[Spring Core] 김민준B 과제 제출합니다.

.gitignore

@@ -25,6 +25,7 @@ bin/
 out/
 !**/src/main/**/out/
 !**/src/test/**/out/
+src/main/resources/application.yml
 
 ### NetBeans ###
 /nbproject/private/

build.gradle

@@ -16,11 +16,17 @@ repositories {
 }
 
 dependencies {
+	compileOnly 'org.projectlombok:lombok'
+	annotationProcessor 'org.projectlombok:lombok'
 	implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
 	implementation 'org.springframework.boot:spring-boot-starter-web'
 	implementation 'org.springframework.boot:spring-boot-starter-jdbc'
 	runtimeOnly 'com.mysql:mysql-connector-j'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
+	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+	implementation 'org.springframework.boot:spring-boot-starter-aop'
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+	implementation 'org.thymeleaf.extras:thymeleaf-extras-springsecurity6'
 }
 
 tasks.named('test') {

src/main/java/com/example/demo/config/SecurityConfig.java

@@ -0,0 +1,54 @@
+package com.example.demo.config;
+
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+
+
+@Configuration
+@EnableWebSecurity
+@RequiredArgsConstructor
+public class SecurityConfig {
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+        http
+                .authorizeHttpRequests((auth) -> auth
+                        .requestMatchers("/members/home","/members/register","/members/signup", "/members/view","/members/signin").permitAll()
+                        .requestMatchers("/members/admin").hasRole("ADMIN")
+                        .requestMatchers("/my/**").hasAnyRole("ADMIN", "USER")
+                        .anyRequest().authenticated()
+                );
+
+        http
+                .formLogin((auth) -> auth.loginPage("/members/signin")
+                        .loginProcessingUrl("/members/view")
+                        .permitAll()
+                );
+
+        http
+                .csrf(AbstractHttpConfigurer::disable);
+
+        http
+                .sessionManagement((auth)-> auth
+                        .maximumSessions(1)
+                        .maxSessionsPreventsLogin(true));
+
+        http
+                .sessionManagement((auth)-> auth
+                        .sessionFixation().changeSessionId());
+
+        return http.build();
+    }
+
+    @Bean
+    public BCryptPasswordEncoder bCryptPasswordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+
+}

src/main/java/com/example/demo/controller/SignController.java

@@ -0,0 +1,59 @@
+package com.example.demo.controller;
+
+import com.example.demo.controller.dto.request.MemberCreateRequest;
+import com.example.demo.controller.dto.response.MemberResponse;
+import com.example.demo.service.MemberService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+
+@Controller
+public class SignController {
+
+    private final MemberService memberService;
+
+    @Autowired
+    public SignController(MemberService memberService) {
+        this.memberService = memberService;
+    }
+
+    @PostMapping("/members/register")
+    public String register(MemberCreateRequest request) {
+        MemberResponse response = memberService.create(request);
+        ResponseEntity.ok(response);
+        return "redirect:/members/signin";
+    }
+
+    @PostMapping("/members/view")
+    public String login() {
+        return "redirect:/members/home";
+    }
+
+    @GetMapping("/members/signup")
+    public String signUp() {
+        return "signup";
+    }
+
+    @GetMapping("/members/signin")
+    public String signIn() {
+        return "signin";
+    }
+
+    @GetMapping("/members/home")
+    public String home(Model model) {
+        String id = SecurityContextHolder.getContext().getAuthentication().getName();
+
+        model.addAttribute("id", id);
+        return "home";
+    }
+
+    @GetMapping("/members/admin")
+    public String admin() {
+        return "admin";
+    }
+
+}

