diff --git a/src/main/java/com/miuna/subman/config/JwtFilter.java b/src/main/java/com/miuna/subman/config/JwtFilter.java index 6b1d7f6..36eeb5c 100644 --- a/src/main/java/com/miuna/subman/config/JwtFilter.java +++ b/src/main/java/com/miuna/subman/config/JwtFilter.java @@ -21,13 +21,14 @@ import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.springframework.http.HttpStatus; import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; import org.springframework.web.filter.OncePerRequestFilter; import java.io.IOException; import java.time.Instant; @Slf4j -//@Component +@Component @RequiredArgsConstructor public class JwtFilter extends OncePerRequestFilter { diff --git a/src/main/java/com/miuna/subman/config/SecurityConf.java b/src/main/java/com/miuna/subman/config/SecurityConf.java index 1202f97..4f096de 100644 --- a/src/main/java/com/miuna/subman/config/SecurityConf.java +++ b/src/main/java/com/miuna/subman/config/SecurityConf.java @@ -1,6 +1,5 @@ package com.miuna.subman.config; -import com.miuna.subman.service.UserServ; import lombok.RequiredArgsConstructor; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; @@ -8,14 +7,13 @@ import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; import org.springframework.security.web.SecurityFilterChain; -import org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher; -import org.springframework.util.AntPathMatcher; +import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; @Configuration @EnableWebSecurity @RequiredArgsConstructor public class SecurityConf { - private final UserServ userServ; + private final JwtFilter jwtFilter; @Bean public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { @@ -25,7 +23,8 @@ public class SecurityConf { .logout(AbstractHttpConfigurer::disable) .csrf(AbstractHttpConfigurer::disable) .authorizeHttpRequests(auth -> auth.anyRequest().permitAll()) - .sessionManagement(AbstractHttpConfigurer::disable); + .sessionManagement(AbstractHttpConfigurer::disable) + .addFilterBefore(jwtFilter, UsernamePasswordAuthenticationFilter.class); return http.build(); }