1. \uc11c\ub860<\/h2>\n
\n \ud604\ub300 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\uc11c\ub294 \uc0ac\uc6a9\uc790 \uc778\uc99d\uacfc \uad8c\ud55c \uad00\ub9ac\ub97c \ud6a8\uc728\uc801\uc73c\ub85c \uc218\ud589\ud558\uae30 \uc704\ud55c \uc5ec\ub7ec \uac00\uc9c0 \ubc29\ubc95\uc774 \uc874\uc7ac\ud569\ub2c8\ub2e4. \uc774 \uc911\uc5d0\uc11c JSON Web Token(JWT)\uc740 \ub110\ub9ac \uc0ac\uc6a9\ub418\ub294 \uc778\uc99d \ubc29\ubc95 \uc911 \ud558\ub098\uc785\ub2c8\ub2e4. \ud2b9\ud788 \uc2a4\ud504\ub9c1 \ubd80\ud2b8(Spring Boot)\ub97c \uc0ac\uc6a9\ud558\ub294 \ubc31\uc5d4\ub4dc \uac1c\ubc1c\uc790\uc5d0\uac8c\ub294 JWT\ub97c \ud1b5\ud574 \ub85c\uadf8\uc778\uacfc \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\uc5ec \ubcf4\ub2e4 \uc548\uc804\ud558\uace0 \ud6a8\uc728\uc801\uc778 \uc0ac\uc6a9\uc790 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc744 \uad6c\ucd95\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ubcf8 \uac15\uc88c\uc5d0\uc11c\ub294 JWT\uc758 \uac1c\ub150, \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \uc774\uc6a9\ud55c JWT \uae30\ubc18 \uc778\uc99d \uad6c\ud604 \ubc29\ubc95, \ub85c\uadf8\uc778\uacfc \ub85c\uadf8\uc544\uc6c3\uc758 \uc808\ucc28\uc5d0 \ub300\ud574 \uc0c1\uc138\ud788 \uc124\uba85\ud558\uaca0\uc2b5\ub2c8\ub2e4.\n <\/p>\n<\/section>\n \n JWT\ub294 JSON \uc6f9 \ud1a0\ud070\uc758 \uc57d\uc790\ub85c, \uc0ac\uc6a9\uc790\uc640 \uc11c\ubc84 \uac04\uc758 \uc815\ubcf4\ub97c \uc548\uc804\ud558\uac8c \uc804\uc1a1\ud558\uae30 \uc704\ud55c \uac1c\ubc29\ud615 \ud45c\uc900(RFC 7519)\uc785\ub2c8\ub2e4. JWT\ub294 \ubcf4\ud1b5 \ub2e4\uc74c\uacfc \uac19\uc740 \uacbd\uc6b0\uc5d0 \uc0ac\uc6a9\ub429\ub2c8\ub2e4:\n <\/p>\n \n JWT\uc758 \ud2b9\uc9d5\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:\n <\/p>\n \n JWT\ub294 \uc138 \ubd80\ubd84\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4: \ud5e4\ub354(Header), \ud398\uc774\ub85c\ub4dc(Payload), \uc11c\uba85(Signature). \uc774\ub4e4 \uac01\uac01\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \uc124\uba85\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.\n <\/p>\n<\/section>\n \n JWT\uc758 \ud5e4\ub354\ub294 \ub450 \uac00\uc9c0 \uc815\ubcf4\ub97c \ud3ec\ud568\ud569\ub2c8\ub2e4. \uc989, \ud1a0\ud070\uc758 \uc720\ud615(type)\uacfc \uc0ac\uc6a9\ud560 \uc54c\uace0\ub9ac\uc998(\uc608: HMAC SHA256 \ub610\ub294 RSA) \uc785\ub2c8\ub2e4.\n <\/p>\n \n \ud398\uc774\ub85c\ub4dc\ub294 JWT\uc758 \ub450 \ubc88\uc9f8 \ubd80\ubd84\uc73c\ub85c, \uc0ac\uc6a9\uc790\uc5d0 \ub300\ud55c \uc815\ubcf4\uc640 \ud074\ub808\uc784(claims)\uc744 \ub2f4\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ud074\ub808\uc784\uc740 \uc0ac\uc6a9\uc790\uc758 \uc815\ubcf4, \uad8c\ud55c \ubc0f \uae30\ud0c0 \uba54\ud0c0\ub370\uc774\ud130\ub97c \ud3ec\ud568\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:\n <\/p>\n \n \uc774 \uc608\uc2dc\uc5d0\uc11c “sub”\ub294 \uc0ac\uc6a9\uc790\uc758 \uace0\uc720 ID, “name”\uc740 \uc0ac\uc6a9\uc790\uba85, “iat”\ub294 \ubc1c\ud589\ub41c \uc2dc\uac04\uc744 \ub098\ud0c0\ub0c5\ub2c8\ub2e4.