{"id":26404,"date":"2024-10-27T10:52:30","date_gmt":"2024-10-27T10:52:30","guid":{"rendered":"http:\/\/atmokpo.com\/w\/?p=26404"},"modified":"2024-11-26T07:44:38","modified_gmt":"2024-11-26T07:44:38","slug":"%ec%8a%a4%ed%94%84%eb%a7%81-%eb%b6%80%ed%8a%b8-%eb%b0%b1%ec%97%94%eb%93%9c-%ea%b0%9c%eb%b0%9c-%ea%b0%95%ec%a2%8c-jwt%eb%a1%9c-%eb%a1%9c%ea%b7%b8%ec%9d%b8-%eb%a1%9c%ea%b7%b8%ec%95%84%ec%9b%83-9","status":"publish","type":"post","link":"https:\/\/atmokpo.com\/w\/26404\/","title":{"rendered":"\uc2a4\ud504\ub9c1 \ubd80\ud2b8 \ubc31\uc5d4\ub4dc \uac1c\ubc1c \uac15\uc88c, JWT\ub85c \ub85c\uadf8\uc778 \ub85c\uadf8\uc544\uc6c3 \uad6c\ud604, \ud1a0\ud070 \uc11c\ube44\uc2a4 \ucd94\uac00\ud558\uae30"},"content":{"rendered":"

<\/p>\n

\uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub294 \ud604\ub300\uc801\uc778 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uac1c\ubc1c\uc744 \uc704\ud55c \uac15\ub825\ud55c \ud504\ub808\uc784\uc6cc\ud06c\uc785\ub2c8\ub2e4. \ubcf8 \uac15\uc88c\uc5d0\uc11c\ub294 JWT(Json Web Token)\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \uad6c\ud604\ud558\uace0, \uc774\ub97c \ud1b5\ud574 \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \ub2e8\uacc4\ubcc4\ub85c \uc124\uba85\ud558\uaca0\uc2b5\ub2c8\ub2e4. \uc774 \uacfc\uc815\uc5d0\uc11c\ub294 \ud1a0\ud070 \uc11c\ube44\uc2a4\ub97c \ucd94\uac00\ud558\uc5ec \ubcf4\uc548 \ubc0f \uc0ac\uc6a9\uc790 \uad00\ub9ac \uae30\ub2a5\uc744 \ud5a5\uc0c1\uc2dc\ud0a4\ub294 \ubc29\ubc95\ub3c4 \ub2e4\ub8f0 \uac83\uc785\ub2c8\ub2e4.<\/p>\n

1. JWT\ub780 \ubb34\uc5c7\uc778\uac00?<\/h2>\n

JWT\ub294 JSON\uc744 \uae30\ubc18\uc73c\ub85c \ud55c \uac1c\ubc29\ud615 \ud45c\uc900\uc73c\ub85c, \uc815\ubcf4\ub97c \uc548\uc804\ud558\uac8c \uc804\ub2ec\ud558\uae30 \uc704\ud55c \ubc29\uc2dd\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. JWT\ub294 \uc138 \ubd80\ubd84\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4: Header, Payload, Signature.<\/p>\n

1.1 Header<\/h3>\n

Header\ub294 JWT\uc758 \ud0c0\uc785\uacfc \ud574\uc2f1 \uc54c\uace0\ub9ac\uc998\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:<\/p>\n

