accessToken 만료 이후 refreshToken으로 accessToken을 갱신하는 방법

Question

안녕하세요. 프론트 1명 백엔드 1명이서 개발자 취업을 위해 공부하고 있는 초보자입니다.accessToken 만료 이후 refreshToken을 이용해 accessToken을 갱신하는데요.accessToken의 유효 기간은 30분 이후 토큰 갱신이 잘 되지 않아 질문합니다.현재까지 진행된 경과는 이렇습니다.서버측에서 accessToken 만료 여부를 확인한 후, refreshToken을 검증하여 accesstoken을 재발급하여 응답을 보냅니다. 그런데 accessToken이 유효해야 userId를 알 수 있는데, userId가 있어야 accessToken을 재발급해줄 수 있어서 모순적인 상황에 빠졌습니다.이 상황 해결이 어려워 userId 없이 토큰 갱신이 가능하도록 토큰 유효성을 체크하여 accessToken은 만료되고 refreshToken 토큰이 유효하면 accessToken을 재발급하는 로직을 짰습니다.그러나 accessToken의 유효 시간(30분)이 지나면 그 값을 요청 헤더에 담아 보내도 서버 측에는 아예 헤더에 토큰이 없는 채로 도착하는 것 같습니다. 만료된 토큰이라도 값 자체는 담겨서 도착할 것이라고 예상했는데, 아닌 것 같습니다. 그래서 accessToken이 없으니 권한 없음(401 Unauthorized) 에러가 납니다.여기서 이제 어떻게 해야할지 잘 모르겠어서 질문을 드립니다.관련된 코드는 아래와 같습니다.프론트엔드request interceptor로 get을 제외한 요청에 localStorage에 저장한 accessToken과 쿠키에 저장한 refreshToken을 담아보냄accessToken 만료 시간인 30분 이후에도 콘솔에는 accessToken 값이 나옴을 확인했습니다.baseURL은 instance로 설정되어 있습니다.function setHeaders(config) { const accessToken = localStorage.getItem('accessToken'); const refreshToken = Cookies.get('refreshToken'); config.headers['Authorization'] = `Bearer ${accessToken}`; config.headers['Refresh'] = `${refreshToken}`; return config; } instance.interceptors.request.use( async function (config) { if (config.method === 'get') { return config; } else { const headedConfig = await setHeaders(config); return headedConfig; } } );백엔드 (자바, 프레임워크 스프링)토큰 검증 및 재발급 로직@Override protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws ServletException, IOException { try{ Map claims = verifyJws(request); setAuthenticationToContext(claims, request, response); } catch(Exception e){ request.setAttribute("exception", e); if(isAccessTokenExpired(request)) { if (request.getHeader("Refresh") != null && !request.getHeader("Refresh").isEmpty()) { if (!isRefreshTokenExpired(request)) { // refresh토큰으로 만료된 access토큰을 재발급하는 로직 String jws = request.getHeader("Refresh"); String base64EncodedSecretKey = jwtTokenizer.key(); String subject = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody().getSubject(); Claims accessClaims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); String neoAccessToken = generateNewAccessTokenUsingRefreshToken(request.getHeader("Refresh"), base64EncodedSecretKey, accessClaims, subject); if (neoAccessToken != null) { response.setHeader("Authorization", "Bearer " + neoAccessToken); } } } } } chain.doFilter(request, response); }jwt로 인증토큰 발급하는 로직package com.green.greenearthforus.login.filter; import com.fasterxml.jackson.databind.ObjectMapper; import com.green.greenearthforus.login.dto.LoginDto; import com.green.greenearthforus.login.jwttoken.JwtTokenizer; import com.green.greenearthforus.user.entity.User; import lombok.SneakyThrows; import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; import org.springframework.security.core.Authentication; import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; import javax.servlet.FilterChain; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.util.Date; import java.util.HashMap; import java.util.Map; public class JwtAuthenticationFilter extends UsernamePasswordAuthenticationFilter { private final AuthenticationManager authenticationManager; private final JwtTokenizer jwtTokenizer; public JwtAuthenticationFilter(AuthenticationManager authenticationManager, JwtTokenizer jwtTokenizer){ this.authenticationManager = authenticationManager; this.jwtTokenizer = jwtTokenizer; } @SneakyThrows @Override public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response){ ObjectMapper objectMapper = new ObjectMapper(); LoginDto loginDto = objectMapper.readValue(request.getInputStream(), LoginDto.class); UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(loginDto.getUserUseId(), loginDto.getPassword()); return authenticationManager.authenticate(authenticationToken); } @Override protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain, Authentication authResult){ User user = (User) authResult.getPrincipal(); String accessToken = delegateAccessToken(user); String refreshToken = delegateRefreshToken(user); response.setHeader("Authorization", "Bearer "+accessToken); response.setHeader("Refresh", refreshToken); } private