"userDetails" is null 에러

Question

refresh token으로 access token을 갱신하는 코드를 작성하고 있는데 로그인 응답 값으로 받아 온 refresh token을 헤더에 넣어 요청을 보내면 userDetails is null 에러가 뜹니다. 로그인으로 토큰은 제대로 받아와 지는데 원인이 뭘까요.... @GetMapping("/issue/token") public GlobalResDto issuedToken(@AuthenticationPrincipal PrincipalDetails userDetails, HttpServletResponse response) { response.addHeader(JwtTokenUtil.ACCESS_TOKEN, jwtTokenUtil.createToken(userDetails.getAccountDetail().getEmail(), "Access")); return new GlobalResDto("Success IssuedToken", HttpStatus.OK.value()); }public class JwtTokenFilter extends OncePerRequestFilter { private final JwtTokenUtil jwtTokenUtil; @Override protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException { String accessToken = jwtTokenUtil.getHeaderToken(request, "Access"); String refreshToken = jwtTokenUtil.getHeaderToken(request, "Refresh"); if (accessToken != null) { if (!jwtTokenUtil.tokenValidataion(accessToken)) { jwtExceptionHandler(response, "Access Token is expired.", HttpStatus.BAD_REQUEST); return; } setAuthentication(jwtTokenUtil.getEmailFromToken(accessToken)); } else if (refreshToken != null) { if (!jwtTokenUtil.refreshTokenValidation(refreshToken)) { jwtExceptionHandler(response, "Refresh Token is expired.", HttpStatus.BAD_REQUEST); return; } setAuthentication(jwtTokenUtil.getEmailFromToken(refreshToken)); } filterChain.doFilter(request, response); } public void setAuthentication(String email) { Authentication authentication = jwtTokenUtil.createAuthentication(email); SecurityContextHolder.getContext().setAuthentication(authentication); } public void jwtExceptionHandler (HttpServletResponse response, String msg, HttpStatus status) { response.setStatus(status.value()); response.setContentType("application/json"); try { String json = new ObjectMapper().writeValueAsString(new GlobalResDto(msg, status.value())); response.getWriter().write(json); }catch (Exception e) { log.error(e.getMessage()); } } }@Component @RequiredArgsConstructor public class JwtTokenUtil { private final RefreshTokenRepository refreshTokenRepository; private final PrincipalDetailsService userDetailsService; public static final String ACCESS_TOKEN = "access_token"; public static final String REFRESH_TOKEN = "refresh_token"; private static final long ACCESS_TIME = Duration.ofMinutes(30).toMillis(); private static final long REFRESH_TIME = Duration.ofDays(14).toMillis(); @Value("${jwt.secret}") private String secretKey; private Key key; @PostConstruct public void init() { byte[] bytes = Base64.getDecoder().decode(secretKey); key = Keys.hmacShaKeyFor(bytes); } public String getHeaderToken(HttpServletRequest request, String type) { return type.equals("Access") ? request.getHeader(ACCESS_TOKEN) : request.getHeader(REFRESH_TOKEN); } public TokenDto createAllToken(String email) { return new TokenDto(createToken(email, "Access"), createToken(email, "Refresh")); } public String createToken(String email, String type) { Date date = new Date(); long time = type.equals("Access") ? ACCESS_TIME : REFRESH_TIME; return Jwts.builder() .setSubject(email) .setExpiration(new Date(date.getTime() + time)) .setIssuedAt(date) .signWith(SignatureAlgorithm.HS256, key) .compact(); } public Boolean tokenValidataion(String token) { try { Jwts.parserBuilder().setSigningKey(key).build().parseClaimsJws(token); return true; } catch (SecurityException | MalformedJwtException e) { log.error("Invalid JWT signature"); return false; } catch (ExpiredJwtException e) { log.error("Expired JWT"); return false; } catch (UnsupportedJwtException e) { log.error("Unsupported JWT"); return false; } catch (IllegalArgumentException e) { log.error("JWT claims is empty"); return false; } catch (Exception e) { log.error(e.getMessage()); return false; } } public Boolean refreshTokenValidation(String token) { if (!tokenValidataion(token)) return false; Optional refreshToken = refreshTokenRepository.findByUserEmail(getEmailFromToken(token)); return refreshToken.isPresent() && token.equals(refreshToken.get().getRefreshToken()); } public Authentication createAuthentication(String email) { UserDetails userDetails = userDetailsService.loadUserByUsername(email); return new UsernamePasswordAuthenticationToken(userDetails, "", userDetails.getAuthorities()); } public String getEmailFromToken(String token) { return Jwts.parserBuilder().setSigningKey(key).build().parseClaimsJws(token).getBody().getSubject(); } }public class PrincipalDetails implements UserDetails { private AccountDetail accountDetail; public void setAccountDetail(AccountDetail accountDetail) { this.accountDetail = accountDetail; } public AccountDetail getAccountDetail() { return this.accountDetail; } @Override public Collection getAuthorities() { Collection collections = new ArrayList<>(); collections.add(() -> { return accountDetail.getRole().name(); }); return collections; } @Override public String getPassword() { return accountDetail.getPassword(); } @Override public String getUsername() { return accountDetail.getEmail(); } @Override public boolean isAccountNonExpired() { return true; } @Override public boolean isAccountNonLocked() { return true; } @Override public boolean isCredentialsNonExpired() { return true; } @Override public boolean isEnabled() { return true; } }@RequiredArgsConstructor public class PrincipalDetailsService implements UserDetailsService { public final AccountRepository accountRepository; @Override public UserDetails loadUserByUsername(String email) throws UsernameNotFoundException { AccountDetail accountDetail = accountRepository.findByEmail(email).orElseThrow( () -> new RuntimeException("Not found User") ); PrincipalDetails userDetails = new PrincipalDetails(); userDetails.setAccountDetail(accountDetail); return userDetails; } }

"userDetails" is null 에러

0개의 답변

Q&A 목록