From 360ec862c34cc219fb091e4c0d8d92667a8f287a Mon Sep 17 00:00:00 2001 From: kaswhy Date: Sat, 30 Aug 2025 19:35:00 +0900 Subject: [PATCH 1/3] =?UTF-8?q?hotfix(#206/security):=20=EB=AA=A8=EB=93=A0?= =?UTF-8?q?=20options=20=EC=9A=94=EC=B2=AD=20=ED=97=88=EC=9A=A9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../security/TokenAuthenticationFilter.java | 24 +++++++++++-------- 1 file changed, 14 insertions(+), 10 deletions(-) diff --git a/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java b/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java index fcd05dd..52e5279 100644 --- a/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java +++ b/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java @@ -24,18 +24,22 @@ public class TokenAuthenticationFilter extends OncePerRequestFilter { @Override protected boolean shouldNotFilter(HttpServletRequest request) { - String p = request.getRequestURI(); - return p.startsWith("/v3/api-docs") - || p.startsWith("/swagger-ui") - || p.equals("/swagger-ui.html") - || p.startsWith("/auth/") - || p.startsWith("/test/") - || p.startsWith("/game/") - || p.startsWith("/apply/") - || p.startsWith("/check/") - || "OPTIONS".equalsIgnoreCase(request.getMethod()); + if ("OPTIONS".equalsIgnoreCase(request.getMethod())) { + return true; + } + + String uri = request.getRequestURI(); + return uri.startsWith("/v3/api-docs") + || uri.startsWith("/swagger-ui") + || uri.equals("/swagger-ui.html") + || uri.startsWith("/api/v1/auth/") + || uri.startsWith("/api/v1/test/") + || uri.startsWith("/api/v1/game/") + || uri.startsWith("/api/v1/apply/") + || uri.startsWith("/api/v1/check/"); } + @Override protected void doFilterInternal( @NotNull HttpServletRequest request, From c464188bc2cb878196c12476820224aaeeb23c35 Mon Sep 17 00:00:00 2001 From: kaswhy Date: Sat, 30 Aug 2025 19:35:00 +0900 Subject: [PATCH 2/3] =?UTF-8?q?hotfix(#206/security):=20=EB=AA=A8=EB=93=A0?= =?UTF-8?q?=20options=20=EC=9A=94=EC=B2=AD=20=ED=97=88=EC=9A=A9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../security/TokenAuthenticationFilter.java | 23 +++++++++++-------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java b/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java index fcd05dd..e7d87d9 100644 --- a/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java +++ b/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java @@ -24,16 +24,19 @@ public class TokenAuthenticationFilter extends OncePerRequestFilter { @Override protected boolean shouldNotFilter(HttpServletRequest request) { - String p = request.getRequestURI(); - return p.startsWith("/v3/api-docs") - || p.startsWith("/swagger-ui") - || p.equals("/swagger-ui.html") - || p.startsWith("/auth/") - || p.startsWith("/test/") - || p.startsWith("/game/") - || p.startsWith("/apply/") - || p.startsWith("/check/") - || "OPTIONS".equalsIgnoreCase(request.getMethod()); + if ("OPTIONS".equalsIgnoreCase(request.getMethod())) { + return true; + } + + String uri = request.getRequestURI(); + return uri.startsWith("/v3/api-docs") + || uri.startsWith("/swagger-ui") + || uri.equals("/swagger-ui.html") + || uri.startsWith("/api/v1/auth/") + || uri.startsWith("/api/v1/test/") + || uri.startsWith("/api/v1/game/") + || uri.startsWith("/api/v1/apply/") + || uri.startsWith("/api/v1/check/"); } @Override From 845b73b8c7094eae202bb6e3596a788bf4ab882c Mon Sep 17 00:00:00 2001 From: kaswhy Date: Sat, 30 Aug 2025 19:35:50 +0900 Subject: [PATCH 3/3] Merge remote-tracking branch 'origin/hotfix/issue-206' into hotfix/issue-206 --- .../inha/gdgoc/global/security/TokenAuthenticationFilter.java | 1 - 1 file changed, 1 deletion(-) diff --git a/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java b/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java index 52e5279..e7d87d9 100644 --- a/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java +++ b/src/main/java/inha/gdgoc/global/security/TokenAuthenticationFilter.java @@ -39,7 +39,6 @@ protected boolean shouldNotFilter(HttpServletRequest request) { || uri.startsWith("/api/v1/check/"); } - @Override protected void doFilterInternal( @NotNull HttpServletRequest request,