Merge pull request #31 from Triumers/user

[Feature] 유저 권한 헤더에 추가 및 권한에 관한 SpringSecurity 구현
Triumers · Apr 16, 2024 · f174c26 · f174c26
2 parents fcbda63 + 348c06b
commit f174c26
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/main/java/org/triumers/newsnippetback/common/config/SecurityConfig.java b/src/main/java/org/triumers/newsnippetback/common/config/SecurityConfig.java
@@ -95,8 +95,7 @@ public CorsConfiguration getCorsConfiguration(HttpServletRequest request) {
         //경로별 인가 작업
         http.authorizeHttpRequests((auth) -> auth
                 .requestMatchers("/auth/signup").permitAll()
-                .requestMatchers("/**").permitAll()
-                .requestMatchers(("/manager")).hasAnyRole("MANAGER")
+                .requestMatchers(("/manage")).hasAnyRole("MANAGER")
                 .requestMatchers("/admin").hasAnyRole("ADMIN")
                 .anyRequest().authenticated());
 

diff --git a/src/main/java/org/triumers/newsnippetback/common/jwt/LoginFilter.java b/src/main/java/org/triumers/newsnippetback/common/jwt/LoginFilter.java
@@ -61,6 +61,7 @@ protected void successfulAuthentication(HttpServletRequest request, HttpServletR
         String token = jwtUtil.createJwt(username, role, nickname);
 
         response.addHeader("Authorization", "Bearer " + token);
+        response.addHeader("UserRole", role.name());
     }
 
     @Override