FIX : cookie Secure 설정

Dongnaebangnae · May 4, 2024 · e036f7e · e036f7e
1 parent 9def8cc
commit e036f7e
Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/src/main/java/com/nawabali/nawabali/security/Jwt/JwtAuthenticationFilter.java b/src/main/java/com/nawabali/nawabali/security/Jwt/JwtAuthenticationFilter.java
@@ -74,7 +74,7 @@ protected void successfulAuthentication(HttpServletRequest request, HttpServletR
         log.info("accessCookie value : " + accessCookie.getValue());
         log.info("refreshCookie value : " + refreshCookie.getValue());
 
-        response.addHeader("Set-Cookie", String.format("%s; Secure; SameSite=None;",token));
+        response.addHeader(JwtUtil.AUTHORIZATION_HEADER, String.format("%s; Secure; SameSite=None;",token));
 
         // refresh 토큰 redis에 저장
         redisTool.setValues(token.substring(7), refreshCookie.getValue(), Duration.ofMillis(jwtUtil.REFRESH_EXPIRATION_TIME));

diff --git a/src/main/java/com/nawabali/nawabali/security/Jwt/JwtAuthorizationFilter.java b/src/main/java/com/nawabali/nawabali/security/Jwt/JwtAuthorizationFilter.java
@@ -71,7 +71,7 @@ protected void doFilterInternal(HttpServletRequest req, HttpServletResponse res,
                     Cookie newAcessCookie = jwtUtil.createAccessCookie(newAccessToken);
                     log.info("발급한 유저의 email : " + email);
 
-                    res.addHeader("Set-Cookie", String.format("%s; Secure; SameSite=None;",newAccessToken));
+                    res.addHeader(JwtUtil.AUTHORIZATION_HEADER, String.format("%s; Secure; SameSite=None;",newAccessToken));
 
                     redisTool.deleteValues(accessToken);
                     log.info("기존 refreshToken 삭제 key :" + accessToken );

diff --git a/src/main/java/com/nawabali/nawabali/service/KakaoService.java b/src/main/java/com/nawabali/nawabali/service/KakaoService.java
@@ -162,7 +162,7 @@ private String jwtTokenCreate(User kakaoUser , HttpServletResponse response) thr
         log.info("accessCookie value : " + accessCookie.getValue());
         log.info("refreshCookie value : " + refreshCookie.getValue());
         // 6. 헤더 및 쿠키에 저장
-        response.addHeader("Set-Cookie", String.format("%s; Secure; SameSite=None;",token));
+        response.addHeader(JwtUtil.AUTHORIZATION_HEADER, String.format("%s; Secure; SameSite=None;",token));
 
 
         // 7. refresh 토큰 redis에 저장