💎목표

• 지난 시간에 만든 사용자 인증과 Song List 통합

  Spring Security

  Axios

⭐Backend

https://github.com/devbwoh/w24w15Security

💡Song Model 추가

package kr.ac.kumoh.s20240000.w24w15Security.model

import org.springframework.data.annotation.Id
import org.springframework.data.mongodb.core.mapping.Document

@Document(collection = "songs")
data class Song(
    @Id val id: String? = null,
    val title: String,
    val singer: String,
    val rating: Int,
    val lyrics: String
)

💡 Song Repository 추가

package kr.ac.kumoh.s20240000.w24w15Security.repository

import kr.ac.kumoh.s20240000.w24w15Security.model.Song
import org.springframework.data.mongodb.repository.MongoRepository

// Song은 사용할 document, String은 _id의 type
interface SongRepository : MongoRepository<Song,String> {
    // 기본적인 메소드는 모두 구현해 줌

    // 이렇게 추가하면 알아서 구현해 줌
    fun findBySinger(singer: String): List<Song>
}

💡Song Service 추가

package kr.ac.kumoh.s20240000.w24w15Security.service

import kr.ac.kumoh.s20240000.w24w15Security.model.Song
import kr.ac.kumoh.s20240000.w24w15Security.repository.SongRepository
import org.springframework.stereotype.Service

@Service
class SongService(private val repository: SongRepository) {
    fun addSong(song: Song): Song = repository.save(song)

    fun getAllSongs(): List<Song> = repository.findAll()
    fun getSongById(id: String): Song? = repository.findById(id).orElse(null)
    fun getSongBySinger(title: String): List<Song> = repository.findBySinger(title)

    fun updateSong(id: String, song: Song): Song? {
        val songTarget = repository.findById(id)

        return if (songTarget.isPresent) {
            val oldSong = songTarget.get()
            val updatedSong = oldSong.copy(
                title = song.title,
                singer = song.singer,
                rating = song.rating,
                lyrics = song.lyrics
            )
            repository.save(updatedSong)
        } else {
            null
        }
    }

    fun deleteSong(id: String): Boolean {
        return if (repository.existsById(id)) {
            repository.deleteById(id)
            true
        } else {
            false
        }
    }

}

💡Song Controller 추가

package kr.ac.kumoh.s20240000.w24w15Security.controller

import kr.ac.kumoh.s20240000.w24w15Security.model.Song
import kr.ac.kumoh.s20240000.w24w15Security.service.SongService
import org.springframework.web.bind.annotation.*

@RestController
@RequestMapping("/api/songs")
@CrossOrigin(origins = ["<http://localhost:3000>"])
class SongController(private val service: SongService) {
    @PostMapping
    fun addSong(@RequestBody song: Song): Song = service.addSong(song)

    @GetMapping
    fun getAllSongs(): List<Song> = service.getAllSongs()

    @GetMapping("/{id}")
    fun getSongById(@PathVariable id: String): Song? = service.getSongById(id)

    @GetMapping("/singer/{singer}")
    fun getSongBySinger(@PathVariable singer: String): List<Song> = service.getSongBySinger(singer)

    @PutMapping("/{id}")
    fun updateSong(@PathVariable id: String, @RequestBody songDetails: Song): Song? =  service.updateSong(id, songDetails)

    @DeleteMapping("/{id}")
    fun deleteSong(@PathVariable id: String): Map<String, String> {
        return if (service.deleteSong(id))
            mapOf("status" to "deleted")
        else
            mapOf("status" to "not found")
    }
}

💡실행 확인

💡SecurityConfig.kt

• 허용해주면 접근 가능

package kr.ac.kumoh.s20240000.w24w15Security.config

import org.springframework.context.annotation.Bean
import org.springframework.context.annotation.Configuration
import org.springframework.security.config.annotation.web.builders.HttpSecurity
import org.springframework.security.web.SecurityFilterChain
import org.springframework.web.cors.CorsConfiguration
import org.springframework.web.cors.CorsConfigurationSource
import org.springframework.web.cors.UrlBasedCorsConfigurationSource

@Configuration
class SecurityConfig {

    // CORS 설정을 위한 CorsConfigurationSource 정의
    @Bean
    fun corsConfigurationSource(): CorsConfigurationSource {
        val configuration = CorsConfiguration()
        configuration.apply {
            allowedOrigins = listOf("<http://localhost:3000>") // 허용할 도메인
            allowedMethods = listOf("GET", "POST", "PUT", "DELETE", "OPTIONS") // 허용할 HTTP 메서드
            allowedHeaders = listOf("*") // 허용할 헤더
            allowCredentials = true // 자격 증명(쿠키 등)을 허용할지 여부
        }
        val source = UrlBasedCorsConfigurationSource()
        source.registerCorsConfiguration("/**", configuration) // 모든 경로에 적용
        return source
    }

    // SecurityFilterChain을 통한 CORS 설정
    @Bean
    fun securityFilterChain(http: HttpSecurity): SecurityFilterChain {
        return http
            .cors { it.configurationSource(corsConfigurationSource()) } // CORS 설정 적용
            .authorizeHttpRequests { authz ->
                authz
                    .requestMatchers("/api/auth/**").permitAll() // 로그인, 회원가입 경로는 허용
                    // TODO: 삭제할 것
                    .requestMatchers("/api/songs/**").permitAll()
                    .anyRequest().authenticated()
            }
            .csrf { csrf -> csrf.disable() }
            .build()
    }
}