\uc624\ub298 \uac15\uc88c\uc5d0\uc11c\ub294 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec OAuth2<\/strong>\ub97c \uae30\ubc18\uc73c\ub85c \ud55c \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uc5b4\ub5bb\uac8c \uad6c\ud604\ud558\ub294\uc9c0\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc54c\uc544\ubcf4\uaca0\uc2b5\ub2c8\ub2e4. OAuth2\ub294 \ub300\ud45c\uc801\uc778 \uc778\uc99d \ud504\ub85c\ud1a0\ucf5c\ub85c, \uc678\ubd80 \uc11c\ube44\uc2a4\uc640\uc758 \ud1b5\ud569\uc744 \ud1b5\ud574 \ud6a8\uc728\uc801\uc774\uace0 \uc548\uc804\ud55c \uc778\uc99d\uc744 \uac00\ub2a5\ud558\uac8c \ud569\ub2c8\ub2e4. \uc774 \uae00\uc744 \ud1b5\ud574 \uc2e4\uc9c8\uc801\uc778 \uc608\uc81c\uc640 \ud568\uaed8 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\uc5d0\uc11c \uc5b4\ub5bb\uac8c OAuth2 \uc11c\ube44\uc2a4\ub97c \uad6c\ud604\ud560 \uc218 \uc788\ub294\uc9c0\ub97c \ub2e8\uacc4\ubcc4\ub85c \uc124\uba85\ud558\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n OAuth2\ub294 \uc790\uc6d0 \uc18c\uc720\uc790\uac00 \uc544\ub2cc \uc81c3\uc758 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc790\uc6d0 \uc18c\uc720\uc790\uc758 \uc790\uc6d0\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub3c4\ub85d \ud558\ub294 \ud504\ub85c\ud1a0\ucf5c\uc785\ub2c8\ub2e4. \uc774\ub97c \ud1b5\ud574 \uc0ac\uc6a9\uc790\ub294 \ube44\ubc00\ubc88\ud638\ub97c \uacf5\uc720\ud560 \ud544\uc694 \uc5c6\uc774 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. OAuth2\ub294 \ub450 \uac00\uc9c0 \uc8fc\uc694 \uc5ed\ud560\uc744 \uac00\uc9c0\uace0 \uc788\uc2b5\ub2c8\ub2e4:<\/p>\n \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec OAuth2\ub97c \uc124\uc815\ud558\uae30 \uc704\ud574, \uba3c\uc800 \ud544\uc694\ud55c \uc758\uc874\uc131\uc744 \ucd94\uac00\ud574\uc57c \ud569\ub2c8\ub2e4. Gradle \ub610\ub294 Maven\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc5ec\uae30\uc11c\ub294 Maven\uc744 \uae30\uc900\uc73c\ub85c \uc124\uba85\ud558\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n OAuth2 \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc0ac\uc6a9\ud560 \uae30\ubcf8 \uc124\uc815\uc744 \uc8fc\uc758:<\/span> \uc704\uc758 \uc774\uc81c OAuth2\ub97c \uc801\uc6a9\ud560 \uc218 \uc788\ub294 \uae30\ubcf8 \uc124\uc815\uc774 \uc644\ub8cc\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c \ub2e8\uacc4\ub85c, \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n \uc2a4\ud504\ub9c1 \uc2dc\ud050\ub9ac\ud2f0\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \ub300\ud55c \ubcf4\uc548 \uc124\uc815\uc744 \uad6c\uc131\ud569\ub2c8\ub2e4. \ub2e4\uc74c \ucf54\ub4dc\ub97c \ub85c\uadf8\uc778 \ud398\uc774\uc9c0\ub97c \ub9cc\ub4e4\uae30 \uc704\ud574 \ub85c\uadf8\uc778 \ud6c4 \uc0ac\uc6a9\uc790\uc758 \uc815\ubcf4\ub97c \ucc98\ub9ac\ud558\ub294 \ubc29\ubc95\uc744 \uc54c\uc544\ubcf4\uaca0\uc2b5\ub2c8\ub2e4. \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc740 \uc2a4\ud504\ub9c1 \uc2dc\ud050\ub9ac\ud2f0\uc758 \uae30\ubcf8 \uc81c\uacf5 \uae30\ub2a5\uc73c\ub85c \uc27d\uac8c \uad6c\ud604\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uba54\uc778 \ud398\uc774\uc9c0\uc5d0 \ub85c\uadf8\uc544\uc6c3 \ubc84\ud2bc\uc744 \ucd94\uac00\ud558\uc5ec \uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc544\uc6c3\ud560 \uc218 \uc788\ub3c4\ub85d \ud569\ub2c8\ub2e4. \ub300\ub7b5\uc801\uc778 HTML \ucf54\ub4dc\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:<\/p>\n \uc624\ub298 \uac15\uc88c\uc5d0\uc11c\ub294 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec OAuth2\ub97c \ud1b5\ud55c \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \uc54c\uc544\ubcf4\uc558\uc2b5\ub2c8\ub2e4. OAuth2\ub294 \uc678\ubd80 \uc11c\ube44\uc2a4\ub97c \ud65c\uc6a9\ud558\uc5ec \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \ubcf4\ub2e4 \uc27d\uace0 \uc548\uc804\ud558\uac8c \ucc98\ub9ac\ud560 \uc218 \uc788\ub294 \uc720\uc6a9\ud55c \ubc29\ubc95\uc785\ub2c8\ub2e4. \uc774\ubc88 \uac15\uc88c\ub97c \ud1b5\ud574 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\uc640 OAuth2 \uc124\uc815 \uacfc\uc815\uc744 \uc774\ud574\ud558\uace0, \uc2e4\uc9c8\uc801\uc778 \uad6c\ud604 \ubc29\ubc95\uc744 \uc775\ud614\uae30\ub97c \ubc14\ub78d\ub2c8\ub2e4.<\/p>\n \ub354\uc6b1 \uae4a\uc774 \uc788\ub294 \ub0b4\uc6a9\uc744 \uc6d0\ud558\uc2e0\ub2e4\uba74 \uc544\ub798\uc758 \ub9ac\uc18c\uc2a4\ub97c \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4:<\/p>\n1. OAuth2\ub780 \ubb34\uc5c7\uc778\uac00?<\/h2>\n
\n
1.1 OAuth2\uc758 \uc8fc\uc694 \uad6c\uc131 \uc694\uc18c<\/h3>\n
\n
2. \uc2a4\ud504\ub9c1 \ubd80\ud2b8 \ud658\uacbd \uc124\uc815<\/h2>\n
2.1 Maven \uc758\uc874\uc131 \ucd94\uac00<\/h3>\n
pom.xml\n<dependencies>\n <dependency>\n <groupId>org.springframework.boot<\/groupId>\n <artifactId>spring-boot-starter-web<\/artifactId>\n <\/dependency>\n <dependency>\n <groupId>org.springframework.boot<\/groupId>\n <artifactId>spring-boot-starter-oauth2-client<\/artifactId>\n <\/dependency>\n <dependency>\n <groupId>org.springframework.boot<\/groupId>\n <artifactId>spring-boot-starter-security<\/artifactId>\n <\/dependency>\n<\/dependencies>\n<\/code><\/pre>\n2.2 application.properties \uc124\uc815<\/h3>\n
application.properties<\/code> \ud30c\uc77c\uc5d0 \ucd94\uac00\ud569\ub2c8\ub2e4.<\/p>\napplication.properties\nspring.security.oauth2.client.registration.google.client-id=YOUR_CLIENT_ID\nspring.security.oauth2.client.registration.google.client-secret=YOUR_CLIENT_SECRET\nspring.security.oauth2.client.registration.google.redirect-uri={baseUrl}\/login\/oauth2\/code\/{registrationId}\nspring.security.oauth2.client.registration.google.scope=email,profile\nspring.security.oauth2.client.provider.google.authorization-uri=https:\/\/accounts.google.com\/o\/oauth2\/auth\nspring.security.oauth2.client.provider.google.token-uri=https:\/\/oauth2.googleapis.com\/token\nspring.security.oauth2.client.provider.google.user-info-uri=https:\/\/www.googleapis.com\/oauth2\/v3\/userinfo\nspring.security.oauth2.client.provider.google.user-name-attribute=sub\n<\/code><\/pre>\nYOUR_CLIENT_ID<\/code> \ubc0f YOUR_CLIENT_SECRET<\/code>\ub294 Google Developer Console\uc5d0\uc11c \uc0dd\uc131\ud55c OAuth 2.0 \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc790\uaca9 \uc99d\uba85\uc744 \uc785\ub825\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n3. OAuth2 \ub85c\uadf8\uc778\/\ub85c\uadf8\uc544\uc6c3 \uad6c\ud604<\/h2>\n
3.1 Security Configuration<\/h3>\n