\n <\/p>\n<\/section>\n \n \ub9c8\uc9c0\ub9c9\uc73c\ub85c \uc11c\uba85\uc740 \ud5e4\ub354\uc640 \ud398\uc774\ub85c\ub4dc\ub97c \uacb0\ud569\ud558\uace0 \ube44\ubc00 \ud0a4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud574\uc2dc\ub97c \uc0dd\uc131\ud55c \uac83\uc785\ub2c8\ub2e4. \uc774\ub807\uac8c \ud558\uba74 \ub370\uc774\ud130\uc758 \ubb34\uacb0\uc131\uc744 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:\n <\/p>\n \n \uc774 \uacfc\uc815\uc744 \ud1b5\ud574 JWT\ub97c \uc0dd\uc131\ud558\uace0, \uc218\uc2e0\uc790\ub294 \uc18c\uc720\ud55c \ube44\ubc00 \ud0a4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud1a0\ud070\uc758 \uc720\ud6a8\uc131\uc744 \uac80\uc0ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n <\/p>\n<\/section>\n \n \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \uc774\uc6a9\ud558\uc5ec JWT \uae30\ubc18\uc758 \uc0ac\uc6a9\uc790 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc744 \uad6c\ud604\ud558\uae30 \uc704\ud574, \uba3c\uc800 \uc2a4\ud504\ub9c1 \ubd80\ud2b8 \ud504\ub85c\uc81d\ud2b8\ub97c \uc124\uc815\ud574\uc57c \ud569\ub2c8\ub2e4. Spring Initializr\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc0c8\ub85c\uc6b4 \ud504\ub85c\uc81d\ud2b8\ub97c \uc0dd\uc131\ud558\uace0 \ud544\uc694\ud55c \uc885\uc18d\uc131(Ddependencies)\uc744 \ucd94\uac00\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\ubc88 \uac15\uc88c\uc5d0\uc11c\ub294 Spring Web, Spring Security, \uadf8\ub9ac\uace0 jjwt \ub77c\uc774\ube0c\ub7ec\ub9ac\ub97c \uc0ac\uc6a9\ud560 \uac83\uc785\ub2c8\ub2e4.\n <\/p>\n \n \uc2a4\ud504\ub9c1 \uc2dc\ud050\ub9ac\ud2f0(Spring Security)\ub97c \uc0ac\uc6a9\ud558\uc5ec \uae30\ubcf8 \uc778\uc99d \ubc0f \uad8c\ud55c \ubd80\uc5ec\ub97c \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \uc704\ud574 SecurityConfig \ud074\ub798\uc2a4\ub97c \uc791\uc131\ud558\uace0 HTTP \uc694\uccad\uc5d0 \ub300\ud55c \ubcf4\uc548 \uaddc\uce59\uc744 \uc815\uc758\ud574\uc57c \ud569\ub2c8\ub2e4.\n <\/p>\n \n \uc704 \uc124\uc815\uc5d0\uc11c\ub294 \/api\/auth\/** \ub77c\uc6b0\ud2b8\ub97c \ubaa8\ub4e0 \uc694\uccad\uc5d0 \ub300\ud574 \ud5c8\uc6a9\ud558\uace0, \ub098\uba38\uc9c0 \uc694\uccad\uc740 \uc778\uc99d\uc774 \ud544\uc694\ud558\ub3c4\ub85d \uc124\uc815\ud588\uc2b5\ub2c8\ub2e4. \uc138\uc158 \uad00\ub9ac\ub294 STATLESS\ub85c \uc124\uc815\ud558\uc5ec JWT\ub97c \uc0ac\uc6a9\ud55c \ud1a0\ud070 \uae30\ubc18 \uc778\uc99d\uc744 \ud65c\uc6a9\ud569\ub2c8\ub2e4.\n <\/p>\n<\/section>\n \n \uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc778\ud558\uba74, \uc11c\ubc84\ub294 \ud574\ub2f9 \uc0ac\uc6a9\uc790\uc758 \uc815\ubcf4\ub97c \uae30\ubc18\uc73c\ub85c JWT\ub97c \ubc1c\uae09\ud569\ub2c8\ub2e4. \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \uc704\ud55c AuthController \ud074\ub798\uc2a4\ub97c \uc791\uc131\ud558\uace0, \ub85c\uadf8\uc778 \uc694\uccad\uc744 \ucc98\ub9ac\ud558\ub294 \uba54\uc11c\ub4dc\ub97c \uad6c\ud604\ud574\uc57c \ud569\ub2c8\ub2e4.