feat: JWT 발급 및 인증

.gitattributes

@@ -0,0 +1 @@
+*.ts text eol=lf

package.json

@@ -24,6 +24,7 @@
     "@nestjs/common": "^10.0.0",
     "@nestjs/config": "^3.2.1",
     "@nestjs/core": "^10.0.0",
+    "@nestjs/jwt": "^10.2.0",
     "@nestjs/platform-express": "^10.0.0",
     "@nestjs/swagger": "^7.3.1",
     "@types/xlsx-populate": "github:JanLoebel/types-xlsx-populate",

scripts/git-hooks/pre-commit

@@ -0,0 +1,2 @@
+#!/usr/bin/env sh
+npm run lint

src/app.module.ts

@@ -1,9 +1,7 @@
 import { Module } from '@nestjs/common';
 import { ConfigModule } from '@nestjs/config';
-import { APP_FILTER } from '@nestjs/core';
 
 import { AuthModule } from './auth/auth.module';
-import { AllExceptionsFilter } from './common/filters/all-exception.filter';
 import { DebugModule } from './debug/debug.module';
 import { EventModule } from './event/event.module';
 import { GroupModule } from './group/group.module';
@@ -23,10 +21,10 @@ import { UserModule } from './user/user.module';
     UserModule,
   ],
   providers: [
-    {
-      provide: APP_FILTER,
-      useClass: AllExceptionsFilter,
-    },
+    // {
+    //   provide: APP_FILTER,
+    //   useClass: AllExceptionsFilter,
+    // },
   ],
 })
 export class AppModule {}

src/auth/auth.controller.ts

@@ -29,6 +29,12 @@ export class AuthController {
     return this.authService.kakaoToken(code);
   }
 
+  @Get('kakao/token/info')
+  @ApiQuery({ name: 'kakaoToken', required: true })
+  async kakaoTokenInfo(@Query('kakaoToken') kakaoToken: string) {
+    return this.authService.kakaoTokenInfo(kakaoToken);
+  }
+
   @Post('kakao/login')
   @ApiQuery({ name: 'kakaoToken', required: true })
   async kakaoLogin(@Query('kakaoToken') kakaoToken: string) {
@@ -46,4 +52,15 @@ export class AuthController {
   async kakaoUnlink(@Query('kakaoToken') kakaoToken: string) {
     return this.authService.kakaoUnlink(kakaoToken);
   }
+
+  @Get('login')
+  @ApiQuery({ name: 'kakaoToken', required: true })
+  async login(@Query('kakaoToken') kakaoToken: string) {
+    return this.authService.login(kakaoToken);
+  }
+
+  @Get('signout')
+  async signout(@Query('kakaoToken') kakaoToken: string) {
+    return this.authService.signout(kakaoToken);
+  }
 }

src/auth/auth.guard.ts

@@ -0,0 +1,36 @@
+import {
+  CanActivate,
+  ExecutionContext,
+  Injectable,
+  UnauthorizedException,
+} from '@nestjs/common';
+import { JwtService } from '@nestjs/jwt';
+import { Request } from 'express';
+
+import { jwtConstants } from './constants';
+
+@Injectable()
+export class AuthGuard implements CanActivate {
+  constructor(private jwtService: JwtService) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const request = context.switchToHttp().getRequest();
+    const token = this.extractTokenFromHeader(request);
+    if (!token) {
+      throw new UnauthorizedException();
+    }
+    try {
+      request['user'] = await this.jwtService.verifyAsync(token, {
+        secret: jwtConstants.secret,
+      });
+    } catch {
+      throw new UnauthorizedException();
+    }
+    return true;
+  }
+
+  private extractTokenFromHeader(request: Request): string | undefined {
+    const [type, token] = request.headers.authorization?.split(' ') ?? [];
+    return type === 'Bearer' ? token : undefined;
+  }
+}

src/auth/auth.module.ts

@@ -1,12 +1,24 @@
 import { HttpModule } from '@nestjs/axios';
 import { Module } from '@nestjs/common';
 import { ConfigModule } from '@nestjs/config';
+import { JwtModule } from '@nestjs/jwt';
 
+import { UserModule } from '../user/user.module';
 import { AuthController } from './auth.controller';
 import { AuthService } from './auth.service';
+import { jwtConstants } from './constants';
 
 @Module({
-  imports: [ConfigModule, HttpModule],
+  imports: [
+    ConfigModule,
+    HttpModule,
+    UserModule,
+    JwtModule.register({
+      global: true,
+      secret: jwtConstants.secret,
+      signOptions: { expiresIn: '60s' },
+    }),
+  ],
   controllers: [AuthController],
   providers: [AuthService],
 })

src/auth/auth.service.ts

@@ -1,13 +1,18 @@
 import { HttpService } from '@nestjs/axios';
 import { Injectable } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
+import { JwtService } from '@nestjs/jwt';
 import { firstValueFrom } from 'rxjs';
 
+import { UserService } from '../user/user.service';
+
 @Injectable()
 export class AuthService {
   constructor(
     private readonly configService: ConfigService,
     private readonly httpService: HttpService,
+    private readonly userService: UserService,
+    private readonly jwtService: JwtService,
   ) {}
 
   kakaoCallback(
@@ -40,6 +45,19 @@ export class AuthService {
     return data['access_token'];
   }
 
+  async kakaoTokenInfo(kakaoToken: string) {
+    const { data } = await firstValueFrom(
+      this.httpService.get('https://kapi.kakao.com/v1/user/access_token_info', {
+        headers: {
+          Authorization: `Bearer ${kakaoToken}`,
+          'Content-Type': 'application/x-www-form-urlencoded;charset=utf-8',
+        },
+      }),
+    );
+
+    return data;
+  }
+
   async kakaoLogin(kakaoToken: string) {
     const { data } = await firstValueFrom(
       this.httpService.get('https://kapi.kakao.com/v2/user/me', {
@@ -86,4 +104,35 @@ export class AuthService {
 
     return data;
   }
+
+  async login(kakaoToken: string) {
+    const kakaoInfo = await this.kakaoLogin(kakaoToken);
+
+    const kakaoId = kakaoInfo.id;
+    const name = kakaoInfo.kakao_account.profile.nickname;
+    const email = kakaoInfo.kakao_account.email;
+
+    let user = await this.userService.findOneByKakaoId(kakaoId);
+    if (!user) {
+      user = await this.userService.create({
+        kakaoId,
+        name,
+        email,
+      });
+    }
+
+    const payload = { sub: user.id, name: user.name, iat: Date.now() };
+    return {
+      access_token: await this.jwtService.signAsync(payload),
+    };
+  }
+
+  async signout(kakaoToken: string) {
+    const { kakaoId } = await this.kakaoTokenInfo(kakaoToken);
+
+    this.userService.removeOneByKakaoId(kakaoId);
+    await this.kakaoUnlink(kakaoToken);
+
+    return { message: 'Successfully signed out' };
+  }
 }

src/auth/constants.ts

@@ -0,0 +1,7 @@
+import * as dotenv from 'dotenv';
+import * as process from 'node:process';
+
+dotenv.config();
+export const jwtConstants = {
+  secret: process.env.JWT_SECRET,
+};