mindol1004/spring-jwt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(gateway-services): feign client jwt token 추가

Browse Source
This commit is contained in:
bum12ark
2022-03-11 14:59:13 +09:00
parent 086d7f2e10
commit a3445dd0ec
5 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
customer-apigateway-service/src/main/java/com/justpickup/customerapigatewayservice/filter/AuthorizationHeaderFilter.java
View File

@@ -54,6 +54,9 @@ public class AuthorizationHeaderFilter extends AbstractGatewayFilterFactory<Auth
jwtTokenProvider.validateJwtToken(token); jwtTokenProvider.validateJwtToken(token);
String subject = jwtTokenProvider.getUserId(token); String subject = jwtTokenProvider.getUserId(token);
if (subject.equals("feign")) return chain.filter(exchange);
if (false == jwtTokenProvider.getRoles(token).contains("Customer")) { if (false == jwtTokenProvider.getRoles(token).contains("Customer")) {
return onError(exchange, "권한 없음", HttpStatus.UNAUTHORIZED); return onError(exchange, "권한 없음", HttpStatus.UNAUTHORIZED);
} }

2
customer-apigateway-service/src/main/resources/application.yml
View File

@@ -120,6 +120,6 @@ spring:
token: token:
access-expired-time: 3600000 access-expired-time: 3600000
refresh-expired-time: 604800000 refresh-expired-time: 604800000
secret: my-secret secret: $2a$10$q42lY7Y18xqrFt1qbODZIO4OMTeOxnrCe7tF3n9bazJinVE7VH5Pi
refresh-token-name: refresh-token refresh-token-name: refresh-token
access-token-name: access-token access-token-name: access-token

3
owner-apigateway-service/src/main/java/com/justpickup/ownerapigatewayservice/filter/AuthorizationHeaderFilter.java
View File

@@ -48,6 +48,9 @@ public class AuthorizationHeaderFilter extends AbstractGatewayFilterFactory<Auth
jwtTokenProvider.validateJwtToken(token); jwtTokenProvider.validateJwtToken(token);
String subject = jwtTokenProvider.getUserId(token); String subject = jwtTokenProvider.getUserId(token);
if (subject.equals("feign")) return chain.filter(exchange);
if (false == jwtTokenProvider.getRoles(token).contains("StoreOwner")) { if (false == jwtTokenProvider.getRoles(token).contains("StoreOwner")) {
return onError(exchange, "권한 없음", HttpStatus.UNAUTHORIZED); return onError(exchange, "권한 없음", HttpStatus.UNAUTHORIZED);
} }

6
owner-apigateway-service/src/main/java/com/justpickup/ownerapigatewayservice/handler/GlobalExceptionHandler.java
View File

@@ -44,10 +44,10 @@ public class GlobalExceptionHandler implements ErrorWebExceptionHandler {
exchange.getResponse().getHeaders().setContentType(MediaType.APPLICATION_JSON); exchange.getResponse().getHeaders().setContentType(MediaType.APPLICATION_JSON);
responseBody.put("code", "INVALID"); responseBody.put("code", "INVALID");
responseBody.put("message", "Invalid Access Token"); responseBody.put("message", "Invalid Access Token");
}else{ } else {
exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED); exchange.getResponse().setStatusCode(exchange.getResponse().getStatusCode());
exchange.getResponse().getHeaders().setContentType(MediaType.APPLICATION_JSON); exchange.getResponse().getHeaders().setContentType(MediaType.APPLICATION_JSON);
responseBody.put("code", "INVALID"); responseBody.put("code", ex.getMessage());
} }
DataBuffer wrap = null; DataBuffer wrap = null;

9
owner-apigateway-service/src/main/resources/application.yml
View File

@@ -42,13 +42,6 @@ spring:
allowedHeaders: '*' allowedHeaders: '*'
allow-credentials: true allow-credentials: true
routes: routes:
- id: owner-frontend-service
uri: lb://OWNER-FRONTEND-SERVICE
predicates:
- Path=/owner-frontend-service/**
filters:
- RewritePath=/owner-frontend-service/(?<segment>.*),/$\{segment}
- id: order-service - id: order-service
uri: lb://ORDER-SERVCIE uri: lb://ORDER-SERVCIE
predicates: predicates:
@@ -105,6 +98,6 @@ spring:
token: token:
access-expired-time: 3600000 access-expired-time: 3600000
refresh-expired-time: 604800000 refresh-expired-time: 604800000
secret: my-secret secret: $2a$10$q42lY7Y18xqrFt1qbODZIO4OMTeOxnrCe7tF3n9bazJinVE7VH5Pi
refresh-token-name: refresh-token refresh-token-name: refresh-token
access-token-name: access-token access-token-name: access-token