항해 99 36일차

3. 멤버 권한줘서 컨트롤러별 접근막기

 

@Bean
@Order(SecurityProperties.BASIC_AUTH_ORDER)
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    http.cors();

    http.csrf().disable()

            .exceptionHandling()
            .authenticationEntryPoint(authenticationEntryPointException)
            .accessDeniedHandler(accessDeniedHandlerException)

            .and()
            .sessionManagement()
            .sessionCreationPolicy(SessionCreationPolicy.STATELESS)


            .and()
            .authorizeRequests()
            .antMatchers("/api/member/**").permitAll()
            .antMatchers("/api/post/**").permitAll()
            .antMatchers("/api/comment/**").permitAll()
            .antMatchers("/api/auth/**").hasAnyRole("ROLE_ADMIN","ROLE_MEMBER")
            .antMatchers("/api/admin/**").hasRole("ROlE_ADMIN")
            .antMatchers("/v2/api-docs",
                    "/swagger-resources",
                    "/swagger-resources/**",
                    "/configuration/ui",
                    "/configuration/security",
                    "/swagger-ui.html",
                    "/webjars/**",
                    "/v3/api-docs/**",
                    "/swagger-ui/**").permitAll()
            .anyRequest().authenticated()

            .and()
            .addFilter(corsConfig.corsFilter())
            .apply(new JwtSecurityConfiguration(SECRET_KEY, tokenProvider, userDetailsService));

Security에서 제공하는 hasRole 을 사용하여 권한이 필요한 url을 등록해준다.

.antMatchers("/api/auth/**").hasAnyRole("ROLE_ADMIN","ROLE_MEMBER")
.antMatchers("/api/admin/**").hasRole("ROlE_ADMIN")

Security에서 제공하는 타입으로 변경.

public enum Authority {
    ROLE_ADMIN,
    ROLE_MEMBER,
    ROLE_GUEST
}

@Override
public Collection<? extends GrantedAuthority> getAuthorities() {
    Authority memberRole=member.getRole();
    SimpleGrantedAuthority authority = new SimpleGrantedAuthority(memberRole.toString());
    Collection<GrantedAuthority> authorities = new ArrayList<>();
    authorities.add(authority);
    return authorities;
}