[FEAT/#18] 소셜 로그인 유즈케이스 구현

src/main/java/sopt/makers/authentication/application/auth/api/AuthApi.java

@@ -1,6 +1,7 @@
 package sopt.makers.authentication.application.auth.api;
 
 import sopt.makers.authentication.application.auth.dto.request.AuthRequest;
+import sopt.makers.authentication.application.auth.dto.request.AuthRequest.*;
 import sopt.makers.authentication.support.common.api.BaseResponse;
 
 import org.springframework.http.ResponseEntity;
@@ -12,4 +13,10 @@ ResponseEntity<BaseResponse<?>> createPhoneVerification(
 
   ResponseEntity<BaseResponse<?>> verifyPhoneVerification(
       AuthRequest.VerifyPhoneVerification phoneVerification);
+
+  ResponseEntity<BaseResponse<?>> authenticateSocialAuthInfoFromWeb(
+      AuthenticateSocialAuthInfo socialAuthInfo);
+
+  ResponseEntity<BaseResponse<?>> authenticateSocialAuthInfoFromApp(
+      AuthRequest.AuthenticateSocialAuthInfo socialAuthInfo);
 }

src/main/java/sopt/makers/authentication/application/auth/api/AuthApiController.java

@@ -1,10 +1,17 @@
 package sopt.makers.authentication.application.auth.api;
 
+import static sopt.makers.authentication.support.code.domain.success.AuthSuccess.AUTHENTICATE_SOCIAL_ACCOUNT;
+
 import sopt.makers.authentication.application.auth.dto.request.AuthRequest;
+import sopt.makers.authentication.application.auth.dto.response.AuthResponse;
 import sopt.makers.authentication.support.code.domain.success.AuthSuccess;
 import sopt.makers.authentication.support.common.api.BaseResponse;
+import sopt.makers.authentication.support.util.CookieUtil;
+import sopt.makers.authentication.usecase.auth.port.in.AuthenticateSocialAccountUsecase;
+import sopt.makers.authentication.usecase.auth.port.in.AuthenticateSocialAccountUsecase.AuthenticateTokenInfo;
 import sopt.makers.authentication.usecase.auth.port.in.CreatePhoneVerificationUsecase;
 
+import org.springframework.http.HttpHeaders;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -18,6 +25,8 @@
 public class AuthApiController implements AuthApi {
 
   private final CreatePhoneVerificationUsecase createVerificationUsecase;
+  private final AuthenticateSocialAccountUsecase authenticateSocialAccountUsecase;
+  private final CookieUtil cookieUtil;
 
   @Override
   @PostMapping("/phone")
@@ -34,4 +43,34 @@ public ResponseEntity<BaseResponse<?>> verifyPhoneVerification(
       AuthRequest.VerifyPhoneVerification phoneVerification) {
     return null;
   }
+
+  @Override
+  @PostMapping("/web/login")
+  public ResponseEntity<BaseResponse<?>> authenticateSocialAuthInfoFromWeb(
+      AuthRequest.AuthenticateSocialAuthInfo socialAuthInfo) {
+    AuthenticateTokenInfo tokenInfo =
+        authenticateSocialAccountUsecase.authenticate(socialAuthInfo.toCommand());
+    HttpHeaders headers = cookieUtil.setRefreshToken(tokenInfo.refreshToken());
+
+    return ResponseEntity.ok()
+        .headers(headers)
+        .body(
+            BaseResponse.ofSuccess(
+                AUTHENTICATE_SOCIAL_ACCOUNT,
+                AuthResponse.AuthenticateSocialAuthInfoForWeb.of(tokenInfo.accessToken())));
+  }
+
+  @Override
+  @PostMapping("/web/app")
+  public ResponseEntity<BaseResponse<?>> authenticateSocialAuthInfoFromApp(
+      AuthRequest.AuthenticateSocialAuthInfo socialAuthInfo) {
+    AuthenticateTokenInfo tokenInfo =
+        authenticateSocialAccountUsecase.authenticate(socialAuthInfo.toCommand());
+
+    return ResponseEntity.ok(
+        BaseResponse.ofSuccess(
+            AUTHENTICATE_SOCIAL_ACCOUNT,
+            AuthResponse.AuthenticateSocialAuthInfoForApp.of(
+                tokenInfo.accessToken(), tokenInfo.refreshToken())));
+  }
 }

src/main/java/sopt/makers/authentication/application/auth/dto/request/AuthRequest.java

@@ -2,7 +2,9 @@
 
 import static lombok.AccessLevel.PRIVATE;
 