\n    {\n      \"alg\": \"HS256\",\n      \"typ\": \"JWT\"\n    }<\/pre>\n
1.2 Payload<\/h3>\n
Payload \ubd80\ubd84\uc740 \uc0ac\uc6a9\uc790\uc758 \uc815\ubcf4\uc640 \uc0ac\uc6a9\uc790 ID, \ub9cc\ub8cc \uc2dc\uac04 \ub4f1\uc744 \ud3ec\ud568\ud558\ub294 \ubcf8\ubb38\uc785\ub2c8\ub2e4. \uc774 \ubd80\ubd84\uc740 \uc54c\uc544\ubcf4\uae30 \uc26c\uc6b4 JSON \ud615\uc2dd\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
1.3 Signature<\/h3>\n
Signature\ub294 \uc778\ucf54\ub529\ub41c Header\uc640 Payload\ub97c \uc870\ud569\ud558\uc5ec \ube44\ubc00\ud0a4\ub85c \uc11c\uba85\ud55c \uac12\uc785\ub2c8\ub2e4. \uc774 \uac12\uc740 \ud1a0\ud070\uc758 \ubb34\uacb0\uc131\uc744 \ubcf4\uc7a5\ud558\uace0, \uc11c\ubc84\uac00 \ud1a0\ud070\uc744 \uac80\uc99d\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n
2. \ud504\ub85c\uc81d\ud2b8 \uc124\uc815<\/h2>\n
\uc774 \uac15\uc88c\uc5d0\uc11c\ub294 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\uc640 Maven\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uc81d\ud2b8\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. IntelliJ IDEA \ub610\ub294 Eclipse\uc640 \uac19\uc740 IDE\ub97c \uc774\uc6a9\ud558\uc5ec \ud504\ub85c\uc81d\ud2b8\ub97c \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
2.1 Maven \ud504\ub85c\uc81d\ud2b8 \uc0dd\uc131<\/h3>\n
\uc774\ud074\ub9bd\uc2a4 \ub610\ub294 IntelliJ IDEA\uc5d0\uc11c Maven \ud504\ub85c\uc81d\ud2b8\ub97c \uc0dd\uc131\ud55c \ud6c4, pom.xml \ud30c\uc77c\uc5d0 \ub2e4\uc74c \uc758\uc874\uc131\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4.<\/p>\n
\n    <dependencies>\n        <dependency>\n            <groupId>org.springframework.boot<\/groupId>\n            <artifactId>spring-boot-starter-web<\/artifactId>\n        <\/dependency>\n        <dependency>\n            <groupId>io.jsonwebtoken<\/groupId>\n            <artifactId>jjsonwebtoken<\/artifactId>\n            <version>0.9.1<\/version>\n        <\/dependency>\n        <dependency>\n            <groupId>org.springframework.boot<\/groupId>\n            <artifactId>spring-boot-starter-security<\/artifactId>\n        <\/dependency>\n    <\/dependencies><\/pre>\n
2.2 Spring Security \uc124\uc815<\/h3>\n
Spring Security\ub97c \uc0ac\uc6a9\ud558\uc5ec \uae30\ubcf8\uc801\uc778 \ubcf4\uc548 \uc124\uc815\uc744 \ud574\uc90d\ub2c8\ub2e4. SecurityConfig \ud074\ub798\uc2a4\ub97c \uc0dd\uc131\ud558\uace0, \uc0ac\uc6a9\uc790 \uc778\uc99d \ubc0f \uad8c\ud55c \uc124\uc815\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4.<\/p>\n
\n    import org.springframework.context.annotation.Bean;\n    import org.springframework.context.annotation.Configuration;\n    import org.springframework.security.config.annotation.web.builders.HttpSecurity;\n    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;\n    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;\n\n    @Configuration\n    @EnableWebSecurity\n    public class SecurityConfig extends WebSecurityConfigurerAdapter {\n\n        @Override\n        protected void configure(HttpSecurity http) throws Exception {\n            http.csrf().disable()\n                .authorizeRequests()\n                .antMatchers(\"\/api\/auth\/**\").permitAll()\n                .anyRequest().authenticated();\n        }\n    }\n    <\/pre>\n
3. JWT \uc0dd\uc131 \ubc0f \uac80\uc99d<\/h2>\n
