{"id":26436,"date":"2024-10-27T10:52:40","date_gmt":"2024-10-27T10:52:40","guid":{"rendered":"http:\/\/atmokpo.com\/w\/?p=26436"},"modified":"2024-11-26T07:43:05","modified_gmt":"2024-11-26T07:43:05","slug":"%ec%8a%a4%ed%94%84%eb%a7%81-%eb%b6%80%ed%8a%b8-%eb%b0%b1%ec%97%94%eb%93%9c-%ea%b0%9c%eb%b0%9c-%ea%b0%95%ec%a2%8c-oauth2%eb%a1%9c-%eb%a1%9c%ea%b7%b8%ec%9d%b8-%eb%a1%9c%ea%b7%b8%ec%95%84%ec%9b%83-12","status":"publish","type":"post","link":"https:\/\/atmokpo.com\/w\/26436\/","title":{"rendered":"\uc2a4\ud504\ub9c1 \ubd80\ud2b8 \ubc31\uc5d4\ub4dc \uac1c\ubc1c \uac15\uc88c, OAuth2\ub85c \ub85c\uadf8\uc778 \ub85c\uadf8\uc544\uc6c3 \uad6c\ud604, \ucfe0\ud0a4\ub780"},"content":{"rendered":"

<\/p>\n

\n
\n

1. \uc11c\ub860<\/h2>\n

\ud604\ub300\uc758 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uac1c\ubc1c\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc778\uc99d \ubc0f \uad8c\ud55c \uad00\ub9ac\uc758 \uc911\uc694\uc131\uc740 \ub0a0\ub85c \uc99d\uac00\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \uc774\uc720\ub85c OAuth2 \ud504\ub85c\ud1a0\ucf5c\uc774 \ub110\ub9ac \uc0ac\uc6a9\ub418\uace0 \uc788\uc73c\uba70, \uc774\ub294 \ub2e4\uc591\ud55c \uc2dc\uc2a4\ud15c\uacfc \ud50c\ub7ab\ud3fc\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \ubcf4\ub2e4 \uc720\uc5f0\ud558\uac8c \ucc98\ub9ac\ud560 \uc218 \uc788\ub294 \ubc29\ubc95\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \ubcf8 \uac15\uc88c\uc5d0\uc11c\ub294 \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub97c \ud65c\uc6a9\ud558\uc5ec OAuth2\ub97c \uae30\ubc18\uc73c\ub85c \ud55c \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\ub294 \ubc29\ubc95\uacfc \ucfe0\ud0a4\uc5d0 \ub300\ud55c \uac1c\ub150\uc744 \uc790\uc138\ud788 \ub2e4\ub904 \ubcf4\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n<\/section>\n

\n

2. \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub780?<\/h2>\n

\uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub294 \uc2a4\ud504\ub9c1 \ud504\ub808\uc784\uc6cc\ud06c\ub97c \uae30\ubc18\uc73c\ub85c \ud55c \uac1c\ubc1c \ud504\ub808\uc784\uc6cc\ud06c\ub85c, \uc2e0\uc18d\ud55c \uac1c\ubc1c\uc744 \uc9c0\uc6d0\ud558\uace0 \ubcf5\uc7a1\ud55c \uc124\uc815\uc744 \uac04\uc18c\ud654\ud558\uae30 \uc704\ud574 \ub9cc\ub4e4\uc5b4\uc84c\uc2b5\ub2c8\ub2e4. \uc774\ub97c \ud1b5\ud574 \uac1c\ubc1c\uc790\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ube44\uc988\ub2c8\uc2a4 \ub85c\uc9c1\uc5d0 \uc9d1\uc911\ud560 \uc218 \uc788\uc73c\uba70, \uc124\uc815\uc5d0 \uc18c\uc694\ub418\ub294 \uc2dc\uac04\uc744 \uc904\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc2a4\ud504\ub9c1 \ubd80\ud2b8\ub294 \uc790\uccb4 \uc784\ubca0\ub514\ub4dc \uc11c\ubc84(\uc608: Tomcat, Jetty \ub4f1)\ub97c \uc81c\uacf5\ud558\ubbc0\ub85c, \ubcc4\ub3c4\uc758 \uc6f9 \uc11c\ubc84 \uc124\uce58 \uc5c6\uc774\ub3c4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc2e4\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/section>\n

