feat: Filter 순서 세팅

app/api/src/main/java/org/example/config/SecurityConfig.java

@@ -1,20 +1,28 @@
 package org.example.config;
 
 import java.util.Collections;
+import lombok.RequiredArgsConstructor;
+import org.example.filter.ExceptionHandlerFilter;
+import org.example.filter.JWTFilter;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
 import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.CorsConfigurationSource;
 
 @Configuration
 @EnableWebSecurity
+@RequiredArgsConstructor
 public class SecurityConfig {
 
+    private final JWTFilter jwtFilter;
+    private final ExceptionHandlerFilter exceptionHandlerFilter;
+
     @Bean
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         return http
@@ -29,6 +37,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                     .requestMatchers("swagger-ui/**", "/v3/api-docs/**").permitAll()
                     .anyRequest().permitAll()
             )
+            .addFilterBefore(jwtFilter, UsernamePasswordAuthenticationFilter.class)
+            .addFilterBefore(exceptionHandlerFilter, JWTFilter.class)
             .build();
     }
 

app/api/src/main/java/org/example/error/GlobalExceptionHandler.java

@@ -1,8 +1,8 @@
 package org.example.error;
 
-import exception.BusinessException;
-import exception.ErrorResponse;
-import exception.GlobalError;
+import org.example.exception.BusinessException;
+import org.example.exception.ErrorResponse;
+import org.example.exception.GlobalError;
 import jakarta.validation.ConstraintViolationException;
 import java.util.UUID;
 import lombok.extern.slf4j.Slf4j;

app/api/src/main/java/org/example/filter/ExceptionHandlerFilter.java

@@ -1,8 +1,8 @@
 package org.example.filter;
 
 import com.fasterxml.jackson.databind.ObjectMapper;
-import exception.BusinessException;
-import exception.ErrorResponse;
+import org.example.exception.BusinessException;
+import org.example.exception.ErrorResponse;
 import jakarta.servlet.FilterChain;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;

app/api/src/main/java/org/example/security/token/JWTFilter.java → app/api/src/main/java/org/example/filter/JWTFilter.java

@@ -1,4 +1,4 @@
-package org.example.security.token;
+package org.example.filter;
 
 import com.fasterxml.jackson.databind.ObjectMapper;
 import jakarta.servlet.FilterChain;
@@ -11,6 +11,8 @@
 import org.example.security.dto.AuthenticatedUser;
 import org.example.security.dto.TokenParam;
 import org.example.security.dto.UserParam;
+import org.example.security.token.JWTProcessor;
+import org.example.security.token.RefreshTokenProcessor;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.authority.SimpleGrantedAuthority;
 import org.springframework.security.core.context.SecurityContextHolder;

app/api/src/main/java/org/example/security/token/JWTProcessor.java

@@ -1,6 +1,6 @@
 package org.example.security.token;
 
-import exception.BusinessException;
+import org.example.exception.BusinessException;
 import io.jsonwebtoken.ExpiredJwtException;
 import io.jsonwebtoken.Jwt;
 import io.jsonwebtoken.Jwts;

app/api/src/main/java/org/example/security/vo/TokenError.java

@@ -1,6 +1,6 @@
 package org.example.security.vo;
 
-import exception.BusinessError;
+import org.example.exception.BusinessError;
 
 public enum TokenError implements BusinessError {
 

app/api/src/test/java/org/example/security/token/JWTProcessorTest.java

@@ -3,7 +3,7 @@
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
 
-import exception.BusinessException;
+import org.example.exception.BusinessException;
 import java.util.Date;
 import java.util.UUID;
 import org.example.property.TokenProperty;

common/src/main/java/exception/BusinessError.java → common/src/main/java/org/example/exception/BusinessError.java

@@ -1,4 +1,4 @@
-package exception;
+package org.example.exception;
 
 public interface BusinessError {
 

common/src/main/java/exception/BusinessException.java → common/src/main/java/org/example/exception/BusinessException.java

@@ -1,4 +1,4 @@
-package exception;
+package org.example.exception;
 
 public class BusinessException extends RuntimeException {
 

common/src/main/java/exception/ErrorResponse.java → common/src/main/java/org/example/exception/ErrorResponse.java

@@ -1,4 +1,4 @@
-package exception;
+package org.example.exception;
 
 public record ErrorResponse(
     String errorId,

common/src/main/java/exception/GlobalError.java → common/src/main/java/org/example/exception/GlobalError.java

@@ -1,4 +1,4 @@
-package exception;
+package org.example.exception;
 
 public enum GlobalError implements BusinessError {