\uc774\uc81c JWT\ub97c \uc0dd\uc131\ud558\uace0 \uac80\uc99d\ud558\ub294 \ubc29\ubc95\uc744 \uc0b4\ud3b4\ubcf4\uaca0\uc2b5\ub2c8\ub2e4. JWTUtil \ud074\ub798\uc2a4\ub97c \uc0dd\uc131\ud558\uc5ec \ud544\uc694\ud55c \uba54\uc11c\ub4dc\ub97c \uad6c\ud604\ud569\ub2c8\ub2e4.<\/p>\n
\n    import io.jsonwebtoken.Claims;\n    import io.jsonwebtoken.Jwts;\n    import io.jsonwebtoken.SignatureAlgorithm;\n    import org.springframework.stereotype.Component;\n\n    import java.util.Date;\n    import java.util.HashMap;\n    import java.util.Map;\n\n    @Component\n    public class JWTUtil {\n        private String secretKey = \"secret\";\n\n        public String generateToken(String username) {\n            Map<String, Object> claims = new HashMap<>();\n            return createToken(claims, username);\n        }\n\n        private String createToken(Map<String, Object> claims, String subject) {\n            return Jwts.builder()\n                    .setClaims(claims)\n                    .setSubject(subject)\n                    .setIssuedAt(new Date(System.currentTimeMillis()))\n                    .setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 10)) \/\/ 10\uc2dc\uac04\n                    .signWith(SignatureAlgorithm.HS256, secretKey)\n                    .compact();\n        }\n\n        public Boolean validateToken(String token, String username) {\n            final String extractedUsername = extractUsername(token);\n            return (extractedUsername.equals(username) && !isTokenExpired(token));\n        }\n\n        private String extractUsername(String token) {\n            return extractAllClaims(token).getSubject();\n        }\n\n        private Claims extractAllClaims(String token) {\n            return Jwts.parser().setSigningKey(secretKey).parseClaimsJws(token).getBody();\n        }\n\n        private Boolean isTokenExpired(String token) {\n            return extractAllClaims(token).getExpiration().before(new Date());\n        }\n    }\n    <\/pre>\n
4. \uc0ac\uc6a9\uc790 \uc778\uc99d \ubc0f \ub85c\uadf8\uc778 API \uad6c\ud604<\/h2>\n
\uc774\uc81c \uc0ac\uc6a9\uc790 \uc778\uc99d \ubc0f \ub85c\uadf8\uc778 API\ub97c \uad6c\ud604\ud560 \ucc28\ub840\uc785\ub2c8\ub2e4. AuthController \ud074\ub798\uc2a4\ub97c \uc0dd\uc131\ud558\uc5ec \ud544\uc694\ud55c \uba54\uc11c\ub4dc\ub97c \ucd94\uac00\ud569\ub2c8\ub2e4.<\/p>\n
\n    import org.springframework.beans.factory.annotation.Autowired;\n    import org.springframework.http.ResponseEntity;\n    import org.springframework.security.authentication.AuthenticationManager;\n    import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;\n    import org.springframework.web.bind.annotation.*;\n\n    @RestController\n    @RequestMapping(\"\/api\/auth\")\n    public class AuthController {\n\n        @Autowired\n        private AuthenticationManager authenticationManager;\n\n        @Autowired\n        private JWTUtil jwtUtil;\n\n        @PostMapping(\"\/login\")\n        public ResponseEntity<String> login(@RequestBody AuthRequest authRequest) {\n            authenticationManager.authenticate(\n                    new UsernamePasswordAuthenticationToken(authRequest.getUsername(), authRequest.getPassword())\n            );\n            final String token = jwtUtil.generateToken(authRequest.getUsername());\n            return ResponseEntity.ok(token);\n        }\n    }\n\n    class AuthRequest {\n        private String username;\n        private String password;\n\n        \/\/ getters and setters\n    }\n    <\/pre>\n