+import sopt.makers.authentication.domain.auth.AuthPlatform;
 import sopt.makers.authentication.domain.auth.PhoneVerificationType;
+import sopt.makers.authentication.usecase.auth.port.in.AuthenticateSocialAccountUsecase.AuthenticateSocialAccountCommand;
 import sopt.makers.authentication.usecase.auth.port.in.CreatePhoneVerificationUsecase.CreateVerificationCommand;
 
 import lombok.RequiredArgsConstructor;
@@ -18,4 +20,10 @@ public CreateVerificationCommand toCommand() {
   }
 
   public record VerifyPhoneVerification(String name, String number, String code) {}
+
+  public record AuthenticateSocialAuthInfo(String code, String authPlatform) {
+    public AuthenticateSocialAccountCommand toCommand() {
+      return new AuthenticateSocialAccountCommand(AuthPlatform.find(authPlatform), code);
+    }
+  }
 }

src/main/java/sopt/makers/authentication/application/auth/dto/response/AuthResponse.java

@@ -5,4 +5,16 @@
 import lombok.RequiredArgsConstructor;
 
 @RequiredArgsConstructor(access = PRIVATE)
-public final class AuthResponse {}
+public final class AuthResponse {
+  public record AuthenticateSocialAuthInfoForWeb(String accessToken) {
+    public static AuthenticateSocialAuthInfoForWeb of(String accessToken) {
+      return new AuthenticateSocialAuthInfoForWeb(accessToken);
+    }
+  }
+
+  public record AuthenticateSocialAuthInfoForApp(String accessToken, String refreshToken) {
+    public static AuthenticateSocialAuthInfoForApp of(String accessToken, String refreshToken) {
+      return new AuthenticateSocialAuthInfoForApp(accessToken, refreshToken);
+    }
+  }
+}

src/main/java/sopt/makers/authentication/database/UserRepositoryImpl.java

@@ -0,0 +1,26 @@
+package sopt.makers.authentication.database;
+
+import sopt.makers.authentication.database.rdb.repository.UserRetriever;
+import sopt.makers.authentication.domain.auth.SocialAccount;
+import sopt.makers.authentication.domain.user.User;
+import sopt.makers.authentication.usecase.auth.port.out.UserRepository;
+
+import org.springframework.stereotype.Repository;
+
+import lombok.RequiredArgsConstructor;
+
+@Repository
+@RequiredArgsConstructor
+public class UserRepositoryImpl implements UserRepository {
+  private final UserRetriever userRetriever;
+
+  @Override
+  public User findBySocialAccount(SocialAccount socialAccount) {
+    return userRetriever.findBySocialAccount(socialAccount);
+  }
+
+  @Override
+  public Long findIdByUser(User user) {
+    return userRetriever.findIdByUser(user);
+  }
+}

src/main/java/sopt/makers/authentication/database/rdb/repository/UserJpaRepository.java

@@ -0,0 +1,20 @@
+package sopt.makers.authentication.database.rdb.repository;
+
+import sopt.makers.authentication.database.rdb.entity.UserEntity;
+import sopt.makers.authentication.domain.auth.AuthPlatform;
+
+import java.util.Optional;
+
+import org.springframework.data.jpa.repository.*;
+import org.springframework.data.repository.query.*;
+
+public interface UserJpaRepository extends JpaRepository<UserEntity, Long> {
+  Optional<UserEntity> findByAuthPlatformTypeAndAuthPlatformId(
+      AuthPlatform authPlatformType, String authPlatformId);
+
+  @Query(
+      "SELECT u.id FROM UserEntity u WHERE u.authPlatformType = :authPlatformType AND u.authPlatformId = :authPlatformId")
+  Optional<Long> findIdByAuthPlatformTypeAndAuthPlatformId(
+      @Param("authPlatformType") AuthPlatform authPlatformType,
+      @Param("authPlatformId") String authPlatformId);
+}

src/main/java/sopt/makers/authentication/database/rdb/repository/UserRetriever.java

