Fix/346 : 쿠키 Path 설정

server/collusic-be/.gradle/buildOutputCleanup/cache.properties

@@ -0,0 +1,2 @@
+#Tue Jan 09 20:51:54 KST 2024
+gradle.version=7.3.1

server/collusic-be/src/main/java/com/collusic/collusicbe/global/auth/JWTAuthenticationFilter.java

@@ -7,6 +7,7 @@
 import com.collusic.collusicbe.global.util.JWTUtil;
 import com.collusic.collusicbe.global.util.ParsingUtil;
 import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpMethod;
 import org.springframework.security.authentication.AuthenticationManager;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.authority.SimpleGrantedAuthority;
@@ -38,6 +39,14 @@ public JWTAuthenticationFilter(AuthenticationManager authenticationManager, Toke
     @Override
     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws IOException, ServletException, ExpiredTokenException {
 
+        String requestURI = request.getRequestURI();
+        String method = request.getMethod();
+
+        if (HttpMethod.GET.matches(method) && requestURI.startsWith("/projects")) {
+            chain.doFilter(request, response);
+            return;
+        }
+
         String bearer = request.getHeader(HttpHeaders.AUTHORIZATION);
 
         String refreshToken = CookieUtils.extractRefreshToken(request);

server/collusic-be/src/main/java/com/collusic/collusicbe/global/util/CookieUtils.java

@@ -31,8 +31,9 @@ public static String extractRefreshToken(HttpServletRequest request) {
     public static Cookie setCookieWith(String refreshToken) {
         Cookie cookie = new Cookie("refreshToken", refreshToken);
         cookie.setMaxAge(REFRESH_TIME);
-        cookie.setSecure(false); // TODO : HTTPS 적용 시 true로 옵션 변경하기
+        cookie.setSecure(false);
         cookie.setHttpOnly(true);
+        cookie.setPath("/auth");
         return cookie;
     }
 }

server/collusic-be/src/main/java/com/collusic/collusicbe/web/controller/MemberController.java

@@ -87,7 +87,7 @@ public ResponseEntity<ProfileUrlResponseDto> getProfileUrl(@PathVariable String
     }
 
     @Operation(summary = "로그아웃", description = "로그인된 회원을 로그아웃 시킨다.")
-    @GetMapping("/logout")
+    @GetMapping("/auth/logout")
     public ResponseEntity<Void> logout(HttpServletRequest request, HttpServletResponse response) {
         tokenService.deleteRefreshToken(CookieUtils.extractRefreshToken(request));
         CookieUtils.expireCookie(response, "refreshToken");

server/collusic-be/src/main/java/com/collusic/collusicbe/web/controller/TokenController.java

@@ -17,7 +17,7 @@ public class TokenController {
     private final static String BEARER_PREFIX = "Bearer ";
 
     @Operation(summary = "토큰 재발급", description = "refresh token을 통한 access token 재발급")
-    @PostMapping("/reissue")
+    @PostMapping("/auth/reissue")
     public ResponseEntity<ReissuedTokenDto> reissue(HttpServletResponse response) {
         String bearer = response.getHeader("Authorization");
         String accessToken = bearer.substring(BEARER_PREFIX.length());