feat: OIDC 소셜 로그인 구현

build.gradle

@@ -43,6 +43,16 @@ dependencies {
     // Spring Security
     implementation 'org.springframework.boot:spring-boot-starter-security'
     implementation 'org.springframework.security:spring-security-test'
+    implementation 'org.springframework.security:spring-security-oauth2-client'
+    implementation 'org.springframework.security:spring-security-oauth2-jose'
+
+    // JWT
+    implementation 'io.jsonwebtoken:jjwt-api:0.11.5'
+    runtimeOnly 'io.jsonwebtoken:jjwt-impl:0.11.5'
+    runtimeOnly 'io.jsonwebtoken:jjwt-jackson:0.11.5'
+
+    // Apple Login
+    implementation 'org.bouncycastle:bcpkix-jdk18on:1.72'
 
     // Querydsl
     implementation 'com.querydsl:querydsl-jpa:5.0.0:jakarta'
@@ -57,9 +67,8 @@ dependencies {
     // AWS
     implementation 'org.springframework.cloud:spring-cloud-starter-aws:2.2.6.RELEASE'
 
+    // Test
     testImplementation 'org.springframework.boot:spring-boot-starter-test'
-
-    // test lombok
     testCompileOnly 'org.projectlombok:lombok'
     testAnnotationProcessor 'org.projectlombok:lombok'
 }

src/main/java/com/depromeet/TenminuteApplication.java

@@ -2,10 +2,8 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
-import org.springframework.data.jpa.repository.config.EnableJpaAuditing;
 
 @SpringBootApplication
-@EnableJpaAuditing
 public class TenminuteApplication {
     public static void main(String[] args) {
         SpringApplication.run(TenminuteApplication.class, args);

src/main/java/com/depromeet/domain/auth/api/AuthController.java

@@ -0,0 +1,31 @@
+package com.depromeet.domain.auth.api;
+
+import com.depromeet.domain.auth.application.AuthService;
+import com.depromeet.domain.auth.application.JwtTokenService;
+import com.depromeet.domain.auth.dto.MemberRegisterRequest;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@Tag(name = "1. [인증]", description = "인증 관련 API")
+@RestController
+@RequestMapping("/auth")
+@RequiredArgsConstructor
+public class AuthController {
+
+    private final JwtTokenService jwtTokenService;
+    private final AuthService authService;
+
+    @Operation(summary = "회원가입", description = "회원가입을 진행합니다.")
+    @PostMapping("/register")
+    public ResponseEntity<Void> memberRegister(@Valid @RequestBody MemberRegisterRequest request) {
+        authService.registerMember(request);
+        return ResponseEntity.ok().build();
+    }
+}

src/main/java/com/depromeet/domain/auth/application/AuthService.java

@@ -0,0 +1,23 @@
+package com.depromeet.domain.auth.application;
+
+import com.depromeet.domain.auth.dto.MemberRegisterRequest;
+import com.depromeet.domain.member.dao.MemberRepository;
+import com.depromeet.domain.member.domain.Member;
+import com.depromeet.global.util.MemberUtil;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class AuthService {
+
+    private final MemberRepository memberRepository;
+    private final MemberUtil memberUtil;
+
+    public void registerMember(MemberRegisterRequest request) {
+        final Member member = memberUtil.getCurrentMember();
+        member.register(request.nickname());
+    }
+}