\n

3. OAuth2\ub780?<\/h2>\n

OAuth2\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc0ac\uc6a9\uc790 \ub370\uc774\ud130\ub97c \uc548\uc804\ud558\uac8c \uc811\uadfc\ud560 \uc218 \uc788\ub3c4\ub85d \ud5c8\uc6a9\ud558\ub294 \uc778\uc99d \ud504\ub808\uc784\uc6cc\ud06c\uc785\ub2c8\ub2e4. \uc989, \uc0ac\uc6a9\uc790\uac00 \ube44\ubc00\ubc88\ud638\uc640 \uac19\uc740 \ubbfc\uac10\ud55c \uc815\ubcf4\ub97c \ub178\ucd9c\ud558\uc9c0 \uc54a\uace0\ub3c4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \ub300\ud55c \uc811\uadfc \uad8c\ud55c\uc744 \ubd80\uc5ec\ud560 \uc218 \uc788\ub294 \ubc29\ubc95\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. OAuth2\uc758 \uae30\ubcf8\uc801\uc778 \ud750\ub984\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:<\/p>\n

    \n
  1. \uc0ac\uc6a9\uc790 \uc778\uc99d:<\/strong> \uc0ac\uc6a9\uc790\uac00 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \ub85c\uadf8\uc778\ud558\uba74, \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc740 OAuth \uc11c\ube44\uc2a4 \uc81c\uacf5\uc790\uc5d0\uac8c \uc0ac\uc6a9\uc790\uc5d0\uac8c \uad8c\ud55c\uc744 \uc694\uccad\ud569\ub2c8\ub2e4.<\/li>\n
  2. Authorization Code \ubc1c\uae09:<\/strong> \uc0ac\uc6a9\uc790 \uc778\uc99d\uc774 \uc644\ub8cc\ub418\uba74, OAuth \uc11c\ube44\uc2a4 \uc81c\uacf5\uc790\ub294 Auth Code\ub97c \ud074\ub77c\uc774\uc5b8\ud2b8 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc804\ub2ec\ud569\ub2c8\ub2e4.<\/li>\n
  3. Access Token \ubc1c\uae09:<\/strong> \ud074\ub77c\uc774\uc5b8\ud2b8 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc740 Authorization Code\ub97c \ud1b5\ud574 Access Token\uc744 \uc694\uccad\ud558\uace0, \uc774\ub97c \ud1b5\ud574 \uc0ac\uc6a9\uc790 \ub370\uc774\ud130\uc5d0 \uc811\uadfc\ud569\ub2c8\ub2e4.<\/li>\n<\/ol>\n

    \uc774\ub7ec\ud55c \ub2e8\uacc4\ub97c \ud1b5\ud574 OAuth2\ub294 \ub2e4\uc591\ud55c \uc0ac\uc6a9\uc790 \uc778\uc99d \uacfc\uc815\uc744 \uac04\uc18c\ud654\ud558\uace0 \ubcf4\ub2e4 \uc548\uc804\ud558\uac8c \ucc98\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/section>\n

    \n

    4. \uc2a4\ud504\ub9c1 \ubd80\ud2b8\uc5d0\uc11c OAuth2 \uad6c\ud604\ud558\uae30<\/h2>\n

    \uc2a4\ud504\ub9c1 \ubd80\ud2b8\uc5d0\uc11c\ub294 spring-boot-starter-oauth2-client<\/code> \ub97c \uc0ac\uc6a9\ud558\uc5ec OAuth2\ub97c \uc27d\uac8c \uad6c\ud604\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798\ub294 OAuth2 \uc124\uc815 \uacfc\uc815\uc785\ub2c8\ub2e4.<\/p>\n

    4.1. \uc758\uc874\uc131 \ucd94\uac00<\/h3>\n

    \uba3c\uc800, Maven \ud504\ub85c\uc81d\ud2b8\uc758 pom.xml<\/code> \ud30c\uc77c\uc5d0 \ub2e4\uc74c\uacfc \uac19\uc740 \uc758\uc874\uc131\uc744 \ucd94\uac00\ud574\uc57c \ud569\ub2c8\ub2e4:<\/p>\n

