[ADD] 외부 로그인 및 Bearer 토큰 발급 API 추가, ExternalAuthController 및 ExternalAuthService 구현

main
bjkim 8 months ago
parent fcbe225c04
commit a24b3ea6b9

@ -0,0 +1,58 @@
package kr.re.etri.autoflow.controllers;
import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.tags.Tag;
import kr.re.etri.autoflow.service.ExternalAuthService;
import lombok.RequiredArgsConstructor;
import org.springframework.http.ResponseEntity;
import org.springframework.web.bind.annotation.*;
@RestController
@RequestMapping("/api/external-auth")
@Tag(name = "ExternalAuthController", description = "외부 백엔드 로그인 및 Bearer 토큰 조회 API")
@RequiredArgsConstructor
public class ExternalAuthController {
private final ExternalAuthService externalAuthService;
@Operation(summary = "외부 로그인 후 Bearer 토큰 조회", description = "외부 Spring 백엔드에 로그인 요청 후 Bearer 토큰을 반환합니다.")
@PostMapping("/signin")
public ResponseEntity<ApiResponse> signin(
@RequestBody SigninRequest request
) {
try {
String token = externalAuthService.getBearerToken(request.id(), request.password());
return ResponseEntity.ok(ApiResponse.success(token));
} catch (Exception e) {
return ResponseEntity.ok(ApiResponse.failure(e.getMessage()));
}
}
// DTO: 요청
public static record SigninRequest(String id, String password) { }
// DTO: 응답
public static class ApiResponse {
private boolean success;
private Object data;
private String errorMessage;
public ApiResponse(boolean success, Object data, String errorMessage) {
this.success = success;
this.data = data;
this.errorMessage = errorMessage;
}
public static ApiResponse success(Object data) {
return new ApiResponse(true, data, null);
}
public static ApiResponse failure(String errorMessage) {
return new ApiResponse(false, null, errorMessage);
}
public boolean isSuccess() { return success; }
public Object getData() { return data; }
public String getErrorMessage() { return errorMessage; }
}
}

@ -0,0 +1,65 @@
package kr.re.etri.autoflow.service;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.http.*;
import org.springframework.http.client.SimpleClientHttpRequestFactory;
import org.springframework.stereotype.Service;
import org.springframework.web.client.RestTemplate;
import javax.net.ssl.*;
import java.security.cert.X509Certificate;
import java.util.Map;
@Service
public class ExternalAuthService {
@Value("${external.auth.signin-url}")
private String signinUrl;
private final RestTemplate restTemplate;
public ExternalAuthService() throws Exception {
// SSLContext 생성 (모든 인증서 허용)
SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(null, new TrustManager[]{new X509TrustManager() {
public void checkClientTrusted(X509Certificate[] chain, String authType) {}
public void checkServerTrusted(X509Certificate[] chain, String authType) {}
public X509Certificate[] getAcceptedIssuers() { return new X509Certificate[0]; }
}}, new java.security.SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
HttpsURLConnection.setDefaultHostnameVerifier((hostname, session) -> true);
this.restTemplate = new RestTemplate(new SimpleClientHttpRequestFactory());
}
public String getBearerToken(String id, String password) {
Map<String, String> body = Map.of(
"id", id,
"password", password
);
HttpHeaders headers = new HttpHeaders();
headers.setContentType(MediaType.APPLICATION_JSON);
HttpEntity<Map<String, String>> request = new HttpEntity<>(body, headers);
ResponseEntity<Map> response = restTemplate.exchange(
signinUrl,
HttpMethod.POST,
request,
Map.class
);
if (response.getStatusCode() == HttpStatus.OK) {
Map<String, Object> respBody = response.getBody();
if (respBody != null && respBody.get("data") instanceof Map dataMap) {
return (String) dataMap.get("token");
}
}
throw new RuntimeException("Failed to get Bearer token");
}
}

@ -5,6 +5,7 @@ spring.profiles.active=local
spring.datasource.url=jdbc:mariadb://192.168.10.143:3306/autoflow spring.datasource.url=jdbc:mariadb://192.168.10.143:3306/autoflow
spring.datasource.driver-class-name=org.mariadb.jdbc.Driver
spring.datasource.username=cuuva spring.datasource.username=cuuva
spring.datasource.password=cuuva spring.datasource.password=cuuva
@ -68,3 +69,7 @@ server.servlet.encoding.force=true
spring.servlet.multipart.enabled=true spring.servlet.multipart.enabled=true
#OTA??
external.auth.signin-url=https://cuuva.com:24443/api/datamanager/user/signin

Loading…
Cancel
Save