src/main/java/com/depromeet/domain/auth/application/JwtTokenService.java

@@ -0,0 +1,87 @@
+package com.depromeet.domain.auth.application;
+
+import com.depromeet.domain.auth.dao.RefreshTokenRepository;
+import com.depromeet.domain.auth.domain.RefreshToken;
+import com.depromeet.domain.auth.dto.AccessToken;
+import com.depromeet.domain.member.dao.MemberRepository;
+import com.depromeet.domain.member.domain.Member;
+import com.depromeet.domain.member.domain.MemberRole;
+import com.depromeet.global.config.security.PrincipalDetails;
+import com.depromeet.global.security.JwtTokenProvider;
+import java.util.NoSuchElementException;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.stereotype.Service;
+
+@Service
+@RequiredArgsConstructor
+public class JwtTokenService {
+
+    private final JwtTokenProvider jwtTokenProvider;
+    private final MemberRepository memberRepository;
+    private final RefreshTokenRepository refreshTokenRepository;
+
+    public String createAccessToken(Long memberId, MemberRole memberRole) {
+        return jwtTokenProvider.generateAccessToken(memberId, memberRole);
+    }
+
+    public String createRefreshToken(Long memberId) {
+        String token = jwtTokenProvider.generateRefreshToken(memberId);
+        RefreshToken refreshToken =
+                RefreshToken.builder()
+                        .memberId(memberId)
+                        .token(token)
+                        .ttl(jwtTokenProvider.getRefreshTokenExpirationTime())
+                        .build();
+        refreshTokenRepository.save(refreshToken);
+        return token;
+    }
+
+    public String reissueAccessToken(String refreshToken) {
+        Member member = getMemberFrom(refreshToken);
+        return createAccessToken(member.getId(), member.getRole());
+    }
+
+    public String reissueAccessToken(AccessToken accessToken) {
+        return createAccessToken(accessToken.memberId(), accessToken.memberRole());
+    }
+
+    public String reissueRefreshToken(String refreshToken) {
+        Member member = getMemberFrom(refreshToken);
+        return createRefreshToken(member.getId());
+    }
+
+    public String reissueRefreshToken(AccessToken accessToken) {
+        return createRefreshToken(accessToken.memberId());
+    }
+
+    private Member getMemberFrom(String refreshToken) throws NoSuchElementException {
+        Long memberId = jwtTokenProvider.parseRefreshToken(refreshToken);
+        return memberRepository.findById(memberId).orElseThrow();
+    }
+
+    public Authentication getAuthentication(String accessToken) {
+        AccessToken parsedAccessToken = jwtTokenProvider.parseAccessToken(accessToken);
+
+        UserDetails userDetails =
+                new PrincipalDetails(
+                        parsedAccessToken.memberId(), parsedAccessToken.memberRole().name());
+
+        return new UsernamePasswordAuthenticationToken(
+                userDetails, null, userDetails.getAuthorities());
+    }
+
+    public boolean isAccessTokenExpired(String accessToken) {
+        return jwtTokenProvider.isAccessTokenExpired(accessToken);
+    }
+
+    public boolean isRefreshTokenExpired(String refreshToken) {
+        return jwtTokenProvider.isRefreshTokenExpired(refreshToken);
+    }
+
+    public AccessToken parseAccessToken(String accessToken) {
+        return jwtTokenProvider.parseAccessToken(accessToken);
+    }
+}

src/main/java/com/depromeet/domain/auth/dao/RefreshTokenRepository.java

@@ -0,0 +1,6 @@
+package com.depromeet.domain.auth.dao;
+
+import com.depromeet.domain.auth.domain.RefreshToken;
+import org.springframework.data.repository.CrudRepository;
+
+public interface RefreshTokenRepository extends CrudRepository<RefreshToken, Long> {}

src/main/java/com/depromeet/domain/auth/domain/RefreshToken.java

@@ -0,0 +1,23 @@
+package com.depromeet.domain.auth.domain;
+
+import lombok.Builder;
+import lombok.Getter;
+import org.springframework.data.annotation.Id;
+import org.springframework.data.redis.core.RedisHash;
+import org.springframework.data.redis.core.TimeToLive;
+
+@Getter
+@RedisHash(value = "refreshToken")
+public class RefreshToken {
+
+    @Id private Long memberId;
+    private String token;
+    @TimeToLive private long ttl;
+
+    @Builder
+    public RefreshToken(Long memberId, String token, long ttl) {
+        this.memberId = memberId;
+        this.token = token;
+        this.ttl = ttl;
+    }
+}

src/main/java/com/depromeet/domain/auth/dto/AccessToken.java

@@ -0,0 +1,5 @@
+package com.depromeet.domain.auth.dto;
+
+import com.depromeet.domain.member.domain.MemberRole;
+
+public record AccessToken(Long memberId, MemberRole memberRole) {}

src/main/java/com/depromeet/domain/auth/dto/MemberRegisterRequest.java

@@ -0,0 +1,5 @@
+package com.depromeet.domain.auth.dto;
+
+public record MemberRegisterRequest(String nickname) {
+    // TODO: Add validation
+}

src/main/java/com/depromeet/domain/member/dao/MemberRepository.java

@@ -1,6 +1,11 @@
 package com.depromeet.domain.member.dao;
 
 import com.depromeet.domain.member.domain.Member;
+import com.depromeet.domain.member.domain.OauthInfo;
+import java.util.Optional;
 import org.springframework.data.jpa.repository.JpaRepository;
 
