[Spring] Spring Security를 활용한 소셜 로그인 (1/3)

🔍 Spring Security를 활용한 소셜 로그인

중간 프로젝트에서 구현했던 소셜로그인을 SpringSecurity와 OAuth2를 활용하여 다시 만들었다.

중간 프로젝트에서는 네이버와 카카오만 구현하였지만 이 방법들이 javascript를 활용했기 때문에 이번에는

Spring에 맞게 활용하여 네이버, 카카오 뿐만 아니라 구글 로그인도 구현할 예정이다.

---

🔍 signIn.jsp

<a href="/oauth2/authorization/google" class="btn btn-social btn-block buffer"><i class="xi-google"></i> Sign In
                        with Google</a>
                    <a href="/oauth2/authorization/kakao" class="btn btn-social btn-block kakao"><i class="xi-kakaotalk"></i> Sign In
                        with Kakao</a>
                    <a href="/oauth2/authorization/naver" class="btn btn-social btn-block naver"><i class="xi-naver"></i> Sign In with
                        Naver</a>

 

View에서는 oauth2를 포함한 경로를 요청한다.

---

🔍 SecurityConfig.java

package infinitystone.chalKag.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.web.SecurityFilterChain;

import infinitystone.chalKag.biz.customOAuth2.CustomOAuth2UserService;

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    private final CustomOAuth2UserService customOAuth2UserService;

    public SecurityConfig(CustomOAuth2UserService customOAuth2UserService) {

        this.customOAuth2UserService = customOAuth2UserService;
    }


    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {

        http
                .csrf((csrf) -> csrf.disable());

        http
                .formLogin((auth) -> auth.disable());

        http
                .httpBasic((basic) -> basic.disable());

        http
                .oauth2Login((oauth2) -> oauth2
                        .userInfoEndpoint((userInfoEndpointConfig) -> userInfoEndpointConfig
                                .userService(customOAuth2UserService))
                        		.defaultSuccessUrl("/oauth2SignIn"));
        					

        http
                .authorizeHttpRequests((auth) -> auth
                        .anyRequest().permitAll());
        
     
        

        return http.build();
    }
}

 

Oauth2를 포함한 경로를 SecurityConfig가 낚아채서 customOAuth2UserService로 이동시킨다.

---

🔍 CustomOAuth2UserService.java

package infinitystone.chalKag.biz.customOAuth2;

import java.util.UUID;

import org.springframework.security.oauth2.client.userinfo.DefaultOAuth2UserService;
import org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest;
import org.springframework.security.oauth2.core.OAuth2AuthenticationException;
import org.springframework.security.oauth2.core.user.OAuth2User;
import org.springframework.stereotype.Service;

@Service
public class CustomOAuth2UserService extends DefaultOAuth2UserService {
    //DefaultOAuth2UserService OAuth2UserService의 구현체

    private final UserRepository userRepository;

    public CustomOAuth2UserService(UserRepository userRepository) {

        this.userRepository = userRepository;
    }

    @Override
    public OAuth2User loadUser(OAuth2UserRequest userRequest) throws OAuth2AuthenticationException {

        OAuth2User oAuth2User = super.loadUser(userRequest);
        System.out.println(oAuth2User.getAttributes());

        String registrationId = userRequest.getClientRegistration().getRegistrationId();
        OAuth2Response oAuth2Response = null;
        if (registrationId.equals("naver")) {

            oAuth2Response = new NaverResponse(oAuth2User.getAttributes());
        }
        else if (registrationId.equals("google")) {

            oAuth2Response = new GoogleResponse(oAuth2User.getAttributes());
        }
        else if(registrationId.equals("kakao")) {
        	oAuth2Response = new KakaoResponse(oAuth2User.getAttributes());
        }
        else {

            return null;
        }
        String memberEmail= oAuth2Response.getEmail();
        UserEntity existData = userRepository.findByEmail(memberEmail);
        String role = "ROLE_USER";
        if (existData == null) {

            UserEntity userEntity = new UserEntity();
            
    		UUID uuid = UUID.randomUUID();
    		String temporaryPassword = uuid.toString().substring(0, 8);
    		System.out.println("temporaryPassword 확인 ["+temporaryPassword+"]");
            
            userEntity.setUsername(oAuth2Response.getName());
            userEntity.setBirth(oAuth2Response.getBirthYear()+oAuth2Response.getBirthday());
            userEntity.setEmail(oAuth2Response.getEmail());
            userEntity.setNickname(oAuth2Response.getNickname());
            userEntity.setPh(oAuth2Response.getPh());
            userEntity.setPw(temporaryPassword);
            userEntity.setGender(oAuth2Response.getGender());
            userEntity.setRole(role);

            userRepository.save(userEntity);
        }

        return new CustomOAuth2User(oAuth2Response, role);
    }
}

 

 

요청을 해서 받은 정보를 처리하여 객체를 리턴하는 서비스이다. 사용되는 파일들은 다음 포스팅에 담을 예정이다.

---