스프링 시큐리티를 이용한 로그인/로그아웃

🚀 참고한 책에서는 WebSecurityConfigureAdapter를 통해 security config를 override 했지만, 사용하고 있는 버전에서는 오류 발생!!

UserDetailService

• 데이터베이스에서 회원 정보를 가져오는 인터페이스
• loadUserByUsername() 메서드가 존재하며, 회원 정보를 조회하여 사용자의 정보와 권환을 갖는 UserDetail 인터페이스 반환

UserDetail

• 스프링 시큐리티에서 회원의 정보를 담기 위해서 사용하는 인터페이스

MemberService

@RequiredArgsConstructor
@Service
@Transactional
public class MemberService implements UserDetailsService {

    /** 생략 **/ 

    @Override
    public UserDetails loadUserByUsername(String memberId) throws UsernameNotFoundException {
        Member member = memberRepository.findByMemberId(memberId);

        if (member == null) {
            throw new UsernameNotFoundException(memberId);
        }

        return User.builder()
                .username(member.getMemberId())
                .password(member.getPassword())
                .roles(member.getRole().toString())
                .build();
    }
}

SecurityFilterChanin Bean 등록

스프링 공식 페이지를 참조하여 설정

@EnableWebSecurity
@RequiredArgsConstructor
@Configuration(proxyBeanMethods = false)
@ConditionalOnDefaultWebSecurity
@ConditionalOnWebApplication(type = ConditionalOnWebApplication.Type.SERVLET)
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig {
    @Autowired
    MemberService memberService;

    @Bean
    @Order(SecurityProperties.BASIC_AUTH_ORDER)
    public SecurityFilterChain filterChain(HttpSecurity http)throws Exception {
        http
                .csrf().disable()
                .headers().frameOptions().disable()
                .and()
                .authorizeRequests()
                .antMatchers("/", "/css/**", "/images/**", "/js/**", "/h2-console/**", "/member/**").permitAll()
                .antMatchers("/", "/members/**").permitAll()
                .and()
                .formLogin()
                .loginPage("/members/login")
                .defaultSuccessUrl("/").permitAll()
                .usernameParameter("memberId")
                .failureUrl("/members/login/error")
                .and()
                .logout()
                .logoutRequestMatcher(new AntPathRequestMatcher("/members/logout"))
                .logoutSuccessUrl("/");

        return http.build();

    }

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }

    @Bean
    public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception {
        return authenticationConfiguration.getAuthenticationManager();
    }
}

• http.formLogin() - http를 통해 들어오는 form 기반 request를 이용하여 로그인을 처리

---

로그인 테스트

@SpringBootTest
@AutoConfigureMockMvc
@Transactional
@TestPropertySource(locations = "classpath:application-test.properties")
class MemberControllerTest {
    @Autowired
    private MemberController memberController;
    @Autowired
    private MockMvc mockMvc;

    @Test
    void 로그인_성공_테스트() throws Exception {
        String memberId = "test";
        String password = "12345678";

        this.createMember(memberId, password);

        mockMvc.perform(formLogin().userParameter("memberId")
                .loginProcessingUrl("/members/login")
                .user(memberId).password(password)
        ).andExpect(SecurityMockMvcResultMatchers.authenticated());
    }

    private void createMember(String memberId, String password) {
        MemberFormDto memberFormDto = new MemberFormDto();
        memberFormDto.setMemberId(memberId);
        memberFormDto.setPassword(password);
        memberFormDto.setName("테스트");
        memberFormDto.setPostCode(2222);
        memberFormDto.setAddress("테스트");
        memberFormDto.setAdditionalAddress("테스트");

        memberController.join(memberFormDto);
    }


    @Test
    void 로그인_실패_테스트() throws Exception {
        String memberId = "test";
        String password = "12345678";

        this.createMember(memberId, password);

        mockMvc.perform(formLogin().userParameter("memberId")
                .loginProcessingUrl("/members/login")
                .user(memberId).password("123456789")
        ).andExpect(SecurityMockMvcResultMatchers.unauthenticated());
    }

}

---

권환에 따라, 헤더에 나타나는 메뉴 변경