실습을 위한 레거시 코드 추가

ch01~ch02/minsan/EmailManager.java

@@ -0,0 +1,90 @@
+package com.hanyang.dataportal.user.infrastructure;
+
+import com.hanyang.dataportal.core.exception.UnAuthenticationException;
+import com.hanyang.dataportal.core.response.ResponseMessage;
+import com.hanyang.dataportal.user.dto.req.ReqCodeDto;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.mail.javamail.JavaMailSender;
+import org.springframework.mail.javamail.MimeMessageHelper;
+import org.springframework.stereotype.Service;
+
+import javax.mail.MessagingException;
+import javax.mail.internet.MimeMessage;
+import java.util.Objects;
+import java.util.Random;
+
+@Service
+@RequiredArgsConstructor
+public class EmailManager {
+    private final JavaMailSender mailSender;
+    private final RedisManager redisManager;
+    @Value("${email.setFrom}")
+    private String setFrom;
+    private static final String EMAIL_TITLE = "한양대 에리카 DATA 포털 - 회원 가입을 위한 인증 이메일";
+    private static final String EMAIL_CONTENT_TEMPLATE = "한양대 에리카 DATA 포털 사이트에 가입해주셔서 감사합니다! " +
+            "아래의 인증번호를 입력하여 회원가입을 완료해주세요."+
+            "<br><br>" +
+            "인증번호 %s";
+    private static final String EMAIL_TITLE_TEMPORARY_PASSWORD = "한양대 에리카 DATA 포털 - 임시 비밀번호 발급";
+    private static final String EMAIL_CONTENT_TEMPLATE_TEMPORARY_PASSWORD = "한양대 에리카 DATA 포털 임시 비밀번호 입니다. " +
+            "아래의 임시번호를 입력하여 로그인 해주세요."+
+            "<br><br>" +
+            "임시 비밀번호 %s";
+    private static final String CHARACTERS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+
+    public String joinEmail(String email) {
+        String code = Integer.toString(makeRandomNumber());
+        String content = String.format(EMAIL_CONTENT_TEMPLATE, code);
+        mailSend(setFrom, email, EMAIL_TITLE,content);
+        redisManager.setCode(email,code);
+        return code;
+    }
+    public String temporaryPasswordEmail(String email) {
+        String temporaryPassword = generateRandomString();
+        String content = String.format(EMAIL_TITLE_TEMPORARY_PASSWORD, temporaryPassword);
+        mailSend(setFrom, email, EMAIL_CONTENT_TEMPLATE_TEMPORARY_PASSWORD,content);
+        redisManager.setCode(email,temporaryPassword);
+        return temporaryPassword;
+    }
+
+    public void checkCode(ReqCodeDto reqCodeDto) {
+        String code = redisManager.getCode(reqCodeDto.getEmail());
+        if(!Objects.equals(code, reqCodeDto.getCode())){
+            throw new UnAuthenticationException(ResponseMessage.AUTHENTICATION_FAILED);
+        }
+    }
+
+    private void mailSend(String setFrom, String toMail, String title, String content) {
+        MimeMessage message = mailSender.createMimeMessage();
+        try {
+            MimeMessageHelper helper = new MimeMessageHelper(message,true,"utf-8");
+            helper.setFrom(setFrom);
+            helper.setTo(toMail);
+            helper.setSubject(title);
+            helper.setText(content,true);
+            mailSender.send(message);
+        } catch (MessagingException e) {
+            e.printStackTrace();
+        }
+    }
+
+    private int makeRandomNumber() {
+        Random r = new Random();
+        StringBuilder randomNumber = new StringBuilder();
+        for(int i = 0; i < 6; i++) {
+            randomNumber.append(r.nextInt(10));
+        }
+        return Integer.parseInt(randomNumber.toString());
+    }
+
+    private String generateRandomString() {
+        Random r = new Random();
+        StringBuilder stringBuilder = new StringBuilder(10);
+        for (int i = 0; i < 10; i++) {
+            stringBuilder.append(CHARACTERS.charAt(r.nextInt(10)));
+        }
+        return stringBuilder.toString();
+    }
+
+}