    <dependency>\n    <groupId>org.springframework.boot<\/groupId>\n    <artifactId>spring-boot-starter-oauth2-client<\/artifactId>\n<\/dependency><\/code><\/pre>\n
    4.2. application.yml \uc124\uc815<\/h3>\n
    \uadf8 \ub2e4\uc74c, src\/main\/resources\/application.yml<\/code> \ud30c\uc77c\uc5d0 OAuth2 \uacf5\uae09\uc790\uc5d0 \ub300\ud55c \uc124\uc815\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, Google OAuth2\ub97c \uc0ac\uc6a9\ud558\uace0\uc790 \ud560 \ub54c, \ub2e4\uc74c\uacfc \uac19\uc774 \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:<\/p>\n
    spring:\n  security:\n    oauth2:\n      client:\n        registration:\n          google:\n            client-id: YOUR_CLIENT_ID\n            client-secret: YOUR_CLIENT_SECRET\n            scope: profile, email\n        provider:\n          google:\n            authorization-uri: https:\/\/accounts.google.com\/o\/oauth2\/auth\n            token-uri: https:\/\/oauth2.googleapis.com\/token\n            user-info-uri: https:\/\/www.googleapis.com\/oauth2\/v3\/userinfo\n            user-name-attribute: sub<\/code><\/pre>\n
    4.3. \ubcf4\uc548 \uc124\uc815<\/h3>\n
    \ub2e4\uc74c\uc73c\ub85c, \uc2a4\ud504\ub9c1 \uc2dc\ud050\ub9ac\ud2f0\ub97c \uc0ac\uc6a9\ud558\uc5ec \ubcf4\uc548\uc744 \uc124\uc815\ud569\ub2c8\ub2e4. WebSecurityConfigurerAdapter<\/code>\ub97c \uc0c1\uc18d\ud558\uc5ec \uc544\ub798\uc640 \uac19\uc774 \uc124\uc815\ud569\ub2c8\ub2e4:<\/p>\n
    import org.springframework.context.annotation.Configuration;\nimport org.springframework.security.config.annotation.web.builders.HttpSecurity;\nimport org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;\nimport org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;\n\n@Configuration\n@EnableWebSecurity\npublic class SecurityConfig extends WebSecurityConfigurerAdapter {\n    @Override\n    protected void configure(HttpSecurity http) throws Exception {\n        http\n            .authorizeRequests()\n                .antMatchers(\"\/\", \"\/login\").permitAll()\n                .anyRequest().authenticated()\n                .and()\n            .oauth2Login();\n    }\n}<\/code><\/pre>\n
    4.4. \ub85c\uadf8\uc778\uacfc \ub85c\uadf8\uc544\uc6c3<\/h3>\n
    OAuth2 \ub85c\uadf8\uc778\uc744 \uad6c\ud604\ud558\uae30 \uc704\ud574\uc11c\ub294 \uae30\ubcf8\uc801\uc73c\ub85c \uc81c\uacf5\ub418\ub294 \ub85c\uadf8\uc778 \ud654\uba74\uc744 \uc0ac\uc6a9\ud558\uac70\ub098, \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5 \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub85c\uadf8\uc544\uc6c3 \uae30\ub2a5\uc740 \ub2e4\uc74c\uacfc \uac19\uc774 \uc124\uc815\ud569\ub2c8\ub2e4:<\/p>\n
    http\n    .logout()\n        .logoutSuccessUrl(\"\/\")\n        .permitAll();<\/code><\/pre>\n
    \uc774\uc81c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc2e4\ud589\ud558\uba74, \uc0ac\uc6a9\uc790\ub294 OAuth2\ub85c \ub85c\uadf8\uc778\uc774 \uac00\ub2a5\ud569\ub2c8\ub2e4. \uc131\uacf5\uc801\uc73c\ub85c \ub85c\uadf8\uc778\ud558\uba74, \uc0ac\uc6a9\uc790\uc758 \uc815\ubcf4\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/section>\n
    \n
    5. \ucfe0\ud0a4\ub780?<\/h2>\n
    \ucfe0\ud0a4\ub294 \uc6f9 \ube0c\ub77c\uc6b0\uc800\uac00 \uc800\uc7a5\ud558\ub294 \uc791\uc740 \ub370\uc774\ud130 \uc870\uac01\uc73c\ub85c, \uc8fc\ub85c \uc0ac\uc6a9\uc790\uc758 \uc138\uc158 \uc815\ubcf4\ub97c \uc800\uc7a5\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \ucfe0\ud0a4\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc11c\ubc84\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc0c1\ud0dc\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc73c\ubbc0\ub85c, \uc0ac\uc6a9\uc790\uac00 \ud398\uc774\uc9c0\ub97c \uc0c8\ub85c \uace0\uce68\ud558\uac70\ub098 \ub2e4\ub978 \ud398\uc774\uc9c0\ub85c \uc774\ub3d9\ud574\ub3c4 \ub85c\uadf8\uc778 \uc0c1\ud0dc\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
    5.1. \ucfe0\ud0a4\uc758 \ud2b9\uc9d5<\/h3>\n