String delegateAccessToken(User user){ Map claims = new HashMap<>(); claims.put("userId", user.getUserId()); claims.put("userName", user.getUserName()); claims.put("userUseId", user.getUserUseId()); claims.put("password", user.getPassword()); claims.put("roles", user.getRole()); String subject = user.getUserName(); Date expiration = jwtTokenizer.getTokenExpiration(jwtTokenizer.getAccessTokenExpirationMinutes()); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); return jwtTokenizer.generateAccessToken(claims, subject, expiration, base64EncodedSecretKey); } private String delegateRefreshToken(User user){ String subject = user.getUserName(); Date expiration = jwtTokenizer.getTokenExpiration(jwtTokenizer.getRefreshTokenExpirationMinutes()); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); return jwtTokenizer.generateRefreshToken(subject, expiration, base64EncodedSecretKey); } }jwt로 토큰을 인증해서 확인하는 로직(올바른 토큰인지 확인해서 통과 혹은 401을 던짐)package com.green.greenearthforus.login.filter; import com.green.greenearthforus.login.util.CustomAuthorityUtils; import com.green.greenearthforus.login.jwttoken.JwtTokenizer; import io.jsonwebtoken.Claims; import io.jsonwebtoken.ExpiredJwtException; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; import org.springframework.security.core.GrantedAuthority; import org.springframework.security.core.context.SecurityContextHolder; import org.springframework.web.filter.OncePerRequestFilter; import org.springframework.security.core.Authentication; import javax.servlet.FilterChain; import javax.servlet.ServletException; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; import java.security.Key; import java.util.Date; import java.util.List; import java.util.Map; import io.jsonwebtoken.Jwts; public class JwtVerificationFilter extends OncePerRequestFilter { private final JwtTokenizer jwtTokenizer; private final CustomAuthorityUtils authorityUtils; public JwtVerificationFilter(JwtTokenizer jwtTokenizer, CustomAuthorityUtils customAuthorityUtils){ this.authorityUtils = customAuthorityUtils; this.jwtTokenizer = jwtTokenizer; } @Override protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws ServletException, IOException { try{ Map claims = verifyJws(request); setAuthenticationToContext(claims, request, response); } catch(Exception e){ request.setAttribute("exception", e); if(isAccessTokenExpired(request)) { if (request.getHeader("Refresh") != null && !request.getHeader("Refresh").isEmpty()) { if (!isRefreshTokenExpired(request)) { // refresh토큰으로 만료된 access토큰을 재발급하는 로직 String jws = request.getHeader("Refresh"); String base64EncodedSecretKey = jwtTokenizer.key(); String subject = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody().getSubject(); Claims accessClaims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); String neoAccessToken = generateNewAccessTokenUsingRefreshToken(request.getHeader("Refresh"), base64EncodedSecretKey, accessClaims, subject); if (neoAccessToken != null) { response.setHeader("Authorization", "Bearer " + neoAccessToken); } } } } } chain.doFilter(request, response); } @Override protected boolean shouldNotFilter(HttpServletRequest request) { String authorization = request.getHeader("Authorization"); return authorization == null || !authorization.startsWith("Bearer "); } private Map verifyJws(HttpServletRequest request){ String jws = request.getHeader("Authorization").replace("Bearer ", ""); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); // String jws = ""; // String refresh = ""; // if(request.getHeader("Authorization") != null && !request.getHeader("Authorization").isEmpty()) { // jws = request.getHeader("Authorization").replace("Bearer ", ""); // String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); // String base64EncodedSecretKey = jwtTokenizer.key(); // if (isAccessTokenExpired(request)) { // if (request.getHeader("Refresh") != null && !request.getHeader("Refresh").isEmpty()) { // if (isRefreshTokenExpired(request)) { // Claims accessClaims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); // jws = jwtTokenizer.generateAccessToken(accessClaims, accessClaims.getSubject(), jwtTokenizer.getTokenExpiration(jwtTokenizer.getAccessTokenExpirationMinutes()), base64EncodedSecretKey); // // refresh = jwtTokenizer.generateRefreshToken(accessClaims.getSubject(), jwtTokenizer.getTokenExpiration(jwtTokenizer.getRefreshTokenExpirationMinutes()), base64EncodedSecretKey); // response.setHeader("Authorization", "Bearer " + jws); // response.setHeader("Refresh", refresh); // } else { // // refresh토큰으로 만료된 access토큰을 재발급하는 로직 // Claims accessClaims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); // String neoAccessToken = generateNewAccessTokenUsingRefreshToken(request.getHeader("Refresh"), base64EncodedSecretKey, accessClaims); // if (neoAccessToken != null) { // response.setHeader("Authorization", "Bearer " + neoAccessToken); // } // } // } else { // Claims accessClaims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); // jws = jwtTokenizer.generateAccessToken(accessClaims, accessClaims.getSubject(), jwtTokenizer.getTokenExpiration(jwtTokenizer.getAccessTokenExpirationMinutes()), base64EncodedSecretKey); // refresh = jwtTokenizer.generateRefreshToken(accessClaims.getSubject(), jwtTokenizer.getTokenExpiration(jwtTokenizer.getRefreshTokenExpirationMinutes()), base64EncodedSecretKey); // response.setHeader("Authorization", "Bearer " + jws); // response.setHeader("Refresh", refresh); // } // } // } return jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); } private void setAuthenticationToContext(Map claims, HttpServletRequest request, HttpServletResponse response){ String userId= (String) claims.get("userUseId"); List authorities = authorityUtils.createAuthorities(List.of((String) claims.get("roles"))); Authentication authentication = new UsernamePasswordAuthenticationToken(userId, null, authorities); SecurityContextHolder.getContext().setAuthentication(authentication); } public boolean isAccessTokenExpired(HttpServletRequest request){ String jws = request.getHeader("Authorization").replace("Bearer ", ""); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); try { long expirationTime = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody().getExpiration().getTime(); long currentTime = System.currentTimeMillis(); return expirationTime < currentTime; } catch (ExpiredJwtException e){ return true; } } public boolean isRefreshTokenExpired(HttpServletRequest request){ String jws = request.getHeader("Refresh"); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); try { long expirationTime = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody().getExpiration().getTime(); long currentTime = System.currentTimeMillis(); return expirationTime < currentTime; } catch (ExpiredJwtException e){ return true; } } public String generateNewAccessTokenUsingRefreshToken(String refreshToken, String key, Claims accessTokenClaims, String subject) { // Key currentKey = jwtTokenizer.getKeyFromBase64EncodedKey(key); // // Claims claims = Jwts.parserBuilder() // .setSigningKey(currentKey) // .build() // .parseClaimsJws(refreshToken) // .getBody(); // // String username = claims.getSubject(); return jwtTokenizer.generateAccessToken(accessTokenClaims, subject, jwtTokenizer.getTokenExpiration(jwtTokenizer.getAccessTokenExpirationMinutes()), key); } }jwt토큰 정의 로직package com.green.greenearthforus.login.jwttoken; import io.jsonwebtoken.Claims; import io.jsonwebtoken.Jws; import io.jsonwebtoken.Jwts; import io.jsonwebtoken.io.Decoders; import io.jsonwebtoken.io.Encoders; import io.jsonwebtoken.security.Keys; import lombok.Getter; import org.springframework.beans.factory.annotation.Value; import org.springframework.stereotype.Component; import java.nio.charset.StandardCharsets; import java.security.Key; import java.util.Calendar; import java.util.Date; import java.util.Map; @Component public class JwtTokenizer { @Getter @Value("${secret-key}") private String secretKey; @Getter @Value("${access-token-expiration-minutes}") private int accessTokenExpirationMinutes; @Getter @Value("${refresh-token-expiration-minutes}") private int refreshTokenExpirationMinutes; public String encodeBase64SecretKey(String secretKey) { return Encoders.BASE64.encode(secretKey.getBytes(StandardCharsets.UTF_8)); } public String key(){ return Encoders.BASE64.encode(secretKey.getBytes(StandardCharsets.UTF_8)); } public