ch01~ch02/minsan/UserLoginService.java

@@ -0,0 +1,94 @@
+package com.hanyang.dataportal.user.service;
+
+import com.hanyang.dataportal.core.exception.TokenExpiredException;
+import com.hanyang.dataportal.core.exception.UnAuthenticationException;
+import com.hanyang.dataportal.core.jwt.component.JwtTokenProvider;
+import com.hanyang.dataportal.core.jwt.component.JwtTokenResolver;
+import com.hanyang.dataportal.core.jwt.component.JwtTokenValidator;
+import com.hanyang.dataportal.core.jwt.dto.TokenDto;
+import com.hanyang.dataportal.core.response.ResponseMessage;
+import com.hanyang.dataportal.user.domain.User;
+import com.hanyang.dataportal.user.dto.req.ReqLoginDto;
+import com.hanyang.dataportal.user.dto.req.ReqPasswordDto;
+import com.hanyang.dataportal.user.infrastructure.EmailManager;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseCookie;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+@Service
+@RequiredArgsConstructor
+@Transactional
+public class UserLoginService {
+    private final AuthenticationManagerBuilder authenticationManagerBuilder;
+    private final JwtTokenProvider jwtTokenProvider;
+    private final JwtTokenValidator jwtTokenValidator;
+    private final JwtTokenResolver jwtTokenResolver;
+    private final UserService userService;
+    private final EmailManager emailManager;
+    private final PasswordEncoder passwordEncoder;
+
+    public TokenDto login(ReqLoginDto reqLoginDto) {
+        // 1. Login ID/PW 를 기반으로 Authentication 객체 생성
+        // 이때 authentication 는 인증 여부를 확인하는 authenticated 값이 false
+        final UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(reqLoginDto.getEmail(), reqLoginDto.getPassword());
+
+        // 2. 실제 검증 (사용자 비밀번호 체크)이 이루어지는 부분
+        // authenticate 매서드가 실행될 때 CustomUserDetailsService 에서 만든 loadUserByUsername 메서드가 실행
+        final Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authenticationToken);
+
+        // JWT 토큰 생성
+        return jwtTokenProvider.generateLoginToken(authentication, reqLoginDto.getAutoLogin());
+    }
+
+    /**
+     * 액세스 토큰(+ 리프레시 토큰)을 재발급하는 메서드
+     * @param refreshToken
+     * @return
+     * @throws TokenExpiredException
+     */
+    public TokenDto reissueToken(final String refreshToken) throws TokenExpiredException {
+        final Authentication authentication = jwtTokenResolver.getAuthentication(refreshToken);
+        final boolean autoLogin = jwtTokenResolver.getAutoLogin(refreshToken);
+        if (jwtTokenValidator.validateToken(refreshToken)) {
+            return jwtTokenProvider.generateLoginToken(authentication, autoLogin);
+        }
+        throw new TokenExpiredException(ResponseMessage.REFRESH_EXPIRED);
+    }
+
+    /**
+     * refresh token 쿠키를 리턴하는 메서드
+     * @param tokenDto
+     * @return
+     */
+    public ResponseCookie generateRefreshCookie(final TokenDto tokenDto) {
+        return jwtTokenProvider.generateRefreshCookie(
+                tokenDto.getRefreshToken(),
+                jwtTokenResolver.getAutoLogin(tokenDto.getAccessToken())
+        );
+    }
+
+    public void passwordCheck(UserDetails userDetails, ReqPasswordDto reqPasswordDto){
+        User user = userService.findByEmail(userDetails.getUsername());
+        //일치하면
+        if(passwordEncoder.matches(reqPasswordDto.getPassword(),user.getPassword())) {
+            return;
+        }
+        throw new UnAuthenticationException(ResponseMessage.WRONG_PASSWORD);
+    }
+    public void changePassword(UserDetails userDetails,String newPassword){
+        User user = userService.findByEmail(userDetails.getUsername());
+        user.updatePassword(passwordEncoder.encode(newPassword));
+    }
+
+    public void findPassword(UserDetails userDetails){
+        User user = userService.findByEmail(userDetails.getUsername());
+        String temporaryPassword = emailManager.temporaryPasswordEmail(user.getPassword());
+        changePassword(userDetails,temporaryPassword);
+    }
+}