인프런 커뮤니티 질문&답변

1

package com.attendance.scheduler.infra.config.security;

import lombok.RequiredArgsConstructor;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;

@Configuration
@RequiredArgsConstructor
@EnableWebSecurity
public class SecurityConfig {

    public static final String[] ENDPOINTS_WHITELIST = {
            "/", "/submit", "/completion",
            "/class/**",
            "/board/**",
            "/join/**",
            "/cert/**",
            "/help/**",
            "/comment/**",
            "/css/**",
            "/js/**"
    };

    private final CustomAuthenticationFailureHandler customAuthenticationFailureHandler;

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }

    @Bean
    public SecurityFilterChain adminFilterChain(HttpSecurity httpSecurity) throws Exception {

        httpSecurity
                .csrf(AbstractHttpConfigurer::disable)
                .securityMatcher("/admin/**","/manage/**")
                .authorizeHttpRequests(auth -> auth
                        .requestMatchers("/admin/**")
                        .hasAuthority("ADMIN")
                        .requestMatchers("/manage/**")
                        .hasAnyAuthority("ADMIN", "TEACHER")
                        .anyRequest().authenticated())

                .formLogin(httpSecurityFormLoginConfigurer -> httpSecurityFormLoginConfigurer
                        .defaultSuccessUrl("/manage/class", true)
                        .failureHandler(customAuthenticationFailureHandler)
                        .loginPage("/login")
                        .loginProcessingUrl("/login")
                )

                .logout(httpSecurityFormLogoutConfigurer -> httpSecurityFormLogoutConfigurer
                        .logoutUrl("/logout")
                        .invalidateHttpSession(true)
                        .deleteCookies("JSESSIONID")
                        .logoutSuccessUrl("/"))

                .sessionManagement(sessionManagement -> sessionManagement
                        .invalidSessionUrl("/login")
                        .maximumSessions(1)
                        .maxSessionsPreventsLogin(true)
                        .expiredUrl("/login"));

        return httpSecurity.build();
    }
}

2

package com.attendance.scheduler.infra.config.security;

import com.attendance.scheduler.admin.domain.AdminEntity;
import com.attendance.scheduler.admin.repository.AdminJpaRepository;
import com.attendance.scheduler.infra.config.security.Admin.AdminDetails;
import com.attendance.scheduler.infra.config.security.User.TeacherDetails;
import com.attendance.scheduler.teacher.domain.TeacherEntity;
import com.attendance.scheduler.teacher.repository.TeacherJpaRepository;
import lombok.RequiredArgsConstructor;
import lombok.extern.slf4j.Slf4j;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Component;

@Slf4j
@Component
@RequiredArgsConstructor
public class AccountDetailService implements UserDetailsService {

    private final AdminJpaRepository adminJpaRepository;
    private final TeacherJpaRepository teacherJpaRepository;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        log.info("teacherId = {}", username);

        final TeacherEntity teacherEntity = teacherJpaRepository
                .findByUsernameIs(username);
        if(teacherEntity != null){
            
            return new TeacherDetails(teacherEntity);
            
        } else {
            final AdminEntity adminEntity = adminJpaRepository
                    .findByUsernameIs(username);
            if (adminEntity != null) {
                log.info("adminId = {}", username);
                return new AdminDetails(adminEntity);
            }
        }
        throw new UsernameNotFoundException(username);
    }
}

3

<form method='post' th:action="@{/login}" th:object="${login}">

로그인을 진행하면 405에러가 계속 발생합니다. 이유를 찾고 있으나 아이디와 비밀번호를 입력해도 2번 코드의 로그에 남지 않습니다. 혹시 이유를 알려주실수 있을까요? 감사합니다.