@@ -0,0 +1,37 @@
+package sopt.makers.authentication.database.rdb.repository;
+
+import static sopt.makers.authentication.support.code.domain.failure.AuthFailure.NOT_FOUND_USER_WITH_SOCIAL_ACCOUNT;
+
+import sopt.makers.authentication.database.rdb.entity.UserEntity;
+import sopt.makers.authentication.domain.auth.*;
+import sopt.makers.authentication.domain.user.User;
+import sopt.makers.authentication.support.exception.domain.AuthException;
+
+import org.springframework.stereotype.Component;
+import org.springframework.transaction.annotation.Transactional;
+
+import lombok.RequiredArgsConstructor;
+
+@Component
+@Transactional(readOnly = true)
+@RequiredArgsConstructor
+public class UserRetriever {
+  private final UserJpaRepository userJpaRepository;
+
+  public User findBySocialAccount(SocialAccount socialAccount) {
+    UserEntity userEntity =
+        userJpaRepository
+            .findByAuthPlatformTypeAndAuthPlatformId(
+                socialAccount.authPlatformType(), socialAccount.authPlatformId())
+            .orElseThrow(() -> new AuthException(NOT_FOUND_USER_WITH_SOCIAL_ACCOUNT));
+    return userEntity.toDomain();
+  }
+
+  public Long findIdByUser(User user) {
+    AuthPlatform authPlatformType = user.getSocialAccount().authPlatformType();
+    String authPlatformId = user.getSocialAccount().authPlatformId();
+    return userJpaRepository
+        .findIdByAuthPlatformTypeAndAuthPlatformId(authPlatformType, authPlatformId)
+        .orElseThrow(() -> new AuthException(NOT_FOUND_USER_WITH_SOCIAL_ACCOUNT));
+  }
+}

src/main/java/sopt/makers/authentication/support/code/domain/failure/AuthFailure.java

@@ -13,7 +13,7 @@
 @RequiredArgsConstructor(access = PRIVATE)
 public enum AuthFailure implements FailureCode {
   INVALID_SOCIAL_PLATFORM(HttpStatus.BAD_REQUEST, "지원하지 않는 소셜 플랫폼입니다"),
-  ;
+  NOT_FOUND_USER_WITH_SOCIAL_ACCOUNT(HttpStatus.BAD_REQUEST, "소셜 계정 정보와 일치하는 회원이 없습니다");
   private final HttpStatus status;
   private final String message;
 }

src/main/java/sopt/makers/authentication/support/code/domain/success/AuthSuccess.java

@@ -13,7 +13,7 @@
 @RequiredArgsConstructor(access = PRIVATE)
 public enum AuthSuccess implements SuccessCode {
   CREATE_PHONE_VERIFICATION(HttpStatus.CREATED, "번호 인증 생성에 성공했습니다."),
-  ;
+  AUTHENTICATE_SOCIAL_ACCOUNT(HttpStatus.OK, "소셜 로그인에 성공했습니다.");
 
   private final HttpStatus status;
   private final String message;

src/main/java/sopt/makers/authentication/support/constant/JwtConstant.java

@@ -3,4 +3,5 @@
 public class JwtConstant {
 
   public static final String TOKEN_HEADER = "Bearer ";
+  public static final String REFRESH_TOKEN_HEADER = "refresh-token";
 }

src/main/java/sopt/makers/authentication/support/constant/OAuthConstant.java

@@ -1,6 +1,11 @@
 package sopt.makers.authentication.support.constant;
 
-public abstract class OAuthConstant {
+import static lombok.AccessLevel.PRIVATE;
+
+import lombok.*;
+
+@RequiredArgsConstructor(access = PRIVATE)
+public final class OAuthConstant {
   public static final String CLIENT_ID = "client_id";
   public static final String CLIENT_SECRET = "client_secret";
   public static final String CODE = "code";

src/main/java/sopt/makers/authentication/support/constant/SystemConstant.java

@@ -13,4 +13,5 @@ private SystemConstant() {}
   public static final String PATTERN_ERROR_PATH = "/error";
   public static final String PATTERN_AUTH = API_DEFAULT_PREFIX + "/auth" + PATTERN_ALL;
   public static final String PATTERN_TEST = API_DEFAULT_PREFIX + "/test" + PATTERN_ALL;
+  public static final String PATTERN_ROOT_PATH = "/";
 }

src/main/java/sopt/makers/authentication/support/util/CookieUtil.java

@@ -0,0 +1,38 @@
+package sopt.makers.authentication.support.util;
+
+import static sopt.makers.authentication.support.constant.JwtConstant.REFRESH_TOKEN_HEADER;
+import static sopt.makers.authentication.support.constant.SystemConstant.PATTERN_ROOT_PATH;
+
+import sopt.makers.authentication.support.value.JwtProperty;
+
+import java.time.Duration;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.ResponseCookie;
+
+import lombok.RequiredArgsConstructor;
+
+@Configuration
+@RequiredArgsConstructor
+public class CookieUtil {
+  private final JwtProperty jwtProperty;
+  private static final String SAME_SITE_NONE = "None";
+
+  public HttpHeaders setRefreshToken(String refreshToken) {
+    long durationMillis = jwtProperty.secret().expiration().refreshTokenExpiration();
+    Duration duration = Duration.ofMillis(durationMillis);
+    ResponseCookie cookie =
+        ResponseCookie.from(REFRESH_TOKEN_HEADER, refreshToken)
+            .httpOnly(true)
+            .secure(true)
+            .sameSite(SAME_SITE_NONE)
+            .path(PATTERN_ROOT_PATH)
+            .maxAge(duration)
+            .build();
+    HttpHeaders headers = new HttpHeaders();
+
+    headers.add(HttpHeaders.SET_COOKIE, cookie.toString());
+    return headers;
+  }
+}

