[feat] #9 - 구글 소셜 로그인 기능 구현

build.gradle

@@ -28,6 +28,17 @@ dependencies {
 	// Security
 	implementation 'org.springframework.boot:spring-boot-starter-security'
 
+    // OAuth
+    implementation 'org.springframework.boot:spring-boot-starter-oauth2-client'
+
+    // Redis
+    implementation 'org.springframework.boot:spring-boot-starter-data-redis'
+
+    // Jwt
+    implementation 'io.jsonwebtoken:jjwt-api:0.12.6'
+    runtimeOnly 'io.jsonwebtoken:jjwt-impl:0.12.6'
+    runtimeOnly 'io.jsonwebtoken:jjwt-jackson:0.12.6'
+
 	// Validation
 	implementation 'org.springframework.boot:spring-boot-starter-validation'
 

src/main/java/com/Timo/Timo/domain/user/entity/User.java

@@ -0,0 +1,50 @@
+package com.Timo.Timo.domain.user.entity;
+
+import com.Timo.Timo.domain.user.enums.Provider;
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.EnumType;
+import jakarta.persistence.Enumerated;
+import jakarta.persistence.GeneratedValue;
+import jakarta.persistence.GenerationType;
+import jakarta.persistence.Id;
+import jakarta.persistence.Table;
+import lombok.AccessLevel;
+import lombok.Builder;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+@Entity
+@Table(name = "users")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class User {
+
+  @Id
+  @GeneratedValue(strategy = GenerationType.IDENTITY)
+  private Long id;
+
+  @Column(nullable = false, unique = true)
+  private String email;
+
+  private String name;
+  private String imageUrl;
+
+  @Enumerated(EnumType.STRING)
+  @Column(nullable = false)
+  private Provider provider;
+
+  @Builder
+  private User(String email, String name, String imageUrl, Provider provider) {
+    this.email = email;
+    this.name = name;
+    this.imageUrl = imageUrl;
+    this.provider = provider;
+  }
+
+  public void update(String name, String imageUrl){
+    this.name = name;
+    this.imageUrl = imageUrl;
+  }
+
+}

src/main/java/com/Timo/Timo/domain/user/enums/Provider.java

@@ -0,0 +1,5 @@
+package com.Timo.Timo.domain.user.enums;
+
+public enum Provider {
+  GOOGLE
+}

src/main/java/com/Timo/Timo/domain/user/repository/UserRepository.java

@@ -0,0 +1,9 @@
+package com.Timo.Timo.domain.user.repository;
+
+import com.Timo.Timo.domain.user.entity.User;
+import java.util.Optional;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+public interface UserRepository extends JpaRepository<User, Long> {
+  Optional<User> findByEmail(String email);
+}

src/main/java/com/Timo/Timo/global/auth/controller/AuthController.java

@@ -0,0 +1,51 @@
+package com.Timo.Timo.global.auth.controller;
+
+import com.Timo.Timo.global.auth.handler.AuthErrorResponseWriter;
+import com.Timo.Timo.global.auth.service.AuthCodeService;
+import com.Timo.Timo.global.exception.code.ErrorCode;
+import com.Timo.Timo.global.jwt.provider.JwtTokenProvider;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.util.Map;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.MediaType;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/api/auth")
+@RequiredArgsConstructor
+public class AuthController {
+
+  private final AuthCodeService authCodeService;
+  private final JwtTokenProvider jwtTokenProvider;
+  private final AuthErrorResponseWriter authErrorResponseWriter;
+  private final ObjectMapper objectMapper;
+
+  @GetMapping("/token")
+  public void token(
+      @RequestParam String code,
+      HttpServletRequest request,
+      HttpServletResponse response
+  ) throws IOException {
+
+    String userId = authCodeService.getAndDelete(code);
+
+    if (userId == null) {
+      authErrorResponseWriter.write(response, ErrorCode.INVALID_AUTH_CODE, request.getRequestURI());
+      return;
+    }
+
+    String accessToken = jwtTokenProvider.generateAccessToken(Long.parseLong(userId));
+
+    response.setContentType(MediaType.APPLICATION_JSON_VALUE);
+    response.setCharacterEncoding("UTF-8");
+    response.getWriter().write(
+        objectMapper.writeValueAsString(Map.of("accessToken", accessToken))
+    );
+  }
+}

