pricelees/roomescape-refactored
1
0
Fork 0
generated from pricelees/issue-pr-template
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: 회원 / 관리자 로그인시 jwt claim 수정

Browse Source
This commit is contained in:
이상진 2025-09-14 21:13:22 +09:00
parent 63251d67ea
commit a021ce8e73
1 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/main/kotlin/roomescape/auth/business/AuthService.kt
View File

@ -18,8 +18,9 @@ import roomescape.user.business.UserService
private val log: KLogger = KotlinLogging.logger {} private val log: KLogger = KotlinLogging.logger {}
const val CLAIM_ADMIN_TYPE_KEY = "admin_type"
const val CLAIM_PERMISSION_KEY = "permission" const val CLAIM_PERMISSION_KEY = "permission"
const val CLAIM_TYPE_KEY = "principal_type" const val CLAIM_STORE_ID_KEY = "store_id"
@Service @Service
class AuthService( class AuthService(
@ -34,7 +35,6 @@ class AuthService(
context: LoginContext context: LoginContext
): LoginSuccessResponse { ): LoginSuccessResponse {
log.info { "[AuthService.login] 로그인 시작: account=${request.account}, type=${request.principalType}, context=${context}" } log.info { "[AuthService.login] 로그인 시작: account=${request.account}, type=${request.principalType}, context=${context}" }
val (credentials, extraClaims) = getCredentials(request) val (credentials, extraClaims) = getCredentials(request)
try { try {
@ -44,7 +44,7 @@ class AuthService(
loginHistoryService.createSuccessHistory(credentials.id, request.principalType, context) loginHistoryService.createSuccessHistory(credentials.id, request.principalType, context)
return LoginSuccessResponse(accessToken).also { return credentials.toResponse(accessToken).also {
log.info { "[AuthService.login] 로그인 완료: account=${request.account}, context=${context}" } log.info { "[AuthService.login] 로그인 완료: account=${request.account}, context=${context}" }
} }
@ -97,15 +97,14 @@ class AuthService(
val credentials: LoginCredentials = when (request.principalType) { val credentials: LoginCredentials = when (request.principalType) {
PrincipalType.ADMIN -> { PrincipalType.ADMIN -> {
adminService.findCredentialsByAccount(request.account).also { adminService.findCredentialsByAccount(request.account).also {
extraClaims.put(CLAIM_PERMISSION_KEY, it.permissionLevel) extraClaims.put(CLAIM_ADMIN_TYPE_KEY, it.type.name)
extraClaims.put(CLAIM_TYPE_KEY, PrincipalType.ADMIN) extraClaims.put(CLAIM_PERMISSION_KEY, it.permissionLevel.name)
it.storeId?.also { storeId -> extraClaims.put(CLAIM_STORE_ID_KEY, storeId.toString()) }
} }
} }
PrincipalType.USER -> { PrincipalType.USER -> {
userService.findCredentialsByAccount(request.account).also { userService.findCredentialsByAccount(request.account)
extraClaims.put(CLAIM_TYPE_KEY, PrincipalType.USER)
}
} }
} }