diff --git a/src/main/java/com/umc/teamC/global/config/SecurityConfig.java b/src/main/java/com/umc/teamC/global/config/SecurityConfig.java index efaa0c4..ffeb07b 100644 --- a/src/main/java/com/umc/teamC/global/config/SecurityConfig.java +++ b/src/main/java/com/umc/teamC/global/config/SecurityConfig.java @@ -6,7 +6,6 @@ import jakarta.servlet.http.HttpServletRequest; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; -import org.springframework.http.HttpMethod; import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration; import org.springframework.security.config.annotation.web.builders.HttpSecurity; @@ -15,6 +14,7 @@ import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.web.SecurityFilterChain; import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; +import org.springframework.security.web.authentication.logout.LogoutFilter; import org.springframework.web.cors.CorsConfiguration; import org.springframework.web.cors.CorsConfigurationSource; @@ -35,6 +35,7 @@ public class SecurityConfig { private final JWTUtil jwtUtil; + public SecurityConfig(AuthenticationConfiguration authenticationConfiguration, JWTUtil jwtUtil) { this.authenticationConfiguration = authenticationConfiguration; @@ -66,6 +67,7 @@ public CorsConfiguration getCorsConfiguration(HttpServletRequest request) { CorsConfiguration configuration = new CorsConfiguration(); configuration.setAllowedOrigins(Collections.singletonList("http://localhost:3000")); + configuration.setAllowedOrigins(Collections.singletonList("http://43.201.182.155:3000")); configuration.setAllowedMethods(Collections.singletonList("*")); configuration.setAllowCredentials(true); configuration.setAllowedHeaders(Collections.singletonList("*")); @@ -109,6 +111,7 @@ public CorsConfiguration getCorsConfiguration(HttpServletRequest request) { http .addFilterAt(new LoginFilter(authenticationManager(authenticationConfiguration), jwtUtil), UsernamePasswordAuthenticationFilter.class); + //세션 설정 //JWT에서는 세션을 항상 STATELESS 상태로 저장해야 함 http @@ -118,4 +121,4 @@ public CorsConfiguration getCorsConfiguration(HttpServletRequest request) { return http.build(); } -} +} \ No newline at end of file