🐛 Google id token issuer mismatch 이슈 해결

pennyway-app-external-api/src/main/java/kr/co/pennyway/api/apis/auth/helper/OauthOidcHelper.java

@@ -48,7 +48,7 @@ public OidcDecodePayload getPayload(Provider provider, String idToken) {
         OauthOidcClientProperties properties = oauthOidcClients.get(provider).values().iterator().next();
         OidcPublicKeyResponse response = client.getOidcPublicKey();
 
-        return getPayloadFromIdToken(idToken, properties.getJwksUri(), properties.getSecret(), null, response);
+        return getPayloadFromIdToken(idToken, properties.getIssuer(), properties.getSecret(), null, response);
     }
 
     /**

pennyway-infra/src/main/java/kr/co/pennyway/infra/common/oidc/OauthOidcClientProperties.java

@@ -4,4 +4,6 @@ public interface OauthOidcClientProperties {
     String getJwksUri();
 
     String getSecret();
+
+    String getIssuer();
 }

pennyway-infra/src/main/java/kr/co/pennyway/infra/common/oidc/OauthOidcProviderImpl.java

@@ -89,7 +89,6 @@ private String getUnsignedToken(String token) {
      */
     private Jws<Claims> getOIDCTokenJws(String token, String modulus, String exponent) {
         try {
-            log.info("token : {}", token);
             return Jwts.parser()
                     .verifyWith(getRSAPublicKey(modulus, exponent))
                     .build()

pennyway-infra/src/main/java/kr/co/pennyway/infra/common/properties/AppleOidcProperties.java

@@ -11,4 +11,9 @@
 public class AppleOidcProperties implements OauthOidcClientProperties {
     private final String jwksUri;
     private final String secret;
+
+    @Override
+    public String getIssuer() {
+        return jwksUri;
+    }
 }

pennyway-infra/src/main/java/kr/co/pennyway/infra/common/properties/GoogleOidcProperties.java

@@ -11,4 +11,5 @@
 public class GoogleOidcProperties implements OauthOidcClientProperties {
     private final String jwksUri;
     private final String secret;
+    private final String issuer;
 }

pennyway-infra/src/main/java/kr/co/pennyway/infra/common/properties/KakaoOidcProperties.java

@@ -11,4 +11,9 @@
 public class KakaoOidcProperties implements OauthOidcClientProperties {
     private final String jwksUri;
     private final String secret;
+
+    @Override
+    public String getIssuer() {
+        return jwksUri;
+    }
 }

pennyway-infra/src/main/resources/application-infra.yml

@@ -28,13 +28,14 @@ oauth2:
   client:
     provider:
       kakao:
-        jwks-uri: ${KAKAO_JWKS_URI:https://kauth.kakao.com}
+        jwks-uri: ${KAKAO_JWKS_URI:https://kakao.com}
         secret: ${KAKAO_CLIENT_SECRET:liuhil5068l2j5o0912}
       google:
-        jwks-uri: ${GOOGLE_JWKS_URI:https://www.googleapis.com}
+        jwks-uri: ${GOOGLE_JWKS_URI:https://google.com}
         secret: ${GOOGLE_CLIENT_SECRET:123456789012-67hm9vokrt6ukmiwtvd8ak67oflecm.apps.googleusercontent.com}
+        issuer: ${GOOGLE_ISSUER:https://google.com}
       apple:
-        jwks-uri: ${APPLE_JWKS_URI:https://appleid.apple.com}
+        jwks-uri: ${APPLE_JWKS_URI:https://apple.com}
         secret: ${APPLE_CLIENT_SECRET:pennyway-jayang-was}
 
 ---