[BE] feat: 헤더 존재 여부 검증

backend/src/main/java/reviewme/global/GlobalExceptionHandler.java

@@ -5,6 +5,7 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.beans.TypeMismatchException;
+import org.springframework.context.MessageSourceResolvable;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ProblemDetail;
 import org.springframework.http.converter.HttpMessageNotReadableException;
@@ -74,8 +75,7 @@ public ProblemDetail handleServletRequestBindingException(Exception ex) {
         return ProblemDetail.forStatusAndDetail(HttpStatus.BAD_REQUEST, "요청을 읽을 수 없습니다.");
     }
 
-    @ExceptionHandler({MethodValidationException.class, BindException.class,
-            TypeMismatchException.class, HandlerMethodValidationException.class})
+    @ExceptionHandler({MethodValidationException.class, BindException.class, TypeMismatchException.class})
     public ProblemDetail handleRequestFormatException(Exception ex) {
         return ProblemDetail.forStatusAndDetail(HttpStatus.BAD_REQUEST, "요청의 형식이 잘못되었습니다.");
     }
@@ -103,4 +103,14 @@ public ProblemDetail handleMethodArgumentNotValid(MethodArgumentNotValidExceptio
         problemDetail.setProperties(properties);
         return problemDetail;
     }
+
+    @ExceptionHandler(HandlerMethodValidationException.class)
+    public ProblemDetail handleHandlerMethodValidationException(HandlerMethodValidationException ex) {
+        String message = ex.getAllErrors()
+                .stream()
+                .map(MessageSourceResolvable::getDefaultMessage)
+                .toList()
+                .get(0);
+        return ProblemDetail.forStatusAndDetail(HttpStatus.BAD_REQUEST, message);
+    }
 }

backend/src/main/java/reviewme/review/controller/ReviewApi.java

@@ -6,6 +6,7 @@
 import io.swagger.v3.oas.annotations.responses.ApiResponse;
 import io.swagger.v3.oas.annotations.responses.ApiResponses;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestParam;
@@ -19,7 +20,7 @@ public interface ReviewApi {
     @ApiResponses(value = {
             @ApiResponse(responseCode = "201", description = "리뷰 등록 요청 성공")
     })
-    ResponseEntity<Void> createReview(@RequestBody CreateReviewRequest request);
+    ResponseEntity<Void> createReview(@Valid @RequestBody CreateReviewRequest request);
 
     @Operation(summary = "리뷰 작성 정보 조회", description = "리뷰 생성 시 필요한 정보를 조회한다.")
     @ApiResponses(value = {

backend/src/main/java/reviewme/review/controller/ReviewController.java

@@ -11,6 +11,7 @@
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
+import reviewme.review.controller.validator.ContainsHeaderName;
 import reviewme.review.dto.request.CreateReviewRequest;
 import reviewme.review.dto.response.ReceivedReviewsResponse;
 import reviewme.review.dto.response.ReviewDetailResponse;
@@ -32,7 +33,9 @@ public ResponseEntity<Void> createReview(@Valid @RequestBody CreateReviewRequest
     }
 
     @GetMapping("/reviews")
-    public ResponseEntity<ReceivedReviewsResponse> findReceivedReviews(HttpServletRequest request) {
+    public ResponseEntity<ReceivedReviewsResponse> findReceivedReviews(
+            @Valid @ContainsHeaderName(GROUP_ACCESS_CODE_HEADER) HttpServletRequest request
+    ) {
         String groupAccessCode = request.getHeader(GROUP_ACCESS_CODE_HEADER);
         ReceivedReviewsResponse response = reviewService.findReceivedReviews(groupAccessCode);
         return ResponseEntity.ok(response);
@@ -45,7 +48,10 @@ public ResponseEntity<ReviewSetupResponse> findReviewCreationSetup(@RequestParam
     }
 
     @GetMapping("/reviews/{id}")
-    public ResponseEntity<ReviewDetailResponse> findReceivedReviewDetail(@PathVariable long id, HttpServletRequest request) {
+    public ResponseEntity<ReviewDetailResponse> findReceivedReviewDetail(
+            @PathVariable long id,
+            @ContainsHeaderName(GROUP_ACCESS_CODE_HEADER) HttpServletRequest request
+    ) {
         String groupAccessCode = request.getHeader(GROUP_ACCESS_CODE_HEADER);
         ReviewDetailResponse response = reviewService.findReceivedReviewDetail(groupAccessCode, id);
         return ResponseEntity.ok(response);

backend/src/main/java/reviewme/review/controller/validator/ContainsHeaderName.java

@@ -0,0 +1,26 @@
+package reviewme.review.controller.validator;
+
+import jakarta.validation.Constraint;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+import org.springframework.core.annotation.AliasFor;
+
+@Target(ElementType.PARAMETER)
+@Retention(RetentionPolicy.RUNTIME)
+@Constraint(validatedBy = ContainsHeaderValidator.class)
+public @interface ContainsHeaderName {
+
+    @AliasFor("headerName")
+    String value() default "";
+
+    @AliasFor("value")
+    String headerName() default "";
+
+    String message() default "필수 값이 헤더에 존재하지 않아요";
+
+    Class<?>[] groups() default {};
+
+    Class<?>[] payload() default {};
+}

backend/src/main/java/reviewme/review/controller/validator/ContainsHeaderValidator.java

@@ -0,0 +1,20 @@
+package reviewme.review.controller.validator;
+
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.validation.ConstraintValidator;
+import jakarta.validation.ConstraintValidatorContext;
+
+public class ContainsHeaderValidator implements ConstraintValidator<ContainsHeaderName, HttpServletRequest> {
+
+    private String headerName;
+
+    @Override
+    public void initialize(ContainsHeaderName constraintAnnotation) {
+        this.headerName = constraintAnnotation.headerName();
+    }
+
+    @Override
+    public boolean isValid(HttpServletRequest request, ConstraintValidatorContext context) {
+        return request.getHeader(headerName) != null;
+    }
+}

backend/src/test/java/reviewme/review/controller/validator/ContainsHeaderNameValidatorTest.java

@@ -0,0 +1,47 @@
+package reviewme.review.controller.validator;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.mock.web.MockHttpServletRequest;
+
+class ContainsHeaderNameValidatorTest {
+
+    private final ContainsHeaderValidator validator = new ContainsHeaderValidator();
+    private final ContainsHeaderName validationAnnotation = mock(ContainsHeaderName.class);
+
+    @BeforeEach
+    void setUp() {
+        given(validationAnnotation.headerName()).willReturn("test");
+        validator.initialize(validationAnnotation);
+    }
+
+    @Test
+    void 헤더에_값이_존재하지_않는_경우_검증에_실패한다() {
+        // Given
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        validator.initialize(validationAnnotation);
+
+        // When
+        boolean result = validator.isValid(request, null);
+
+        // Then
+        assertThat(result).isFalse();
+    }
+
+    @Test
+    void 헤더에_값이_존재하는_경우_검증에_성공한다() {
+        // given
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        request.addHeader("test", "value");
+
+        // when
+        boolean result = validator.isValid(request, null);
+
+        // then
+        assertThat(result).isTrue();
+    }
+}