src/main/java/com/Timo/Timo/global/auth/dto/CustomUserDetails.java

@@ -0,0 +1,49 @@
+package com.Timo.Timo.global.auth.dto;
+
+import com.Timo.Timo.domain.user.entity.User;
+import java.util.Collection;
+import java.util.List;
+import java.util.Map;
+import lombok.Getter;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.oauth2.core.user.OAuth2User;
+
+@Getter
+public class CustomUserDetails implements OAuth2User, UserDetails {
+
+  private final User user;
+  private final Map<String, Object> attributes;
+
+  public CustomUserDetails(User user, Map<String, Object> attributes){
+    this.user = user;
+    this.attributes = attributes;
+  }
+
+  @Override
+  public Map<String, Object> getAttributes() {
+    return attributes;
+  }
+
+  @Override
+  public String getName() {
+    return user.getEmail();
+  }
+
+  @Override
+  public Collection<? extends GrantedAuthority> getAuthorities() {
+    return List.of(new SimpleGrantedAuthority("ROLE_USER"));
+  }
+
+  @Override
+  public String getPassword(){
+    return null;
+  }
+
+  @Override
+  public String getUsername(){
+    return user.getEmail();
+  }
+
+}

src/main/java/com/Timo/Timo/global/auth/handler/AuthErrorResponseWriter.java

@@ -0,0 +1,36 @@
+package com.Timo.Timo.global.auth.handler;
+
+import com.Timo.Timo.global.exception.code.ErrorCode;
+import com.Timo.Timo.global.exception.dto.ErrorDto;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.time.LocalDateTime;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.MediaType;
+import org.springframework.stereotype.Component;
+
+@Component
+@RequiredArgsConstructor
+public class AuthErrorResponseWriter {
+
+  private final ObjectMapper objectMapper;
+
+  public void write(HttpServletResponse response, ErrorCode errorCode, String path)
+      throws IOException {
+
+    ErrorDto errorDto = new ErrorDto(
+        LocalDateTime.now(),
+        errorCode.getHttpStatus().value(),
+        errorCode.getCode(),
+        errorCode.getMessage(),
+        path
+    );
+
+    response.setStatus(errorCode.getHttpStatus().value());
+    response.setContentType(MediaType.APPLICATION_JSON_VALUE);
+    response.setCharacterEncoding("UTF-8");
+    response.getWriter().write(objectMapper.writeValueAsString(errorDto));
+  }
+
+}

src/main/java/com/Timo/Timo/global/auth/handler/JwtAuthenticationEntryPoint.java

@@ -0,0 +1,26 @@
+package com.Timo.Timo.global.auth.handler;
+
+import com.Timo.Timo.global.exception.code.ErrorCode;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.AuthenticationEntryPoint;
+import org.springframework.stereotype.Component;
+
+@Component
+@RequiredArgsConstructor
+public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint {
+
+  private final AuthErrorResponseWriter authErrorResponseWriter;
+
+  @Override
+  public void commence(
+      HttpServletRequest request,
+      HttpServletResponse response,
+      AuthenticationException authException
+  ) throws IOException {
+    authErrorResponseWriter.write(response, ErrorCode.UNAUTHORIZED, request.getRequestURI());
+  }
+}

src/main/java/com/Timo/Timo/global/auth/handler/OAuthFailureHandler.java

@@ -0,0 +1,26 @@
+package com.Timo.Timo.global.auth.handler;
+
+import com.Timo.Timo.global.exception.code.ErrorCode;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler;
+import org.springframework.stereotype.Component;
+
+@Component
+@RequiredArgsConstructor
+public class OAuthFailureHandler extends SimpleUrlAuthenticationFailureHandler {
+
+  private final AuthErrorResponseWriter authErrorResponseWriter;
+
+  @Override
+  public void onAuthenticationFailure(
+      HttpServletRequest request,
+      HttpServletResponse response,
+      AuthenticationException exception
+  ) throws IOException {
+    authErrorResponseWriter.write(response, ErrorCode.OAUTH_LOGIN_FAILED, request.getRequestURI());
+  }
+}