-public interface MemberRepository extends JpaRepository<Member, Long> {}
+public interface MemberRepository extends JpaRepository<Member, Long> {
+
+    Optional<Member> findByOauthInfo(OauthInfo oauthInfo);
+}

src/main/java/com/depromeet/domain/member/domain/Member.java

@@ -2,6 +2,8 @@
 
 import com.depromeet.domain.common.model.BaseTimeEntity;
 import com.depromeet.domain.mission.domain.Mission;
+import com.depromeet.global.error.exception.CustomException;
+import com.depromeet.global.error.exception.ErrorCode;
 import jakarta.persistence.CascadeType;
 import jakarta.persistence.Column;
 import jakarta.persistence.Embedded;
@@ -32,6 +34,8 @@ public class Member extends BaseTimeEntity {
 
     @Embedded private Profile profile;
 
+    @Embedded private OauthInfo oauthInfo;
+
     @Enumerated(EnumType.STRING)
     private MemberStatus status;
 
@@ -49,17 +53,28 @@ public class Member extends BaseTimeEntity {
     @Builder(access = AccessLevel.PRIVATE)
     private Member(
             Profile profile,
+            OauthInfo oauthInfo,
             MemberStatus status,
             MemberRole role,
             MemberVisibility visibility,
             LocalDateTime lastLoginAt) {
         this.profile = profile;
+        this.oauthInfo = oauthInfo;
         this.status = status;
         this.role = role;
         this.visibility = visibility;
         this.lastLoginAt = lastLoginAt;
     }
 
+    public static Member createGuestMember(OauthInfo oauthInfo) {
+        return Member.builder()
+                .oauthInfo(oauthInfo)
+                .status(MemberStatus.NORMAL)
+                .role(MemberRole.GUEST)
+                .visibility(MemberVisibility.PUBLIC)
+                .build();
+    }
+
     public static Member createNormalMember(Profile profile) {
         return Member.builder()
                 .profile(profile)
@@ -69,4 +84,22 @@ public static Member createNormalMember(Profile profile) {
                 .lastLoginAt(LocalDateTime.now())
                 .build();
     }
+
+    public void updateLastLoginAt(LocalDateTime lastLoginAt) {
+        this.lastLoginAt = lastLoginAt;
+    }
+
+    public void register(String nickname) {
+        validateRegisterAvailable();
+        // TODO: Profile 클래스를 제거하고 Member 클래스 필드로 변경
+        // TODO: profileImageUrl이 항상 null이 되는 문제 해결
+        this.profile = new Profile(nickname, null);
+        this.role = MemberRole.USER;
+    }
+
+    private void validateRegisterAvailable() {
+        if (role != MemberRole.GUEST) {
+            throw new CustomException(ErrorCode.MEMBER_ALREADY_REGISTERED);
+        }
+    }
 }

src/main/java/com/depromeet/domain/member/domain/MemberRole.java

@@ -6,8 +6,9 @@
 @Getter
 @AllArgsConstructor
 public enum MemberRole {
-    USER("USER"),
-    ADMIN("ADMIN");
+    GUEST("ROLE_GUEST"),
+    USER("ROLE_USER"),
+    ADMIN("ROLE_ADMIN");
 
     private final String value;
 }

src/main/java/com/depromeet/domain/member/domain/OauthInfo.java

@@ -0,0 +1,18 @@
+package com.depromeet.domain.member.domain;
+
+import jakarta.persistence.Embeddable;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+@Embeddable
+@Getter
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class OauthInfo {
+
+    private String oauthId;
+    private String oauthProvider;
+}

src/main/java/com/depromeet/global/common/constants/SecurityConstants.java

@@ -0,0 +1,12 @@
+package com.depromeet.global.common.constants;
+
+public final class SecurityConstants {
+
+    private SecurityConstants() {}
+
+    public static final String TOKEN_ROLE_NAME = "role";
+    public static final String TOKEN_PREFIX = "Bearer ";
+    public static final String ACCESS_TOKEN_HEADER = "Authorization";
+    public static final String REFRESH_TOKEN_HEADER = "Refresh-Token";
+    public static final String REGISTER_REQUIRED_HEADER = "Registration-Required";
+}