src/main/java/sopt/makers/authentication/usecase/auth/port/in/AuthenticateSocialAccountUsecase.java

@@ -3,11 +3,11 @@
 import sopt.makers.authentication.domain.auth.AuthPlatform;
 
 public interface AuthenticateSocialAccountUsecase {
-  SocialAccountInfo authenticate(AuthenticateSocialAccountCommand command);
+  AuthenticateTokenInfo authenticate(AuthenticateSocialAccountCommand command);
 
-  record SocialAccountInfo(String authPlatformId, String authPlatformType) {
-    public static SocialAccountInfo of(String authPlatformId, String authPlatformType) {
-      return new SocialAccountInfo(authPlatformId, authPlatformType);
+  record AuthenticateTokenInfo(String accessToken, String refreshToken) {
+    public static AuthenticateTokenInfo of(String accessToken, String refreshToken) {
+      return new AuthenticateTokenInfo(accessToken, refreshToken);
     }
   }
 

src/main/java/sopt/makers/authentication/usecase/auth/port/out/UserRepository.java

@@ -0,0 +1,10 @@
+package sopt.makers.authentication.usecase.auth.port.out;
+
+import sopt.makers.authentication.domain.auth.SocialAccount;
+import sopt.makers.authentication.domain.user.User;
+
+public interface UserRepository {
+  User findBySocialAccount(SocialAccount socialAccount);
+
+  Long findIdByUser(User user);
+}

src/main/java/sopt/makers/authentication/usecase/auth/service/AuthenticateSocialAccountService.java

@@ -1,7 +1,16 @@
 package sopt.makers.authentication.usecase.auth.service;
 
+import sopt.makers.authentication.domain.auth.SocialAccount;
+import sopt.makers.authentication.domain.user.Role;
+import sopt.makers.authentication.domain.user.User;
+import sopt.makers.authentication.support.jwt.provider.JwtAuthAccessTokenProvider;
+import sopt.makers.authentication.support.jwt.provider.JwtAuthRefreshTokenProvider;
+import sopt.makers.authentication.support.security.authentication.CustomAuthentication;
 import sopt.makers.authentication.usecase.auth.port.in.AuthenticateSocialAccountUsecase;
 import sopt.makers.authentication.usecase.auth.port.out.OAuthAuthenticator;
+import sopt.makers.authentication.usecase.auth.port.out.UserRepository;
+
+import java.util.List;
 
 import org.springframework.stereotype.Service;
 
@@ -11,12 +20,23 @@
 @RequiredArgsConstructor
 public class AuthenticateSocialAccountService implements AuthenticateSocialAccountUsecase {
   private final OAuthAuthenticator oAuthAuthenticator;
+  private final UserRepository userRepository;
+  private final JwtAuthAccessTokenProvider jwtAuthAccessTokenProvider;
+  private final JwtAuthRefreshTokenProvider jwtAuthRefreshTokenProvider;
 
   @Override
-  public SocialAccountInfo authenticate(AuthenticateSocialAccountCommand command) {
+  public AuthenticateTokenInfo authenticate(AuthenticateSocialAccountCommand command) {
     String authPlatformId =
         oAuthAuthenticator.getAuthPlatformId(command.authPlatform(), command.code());
+    User user =
+        userRepository.findBySocialAccount(
+            SocialAccount.of(authPlatformId, command.authPlatform().name()));
+    List<Role> roles = List.of(user.getActivities().getLastActivity().role());
+    Long userId = userRepository.findIdByUser(user);
+    CustomAuthentication customAuthentication = new CustomAuthentication(userId, roles);
+    String accessToken = jwtAuthAccessTokenProvider.generate(customAuthentication);
+    String refreshToken = jwtAuthRefreshTokenProvider.generate(accessToken);
 
-    return SocialAccountInfo.of(authPlatformId, command.authPlatform().name());
+    return AuthenticateTokenInfo.of(accessToken, refreshToken);
   }
 }