(0);

String jwt = authorizationHeader.replace("Bearer", "");

// Create a cookie object

// ServerHttpResponse response = exchange.getResponse();

// ResponseCookie c1 = ResponseCookie.from("my_token", "test1234").maxAge(60 60 24).build();

// response.addCookie(c1);

if (!isJwtValid(jwt)) {

return onError(exchange, "JWT token is not valid", HttpStatus.UNAUTHORIZED);

}

return chain.filter(exchange);

};

}

private Mono<Void> onError(ServerWebExchange exchange, String err, HttpStatus httpStatus) {

ServerHttpResponse response = exchange.getResponse();

response.setStatusCode(httpStatus);

log.error(err);

byte[] bytes = "The requested token is invalid.".getBytes(StandardCharsets.UTF_8);

DataBuffer buffer = exchange.getResponse().bufferFactory().wrap(bytes);

return response.writeWith(Flux.just(buffer));

// return response.setComplete();

}

private boolean isJwtValid(String jwt) {

byte[] secretKeyBytes = Base64.getEncoder().encode(env.getProperty("token.secret").getBytes());

SecretKey signingKey = new SecretKeySpec(secretKeyBytes, SignatureAlgorithm.HS512.getJcaName());

boolean returnValue = true;

String subject = null;

try {

JwtParser jwtParser = Jwts.parserBuilder()

.setSigningKey(signingKey)

.build();

subject = jwtParser.parseClaimsJws(jwt).getBody().getSubject();

} catch (Exception ex) {

returnValue = false;

}

if (subject == null || subject.isEmpty()) {

returnValue = false;

}

return returnValue;

}
여기로 넘어 오는 게 맞나요?

그리고 그 뒤에 어떻게 진행되는지 설명 부탁드립니다!!