src/main/java/com/example/demo/controller/dto/MemberDetails.java

@@ -0,0 +1,57 @@
+package com.example.demo.controller.dto;
+
+import com.example.demo.domain.Member;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.ArrayList;
+import java.util.Collection;
+
+public class MemberDetails implements UserDetails {
+
+    private final Member member;
+
+
+    public MemberDetails(Member member) {
+        this.member = member;
+    }
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        Collection<GrantedAuthority> collection = new ArrayList<>();
+
+        collection.add((GrantedAuthority) member::getRole);
+
+        return collection;
+    }
+
+    @Override
+    public String getPassword() {
+        return member.getPassword();
+    }
+
+    @Override
+    public String getUsername() {
+        return member.getUsername();
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return true;
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return true;
+    }
+}

src/main/java/com/example/demo/controller/dto/request/ArticleUpdateRequest.java

@@ -1,6 +1,7 @@
 package com.example.demo.controller.dto.request;
 
 public record ArticleUpdateRequest(
+    Long authorId,
     Long boardId,
     String title,
     String description

src/main/java/com/example/demo/controller/dto/response/MemberResponse.java

@@ -4,12 +4,12 @@
 
 public record MemberResponse(
     Long id,
-    String name,
+    String username,
     String email
 ) {
 
     public static MemberResponse from(Member member) {
-        return new MemberResponse(member.getId(), member.getName(), member.getEmail());
+        return new MemberResponse(member.getId(), member.getUsername(), member.getEmail());
     }
 
 }

src/main/java/com/example/demo/domain/Article.java

@@ -1,17 +1,46 @@
 package com.example.demo.domain;
 
+import jakarta.persistence.*;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
 import java.time.LocalDateTime;
 
+@Entity
+@Table(name = "article")
+@NoArgsConstructor
+@Getter
+@Setter
 public class Article {
 
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
     private Long id;
+
+    @Column(name = "author_id", nullable = false)
     private Long authorId;
+
+    @Column(name = "board_id", nullable = false)
     private Long boardId;
+
+    @Column(name = "title", nullable = false)
     private String title;
+
+    @Column(name = "content", nullable = false)
     private String content;
+
+    @Column(name = "created_date")
     private LocalDateTime createdAt;
+
+    @Column(name = "modified_date")
     private LocalDateTime modifiedAt;
 
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "board_id", insertable = false, updatable = false)
+    private Board board;
+
     public Article(
         Long id,
         Long authorId,
@@ -47,39 +76,5 @@ public void update(Long boardId, String title, String description) {
         this.modifiedAt = LocalDateTime.now();
     }
 
-    public void setId(Long id) {
-        this.id = id;
-    }
-
-    public void setModifiedAt(LocalDateTime modifiedAt) {
-        this.modifiedAt = modifiedAt;
-    }
 
-    public Long getId() {
-        return id;
-    }
-
-    public Long getAuthorId() {
-        return authorId;
-    }
-
-    public Long getBoardId() {
-        return boardId;
-    }
-
-    public String getTitle() {
-        return title;
-    }
-
-    public String getContent() {
-        return content;
-    }
-
-    public LocalDateTime getCreatedAt() {
-        return createdAt;
-    }
-
-    public LocalDateTime getModifiedAt() {
-        return modifiedAt;
-    }
 }

src/main/java/com/example/demo/domain/Board.java

@@ -1,10 +1,30 @@
 package com.example.demo.domain;
 
+import jakarta.persistence.*;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@Entity
+@Table(name = "board")
+@NoArgsConstructor
+@Getter @Setter
 public class Board {
 
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
     private Long id;
+
+    @Column(name = "name", nullable = false)
     private String name;
 
+    @OneToMany(mappedBy = "board", cascade = CascadeType.ALL, orphanRemoval = true)
+    private List<Article> articles = new ArrayList<>();
+
     public Board(Long id, String name) {
         this.id = id;
         this.name = name;
@@ -14,18 +34,6 @@ public Board(String name) {
         this.name = name;
     }
 
-    public Long getId() {
-        return id;
-    }
-
-    public void setId(Long id) {
-        this.id = id;
-    }
-
-    public String getName() {
-        return name;
-    }
-
     public void update(String name) {
         this.name = name;
     }