String generateAccessToken(Map claims, String subject, Date expiration, String base64EncodedSecretKey) { Key key = getKeyFromBase64EncodedKey(base64EncodedSecretKey); return Jwts.builder() .setClaims(claims) .setSubject(subject) .setIssuedAt(Calendar.getInstance().getTime()) .setExpiration(expiration) .signWith(key) .compact(); } public String generateRefreshToken(String subject, Date expiration, String base64EncodedSecretKey) { Key key = getKeyFromBase64EncodedKey(base64EncodedSecretKey); return Jwts.builder() .setSubject(subject) .setIssuedAt(Calendar.getInstance().getTime()) .setExpiration(expiration) .signWith(key) .compact(); } // 검증 후, Claims을 반환 하는 용도 public Jws getClaims(String jws, String base64EncodedSecretKey) { Key key = getKeyFromBase64EncodedKey(base64EncodedSecretKey); return Jwts.parserBuilder() .setSigningKey(key) .build() .parseClaimsJws(jws); } // 단순히 검증만 하는 용도로 쓰일 경우 public void verifySignature(String jws, String base64EncodedSecretKey) { Key key = getKeyFromBase64EncodedKey(base64EncodedSecretKey); Jwts.parserBuilder() .setSigningKey(key) .build() .parseClaimsJws(jws); } public Date getTokenExpiration(int expirationMinutes) { Calendar calendar = Calendar.getInstance(); calendar.add(Calendar.MINUTE, expirationMinutes); return calendar.getTime(); } public Key getKeyFromBase64EncodedKey(String base64EncodedSecretKey) { byte[] keyBytes = Decoders.BASE64.decode(base64EncodedSecretKey); return Keys.hmacShaKeyFor(keyBytes); } }보안 관련해서 어떻게 필터링할지, 어떤 걸 허용하고 뺄지에 관련된 로직package com.green.greenearthforus.securityconfig; import com.green.greenearthforus.exception.BusinessLogicException; import com.green.greenearthforus.exception.ExceptionCode; import com.green.greenearthforus.login.handler.UserAccessDeniedHandler; import com.green.greenearthforus.login.util.UserAuthenticationEntryPoint; import com.green.greenearthforus.login.util.CustomAuthorityUtils; import com.green.greenearthforus.login.filter.JwtAuthenticationFilter; import com.green.greenearthforus.login.jwttoken.JwtTokenizer; import com.green.greenearthforus.login.filter.JwtVerificationFilter; import com.green.greenearthforus.user.controller.UserController; import io.jsonwebtoken.Claims; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.http.HttpMethod; import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; import org.springframework.security.config.http.SessionCreationPolicy; import org.springframework.security.crypto.factory.PasswordEncoderFactories; import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.security.web.SecurityFilterChain; import org.springframework.web.cors.CorsConfiguration; import org.springframework.web.cors.CorsConfigurationSource; import org.springframework.web.cors.UrlBasedCorsConfigurationSource; import javax.servlet.http.HttpServletRequest; import java.util.Arrays; import java.util.List; @Configuration @EnableWebSecurity(debug = true) public class SecurityConfig{ private final JwtTokenizer jwtTokenizer; private final CustomAuthorityUtils authorityUtils; public SecurityConfig(JwtTokenizer jwtTokenizer, CustomAuthorityUtils authorityUtils){ this.jwtTokenizer = jwtTokenizer; this.authorityUtils = authorityUtils; } @Bean public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { http .headers().frameOptions().sameOrigin() .and() .csrf().disable() .cors() .and() .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS) .and() .formLogin().disable() .httpBasic().disable() .exceptionHandling() .authenticationEntryPoint(new UserAuthenticationEntryPoint(jwtTokenizer)) .accessDeniedHandler(new UserAccessDeniedHandler()) .and() .apply(new CustomFilterConfigurer()) .and() .authorizeHttpRequests(authorize -> authorize .antMatchers("/auth/login").permitAll() .antMatchers(HttpMethod.OPTIONS, "/**").permitAll() .antMatchers(HttpMethod.POST, "/user").permitAll() // .antMatchers(HttpMethod.GET, "/user/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.PATCH, "/user/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.DELETE, "/user/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.POST, "/post/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.PATCH, "/post/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.DELETE, "/post/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.POST, "/comment/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.PATCH, "/comment/**").hasAnyRole("ADMIN", "USER") .antMatchers(HttpMethod.DELETE, "/comment/**").hasAnyRole("ADMIN", "USER") .antMatchers("/vote/**").hasAnyRole("ADMIN", "USER") .antMatchers("/calendar/**").hasAnyRole("ADMIN", "USER") .anyRequest().permitAll() ); return