src/main/java/com/Timo/Timo/global/auth/handler/OAuthSuccessHandler.java

@@ -0,0 +1,64 @@
+package com.Timo.Timo.global.auth.handler;
+
+import com.Timo.Timo.global.auth.dto.CustomUserDetails;
+import com.Timo.Timo.global.auth.service.AuthCodeService;
+import com.Timo.Timo.global.auth.service.RefreshTokenService;
+import com.Timo.Timo.global.jwt.provider.JwtTokenProvider;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.time.Duration;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.ResponseCookie;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler;
+import org.springframework.stereotype.Component;
+import org.springframework.web.util.UriComponentsBuilder;
+
+@Component
+@RequiredArgsConstructor
+public class OAuthSuccessHandler extends SimpleUrlAuthenticationSuccessHandler {
+
+  private final JwtTokenProvider jwtTokenProvider;
+  private final RefreshTokenService refreshTokenService;
+  private final AuthCodeService authCodeService;
+
+  @Value("${app.oauth2.redirect-uri}")
+  private String redirectUri;
+
+  @Value("${app.auth.cookie-secure:false}")
+  private boolean cookieSecure;
+
+  @Override
+  public void onAuthenticationSuccess(
+      HttpServletRequest request,
+      HttpServletResponse response,
+      Authentication authentication
+  ) throws IOException {
+
+    CustomUserDetails userDetails = (CustomUserDetails) authentication.getPrincipal();
+    Long userId = userDetails.getUser().getId();
+
+    String refreshToken = jwtTokenProvider.generateRefreshToken(userId);
+    refreshTokenService.save(String.valueOf(userId), refreshToken);
+
+    ResponseCookie refreshCookie = ResponseCookie.from("refreshToken", refreshToken)
+        .httpOnly(true)
+        .secure(cookieSecure)
+        .path("/")
+        .maxAge(Duration.ofSeconds(jwtTokenProvider.getRefreshTokenExpiry()))
+        .sameSite("Strict")
+        .build();
+    response.addHeader(HttpHeaders.SET_COOKIE, refreshCookie.toString());
+
+    String code = authCodeService.generateAndSave(String.valueOf(userId));
+
+    String redirectUrl = UriComponentsBuilder.fromUriString(redirectUri)
+        .queryParam("code", code)
+        .build().toUriString();
+
+    getRedirectStrategy().sendRedirect(request, response, redirectUrl);
+  }
+}

src/main/java/com/Timo/Timo/global/auth/service/AuthCodeService.java

@@ -0,0 +1,32 @@
+package com.Timo.Timo.global.auth.service;
+
+import java.util.UUID;
+import java.util.concurrent.TimeUnit;
+import lombok.RequiredArgsConstructor;
+import org.springframework.data.redis.core.RedisTemplate;
+import org.springframework.stereotype.Service;
+
+@Service
+@RequiredArgsConstructor
+public class AuthCodeService {
+
+  private final RedisTemplate<String, String> redisTemplate;
+
+  private static final String KEY_PREFIX = "auth:code:";
+  private static final long CODE_EXPIRY_SECONDS = 30L;
+
+  public String generateAndSave(String userId) {
+    String code = UUID.randomUUID().toString();
+    redisTemplate.opsForValue().set(
+        KEY_PREFIX + code,
+        userId,
+        CODE_EXPIRY_SECONDS,
+        TimeUnit.SECONDS
+    );
+    return code;
+  }
+
+  public String getAndDelete(String code) {
+    return redisTemplate.opsForValue().getAndDelete(KEY_PREFIX + code);
+  }
+}