\n <\/p>\n \n JWT\ub294 \uc0c1\ud0dc \uac12\uc744 \uc11c\ubc84\uc5d0 \uc800\uc7a5\ud558\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0 \ub85c\uadf8\uc544\uc6c3 \uad6c\ud604\uc774 \ub2e4\ub978 \ubc29\uc2dd\uacfc\ub294 \ub2e4\ub985\ub2c8\ub2e4. \uc77c\ubc18\uc801\uc73c\ub85c \ud074\ub77c\uc774\uc5b8\ud2b8 \uce21\uc5d0\uc11c JWT\ub97c \uc0ad\uc81c\ud558\uac70\ub098 \ub9cc\ub8cc\uc2dc\ud0a4\ub294 \ubc29\uc2dd\uc73c\ub85c \ub85c\uadf8\uc544\uc6c3\uc744 \ucc98\ub9ac\ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4 \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \ub85c\uadf8\uc544\uc6c3 \uc694\uccad\uc744 \ubcf4\ub0b4\uba74, JWT \ud1a0\ud070\uc744 \uc0ad\uc81c\ud558\uace0 \uc774\ud6c4 \uc694\uccad\uc5d0\uc11c\ub294 \ub354 \uc774\uc0c1 \uc774 \ud1a0\ud070\uc744 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\ub3c4\ub85d \ud569\ub2c8\ub2e4.\n <\/p>\n \n \uc11c\ubc84\uc5d0\uc11c JWT\ub97c \uac80\uc99d\ud558\ub294 \ubc29\ubc95\uc740 \ud1a0\ud070\uc758 \uc11c\uba85\uc744 \ud655\uc778\ud558\uace0, \uc720\ud6a8 \uae30\uac04(expiration)\uc744 \uccb4\ud06c\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uc774 \uacfc\uc815\uc744 \uc704\ud574 JwtProvider\ub97c \uc791\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n <\/p>\n \n JWT\ub97c \ud1b5\ud574 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\uc5d0\uc11c \ud6a8\uc728\uc801\uc73c\ub85c \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \uad6c\ud604\ud560 \uc218 \uc788\uc74c\uc744 \ubcf4\uc558\uc2b5\ub2c8\ub2e4. \uc774\uc640 \uac19\uc740 \ud1a0\ud070 \uae30\ubc18 \uc778\uc99d \ubc29\uc2dd\uc744 \ud1b5\ud574 \uc11c\ubc84\uc758 \uc0c1\ud0dc\ub97c \uc720\uc9c0\ud558\uc9c0 \uc54a\uace0\ub3c4 \ubcf4\ub2e4 \uc720\uc5f0\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uad6c\uc870\ub97c \ub9cc\ub4e4 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ubcf8 \uac15\uc88c\uc5d0\uc11c \uc124\uba85\ud55c \ub0b4\uc6a9\uc744 \ubc14\ud0d5\uc73c\ub85c \uc5ec\ub7ec\ubd84\uc758 \ud504\ub85c\uc81d\ud2b8\uc5d0 JWT\ub97c \ud65c\uc6a9\ud558\uc5ec \uc0ac\uc6a9\uc790 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc744 \uad6c\ud604\ud574 \ubcf4\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4.\n <\/p>\n \n \uc55e\uc73c\ub85c\ub3c4 \ub2e4\uc591\ud55c \uc6f9 \uac1c\ubc1c \uad00\ub828 \uc8fc\uc81c\ub85c \uc5ec\ub7ec\ubd84\uaed8 \uc720\uc775\ud55c \uc815\ubcf4\uc640 \uac15\uc88c\ub97c \uc81c\uacf5\ud560 \uc608\uc815\uc785\ub2c8\ub2e4. \uac10\uc0ac\ud569\ub2c8\ub2e4.\n <\/p>\n<\/section>\n<\/article>\n <\/body><\/p>\n","protected":false},"excerpt":{"rendered":"2. JWT\ub780 \ubb34\uc5c7\uc778\uac00?<\/h2>\n
\n
\n
2.1 \ud5e4\ub354 (Header)<\/h2>\n