5. \ub85c\uadf8\uc544\uc6c3 API \uad6c\ud604<\/h2>\n
\ub85c\uadf8\uc544\uc6c3 API\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c JWT \ud1a0\ud070\uc744 \uc0ad\uc81c\ud558\uc5ec \uad6c\ud604\ud569\ub2c8\ub2e4. \ubcc4\ub3c4\uc758 \ub85c\uadf8\uc544\uc6c3 API\uac00 \ud544\uc694\ud558\uc9c0 \uc54a\uc9c0\ub9cc \uc774 \ubd80\ubd84\uc5d0 \ub300\ud55c \uc608\uc81c\ub97c \ucd94\uac00\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
6. \ud1a0\ud070 \uc11c\ube44\uc2a4 \ucd94\uac00\ud558\uae30<\/h2>\n
\ud1a0\ud070 \uc11c\ube44\uc2a4\ub97c \ucd94\uac00\ud558\uc5ec \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub97c \uad00\ub9ac\ud558\uace0, \ud544\uc694\ud55c \uacbd\uc6b0 \uc0ac\uc6a9\uc790 \uc138\uc158\uc744 \uad00\ub9ac\ud558\ub294 \uae30\ub2a5\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4. TokenService \ud074\ub798\uc2a4\ub97c \uc0dd\uc131\ud558\uc5ec \uc774 \uae30\ub2a5\uc744 \uad6c\ud604\ud569\ub2c8\ub2e4.<\/p>\n
\n    import org.springframework.stereotype.Service;\n\n    @Service\n    public class TokenService {\n\n        @Autowired\n        private JWTUtil jwtUtil;\n\n        public String refreshToken(String token) {\n            if (jwtUtil.isTokenExpired(token)) {\n                String username = jwtUtil.extractUsername(token);\n                return jwtUtil.generateToken(username);\n            }\n            return token;\n        }\n    }\n    <\/pre>\n
7. \uae30\ud0c0 \uace0\ub824\uc0ac\ud56d \ubc0f \ub9c8\ubb34\ub9ac<\/h2>\n
\ubcf8 \uac15\uc88c\uc5d0\uc11c\ub294 JWT\ub97c \uc0ac\uc6a9\ud558\uc5ec \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\uace0, \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \uc704\ud55c \ud1a0\ud070 \uc11c\ube44\uc2a4\ub97c \ucd94\uac00\ud558\ub294 \ubc29\ubc95\uc744 \uc0b4\ud3b4\ubcf4\uc558\uc2b5\ub2c8\ub2e4. \uc2e4\uc81c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\uc11c\ub294 JWT\uc758 \uc720\ud6a8\uc131 \uac80\uc0ac\ub97c \uac15\ud654\ud558\uace0 \uc0ac\uc6a9\uc790 \uad8c\ud55c \uad00\ub9ac, \ud1a0\ud070 \uc800\uc7a5\uc18c \uad6c\ud604 \ub4f1 \ucd94\uac00\uc801\uc778 \ubcf4\uc548 \uc870\uce58\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n
8. \uacb0\ub860<\/h2>\n
\uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \ud65c\uc6a9\ud55c JWT \uae30\ubc18\uc758 \uc778\uc99d \uc2dc\uc2a4\ud15c \uad6c\ud604\uc740 \ud604\ub300 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ubcf4\uc548\uc744 \uac15\ud654\ud558\ub294 \ub370 \ud544\uc218\uc801\uc778 \uc694\uc18c\uac00 \ub418\uc5c8\uc2b5\ub2c8\ub2e4. \ubcf8 \uac15\uc88c\ub97c \ud1b5\ud574 JWT\uc758 \uae30\ubcf8 \uac1c\ub150\uacfc \uc774\ub97c \ud65c\uc6a9\ud55c \uc778\uc99d \uc2dc\uc2a4\ud15c \uad6c\ud604\uc758 \uae30\ucd08\ub97c \uc774\ud574\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4. \ub354 \ub098\uc544\uac00, \uc2e4\uc81c \ud504\ub85c\uc81d\ud2b8\uc5d0\uc11c \uc694\uad6c\ub418\ub294 \ub2e4\uc591\ud55c \uae30\ub2a5\uc744 \uad6c\ud604\ud558\uace0 \ucd5c\uc801\ud654\ud558\ub294 \uacbd\ud5d8\uc744 \uc313\uc544\ubcf4\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4.<\/p>\n
\uc774 \uac15\uc88c\uac00 \uc5ec\ub7ec\ubd84\uc758 \uc2a4\ud504\ub9c1 \ubd80\ud2b8 \ubc31\uc5d4\ub4dc \uac1c\ubc1c\uc5d0 \ub3c4\uc6c0\uc774 \ub418\uae38 \ubc14\ub78d\ub2c8\ub2e4!<\/p>\n