SecurityConfig.java<\/code> \ud074\ub798\uc2a4\uc5d0 \ucd94\uac00\ud569\ub2c8\ub2e4:<\/p>\nSecurityConfig.java\nimport org.springframework.context.annotation.Configuration;\nimport org.springframework.security.config.annotation.web.builders.HttpSecurity;\nimport org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;\nimport org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;\n\n@Configuration\n@EnableWebSecurity\npublic class SecurityConfig extends WebSecurityConfigurerAdapter {\n\n @Override\n protected void configure(HttpSecurity http) throws Exception {\n http\n .authorizeRequests()\n .antMatchers(\"\/\", \"\/login\", \"\/css\/**\", \"\/js\/**\").permitAll()\n .anyRequest().authenticated()\n .and()\n .logout()\n .logoutSuccessUrl(\"\/\")\n .permitAll()\n .and()\n .oauth2Login();\n }\n}\n<\/code><\/pre>\n3.2 \ub85c\uadf8\uc778 \ud398\uc774\uc9c0 \uad6c\ud604<\/h3>\n
login.html<\/code> \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uace0 \ub2e4\uc74c \ub0b4\uc6a9\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4:<\/p>\nlogin.html\n<!DOCTYPE html>\n<html lang=\"ko\">\n<head>\n <meta charset=\"UTF-8\">\n <title>\ub85c\uadf8\uc778<\/title>\n<\/head>\n<body>\n <h1>\ub85c\uadf8\uc778 \ud398\uc774\uc9c0<\/h1>\n <a href=\"\/oauth2\/authorization\/google\">Google\ub85c \ub85c\uadf8\uc778<\/a>\n<\/body>\n<\/html>\n<\/code><\/pre>\n3.3 \uc0ac\uc6a9\uc790 \uc815\ubcf4 \ucc98\ub9ac<\/h3>\n
OAuth2UserService<\/code>\ub97c \uad6c\ud604\ud558\uc5ec \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub97c \uac00\uc838\uc62c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\nCustomOAuth2UserService.java\nimport org.springframework.security.core.userdetails.UserDetailsService;\nimport org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest;\nimport org.springframework.security.oauth2.client.userinfo.OAuth2UserService;\nimport org.springframework.security.oauth2.core.OAuth2AuthenticationException;\nimport org.springframework.security.oauth2.core.user.OAuth2User;\nimport org.springframework.stereotype.Service;\n\n@Service\npublic class CustomOAuth2UserService implements OAuth2UserService<OAuth2UserRequest, OAuth2User> {\n\n @Override\n public OAuth2User loadUser(OAuth2UserRequest userRequest) throws OAuth2AuthenticationException {\n \/\/ \uc0ac\uc6a9\uc790 \uc815\ubcf4 \ucc98\ub9ac\n \/\/ \uc608\ub97c \ub4e4\uc5b4, \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub97c \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0 \uc800\uc7a5\ud558\uac70\ub098 \uc138\uc158\uc5d0 \ucd94\uac00\n }\n}\n<\/code><\/pre>\n4. OAuth2 \ub85c\uadf8\uc544\uc6c3 \uad6c\ud604<\/h2>\n
SecurityConfig<\/code> \ud074\ub798\uc2a4\uc5d0\uc11c \ub85c\uadf8\uc544\uc6c3 \uc131\uacf5 \ud6c4 \ub9ac\ub2e4\uc774\ub809\uc158\ud560 URL\uc744 \uc124\uc815\ud558\uc600\uc73c\ubbc0\ub85c, \ub85c\uadf8\uc544\uc6c3 \ubc84\ud2bc\uc744 \ucd94\uac00\ud558\uba74 \ub429\ub2c8\ub2e4.<\/p>\n4.1 \ub85c\uadf8\uc544\uc6c3 \ubc84\ud2bc \ucd94\uac00<\/h3>\n
index.html\n<!DOCTYPE html>\n<html lang=\"ko\">\n<head>\n <meta charset=\"UTF-8\">\n <title>\ud648 \ud398\uc774\uc9c0<\/title>\n<\/head>\n<body>\n <h1>\ud658\uc601\ud569\ub2c8\ub2e4!<\/h1>\n <a href=\"\/logout\">\ub85c\uadf8\uc544\uc6c3<\/a>\n<\/body>\n<\/html>\n<\/code><\/pre>\n5. \uacb0\ub860<\/h2>\n
5.1 \ucd94\uac00 \ub9ac\uc18c\uc2a4<\/h3>\n