질문이 있습니당.

질문이 있습니당.

BasicAuthenticationFilter는 인증이 필요한 주소로 요청했을 때만 실행된다고 하셨는데

/home 으로 요청을 해도 doFilterInternal가 실행되는 것 같습니다. 제가 잘 못 이해한것인지 해서 질문드립니다..!

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.addFilterBefore(new MyFilter3(), SecurityContextPersistenceFilter.class);
    http.csrf().disable();
    http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
            .and()
            .addFilter(corsFilter) 
            .formLogin().disable()
            .httpBasic().disable()
            .addFilter(new JwtAuthenticationFilter(authenticationManager())) 
            .addFilter(new JwtAuthorizationFilter(authenticationManager(), userRepository))
            .authorizeRequests()
            .antMatchers("/api/v1/user/**")
            .access("hasRole('ROLE_USER') or hasRole('ROLE_MANAGER') or hasRole('ROLE_ADMIN')")
            .antMatchers("/api/v1/manager/**")
            .access("hasRole('ROLE_MANAGER') or hasRole('ROLE_ADMIN')")
            .antMatchers("/api/v1/admin/**")
            .access("hasRole('ROLE_ADMIN')")
            .anyRequest().permitAll(); 
}

@Slf4j
public class JwtAuthorizationFilter extends BasicAuthenticationFilter {
    
    private UserRepository userRepository;

    public JwtAuthorizationFilter(AuthenticationManager authenticationManager, UserRepository userRepository) {
        super(authenticationManager);
        this.userRepository = userRepository;
    }

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws IOException, ServletException {
        log.info("인증이나 권한이 필요한 주소로 요청됨.");

http://localhost:7979/home 요청 => 

2022-05-13 2022-05-13 15:04:12.889  INFO 9192 --- [nio-7979-exec-5] com.cos.jwt.filter.MyFilter3             : MyFilter3 호출
2022-05-13 15:04:12.889  INFO 9192 --- [nio-7979-exec-5] com.cos.jwt.filter.MyFilter3             : authorization=
2022-05-13 15:04:12.889  INFO 9192 --- [nio-7979-exec-5] c.c.j.config.jwt.JwtAuthorizationFilter  : 인증이나 권한이 필요한 주소로 요청됨.
2022-05-13 15:04:12.889  INFO 9192 --- [nio-7979-exec-5] c.c.j.config.jwt.JwtAuthorizationFilter  : jwtHeader=
2022-05-13 15:04:12.890  INFO 9192 --- [nio-7979-exec-5] com.cos.jwt.filter.MyFilter1             : MyFilter1 호출
2022-05-13 15:04:12.890  INFO 9192 --- [nio-7979-exec-5] com.cos.jwt.filter.MyFilter2             : MyFilter2 호출

인프런 커뮤니티 질문&답변