{\n \"alg\": \"HS256\",\n \"typ\": \"JWT\"\n}<\/code><\/pre>\n2.2 \ud398\uc774\ub85c\ub4dc (Payload)<\/h2>\n
{\n \"sub\": \"1234567890\",\n \"name\": \"John Doe\",\n \"iat\": 1516239022\n}<\/code><\/pre>\n2.3 \uc11c\uba85 (Signature)<\/h2>\n
HMACSHA256(\n base64UrlEncode(header) + \".\" +\n base64UrlEncode(payload),\n secret)<\/code><\/pre>\n3. \uc2a4\ud504\ub9c1 \ubd80\ud2b8 \uc124\uc815<\/h2>\n
dependencies {\n implementation 'org.springframework.boot:spring-boot-starter-web'\n implementation 'org.springframework.boot:spring-boot-starter-security'\n implementation 'io.jsonwebtoken:jjwt:0.9.1'\n}<\/code><\/pre>\n<\/section>\n4. \uc2a4\ud504\ub9c1 \uc2dc\ud050\ub9ac\ud2f0\uc640 JWT \uc124\uc815<\/h2>\n
@Configuration\n@EnableWebSecurity\npublic class SecurityConfig extends WebSecurityConfigurerAdapter {\n @Override\n protected void configure(HttpSecurity http) throws Exception {\n http.csrf().disable()\n .authorizeRequests()\n .antMatchers(\"\/api\/auth\/**\").permitAll()\n .anyRequest().authenticated()\n .and()\n .sessionManagement()\n .sessionCreationPolicy(SessionCreationPolicy.STATELESS);\n }\n}<\/code><\/pre>\n5. \uc0ac\uc6a9\uc790 \uc778\uc99d\uacfc JWT \ubc1c\uae09<\/h2>\n
@RestController\n@RequestMapping(\"\/api\/auth\")\npublic class AuthController {\n @Autowired\n private AuthenticationManager authenticationManager;\n\n @Autowired\n private JwtProvider jwtProvider;\n\n @PostMapping(\"\/login\")\n public ResponseEntity authenticateUser(@RequestBody LoginRequest loginRequest) {\n Authentication authentication = authenticationManager.authenticate(\n new UsernamePasswordAuthenticationToken(loginRequest.getUsername(), loginRequest.getPassword()));\n\n SecurityContextHolder.getContext().setAuthentication(authentication);\n\n String jwt = jwtProvider.generateToken(authentication);\n return ResponseEntity.ok(new JwtResponse(jwt));\n }\n}<\/code><\/pre>\n<\/section>\n6. \ub85c\uadf8\uc544\uc6c3 \uad6c\ud604<\/h2>\n
@PostMapping(\"\/logout\")\n public ResponseEntity logoutUser() {\n \/\/ \ud074\ub77c\uc774\uc5b8\ud2b8 \ud1a0\ud070 \uc0ad\uc81c\ub97c \uc704\ud55c \uc751\ub2f5 \ucc98\ub9ac \uc804\ub2ec\n return ResponseEntity.ok(new MessageResponse(\"User logged out successfully!\"));\n }<\/code><\/pre>\n<\/section>\n7. JWT \uc720\ud6a8\uc131 \uac80\uc99d<\/h2>\n
@Component\npublic class JwtProvider {\n @Value(\"${jwt.secret}\")\n private String jwtSecret;\n\n public String generateToken(Authentication authentication) {\n return Jwts.builder()\n .setSubject(authentication.getName())\n .setIssuedAt(new Date())\n .setExpiration(new Date((new Date()).getTime() + 86400000)) \/\/ 1\uc77c\n .signWith(SignatureAlgorithm.HS512, jwtSecret)\n .compact();\n }\n\n public boolean validateToken(String token) {\n try {\n Jwts.parser().setSigningKey(jwtSecret).parseClaimsJws(token);\n return true;\n } catch (Exception e) {\n return false;\n }\n }\n}<\/code><\/pre>\n<\/section>\n8. \uacb0\ub860<\/h2>\n