http.build(); } @Bean public PasswordEncoder passwordEncoder(){ return PasswordEncoderFactories.createDelegatingPasswordEncoder(); } @Bean CorsConfigurationSource corsConfigurationSource(){ CorsConfiguration configuration = new CorsConfiguration(); configuration.setAllowedOrigins(List.of("http://localhost:3000", "http://greenearthforus.s3-website.ap-northeast-2.amazonaws.com")); configuration.setAllowedOriginPatterns(List.of("http://greenearthforus.**")); configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PATCH", "DELETE", "OPTIONS")); configuration.setAllowedHeaders(Arrays.asList("Origin", "Content-Type", "Accept")); configuration.addAllowedHeader("Authorization"); configuration.addAllowedHeader("Content-Type"); configuration.addAllowedHeader("Refresh"); configuration.addExposedHeader("Authorization"); configuration.addExposedHeader("Refresh"); configuration.setAllowCredentials(true); UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); source.registerCorsConfiguration("/**", configuration); return source; } public class CustomFilterConfigurer extends AbstractHttpConfigurer{ @Override public void configure(HttpSecurity builder){ AuthenticationManager aUthenticationManager = builder.getSharedObject(AuthenticationManager.class); JwtAuthenticationFilter jwtAuthenticationFilter = new JwtAuthenticationFilter(aUthenticationManager, jwtTokenizer); jwtAuthenticationFilter.setFilterProcessesUrl("/auth/login"); JwtVerificationFilter jwtVerificationFilter = new JwtVerificationFilter(jwtTokenizer, authorityUtils); builder.addFilter(jwtAuthenticationFilter) .addFilterAfter(jwtVerificationFilter, JwtAuthenticationFilter.class); } } public String regenerateAccessTokenUsingRefreshToken(HttpServletRequest request){ String jws = request.getHeader("Authorization").replace("Bearer ", ""); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); if(isAccessTokenExpired(request)){ if(request.getHeader("Refresh") != null && !request.getHeader("Refresh").isEmpty()){ // refresh토큰으로 만료된 access토큰을 재발급하는 로직 Claims claims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); String neoAccessToken = generateNewAccessTokenUsingRefreshToken(request.getHeader("Refresh"), base64EncodedSecretKey, claims); if(neoAccessToken != null){ return neoAccessToken; } } else{ Claims claims = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody(); return jwtTokenizer.generateAccessToken(claims, claims.getSubject(), jwtTokenizer.getTokenExpiration(jwtTokenizer.getAccessTokenExpirationMinutes()), base64EncodedSecretKey); } } return new BusinessLogicException(ExceptionCode.USER_FORBIDDEN).toString(); } public boolean isAccessTokenExpired(HttpServletRequest request){ String jws = request.getHeader("Authorization").replace("Bearer ", ""); String base64EncodedSecretKey = jwtTokenizer.encodeBase64SecretKey(jwtTokenizer.getSecretKey()); long expirationTime = jwtTokenizer.getClaims(jws, base64EncodedSecretKey).getBody().getExpiration().getTime(); long currentTime = System.currentTimeMillis(); return expirationTime < currentTime; } public String generateNewAccessTokenUsingRefreshToken(String refreshToken, String key, Claims accessTokenClaims) { // Key currentKey = jwtTokenizer.getKeyFromBase64EncodedKey(key); // // Claims claims = Jwts.parserBuilder() // .setSigningKey(currentKey) // .build() // .parseClaimsJws(refreshToken) // .getBody(); // // String username = claims.getSubject(); String subject = jwtTokenizer.getClaims(refreshToken, key).getBody().getSubject(); return jwtTokenizer.generateAccessToken(accessTokenClaims, subject, jwtTokenizer.getTokenExpiration(jwtTokenizer.getAccessTokenExpirationMinutes()), key); } }긴 글 읽어주셔서 감사합니다.

집킨 · Answer

리프레시토큰엔 userId가 없는 이유는요?

accessToken 만료 이후 refreshToken으로 accessToken을 갱신하는 방법

1개의 답변

기술 목록