feat: DisableSwaggerSecurity 어노테이션으로 Swagger 내 로그인과 토큰 갱신 API 보안 설정을 비활성화하는 기능 추가

apis/src/main/kotlin/org/yapp/apis/auth/controller/AuthControllerApi.kt

@@ -15,12 +15,14 @@ import org.springframework.web.bind.annotation.RequestBody
 import org.yapp.apis.auth.dto.request.SocialLoginRequest
 import org.yapp.apis.auth.dto.request.TokenRefreshRequest
 import org.yapp.apis.auth.dto.response.AuthResponse
+import org.yapp.globalutils.annotation.DisableSwaggerSecurity
 import org.yapp.globalutils.exception.ErrorResponse
 import java.util.*
 
 @Tag(name = "Authentication", description = "인증 관련 API")
 interface AuthControllerApi {
 
+    @DisableSwaggerSecurity
     @Operation(
         summary = "소셜 로그인",
         description = "카카오 또는 애플 계정으로 로그인합니다. 사용자가 존재하지 않으면 자동으로 회원가입됩니다."
@@ -47,6 +49,7 @@ interface AuthControllerApi {
     @PostMapping("/signin")
     fun signIn(@RequestBody @Valid request: SocialLoginRequest): ResponseEntity<AuthResponse>
 
+    @DisableSwaggerSecurity
     @Operation(
         summary = "토큰 갱신",
         description = "리프레시 토큰을 사용하여 액세스 토큰을 갱신합니다. 새로운 액세스 토큰과 리프레시 토큰을 반환합니다."

apis/src/main/kotlin/org/yapp/apis/auth/dto/request/DeleteTokenRequest.kt

@@ -10,7 +10,7 @@ import org.yapp.apis.auth.dto.response.RefreshTokenResponse
 )
 data class DeleteTokenRequest private constructor(
     @field:NotBlank(message = "Refresh token must not be blank.")
-    @Schema(description = "Refresh token to be deleted", example = "eyJhbGciOiJIUz...")
+    @field:Schema(description = "Refresh token to be deleted", example = "eyJhbGciOiJIUz...")
     val refreshToken: String? = null
 ) {
     fun validRefreshToken() = refreshToken!!

apis/src/main/kotlin/org/yapp/apis/auth/dto/request/GenerateTokenPairRequest.kt

@@ -12,14 +12,14 @@ import java.util.UUID
     description = "Request DTO to generate a new pair of access and refresh tokens"
 )
 data class GenerateTokenPairRequest private constructor(
-    @Schema(
+    @field:Schema(
         description = "User ID",
         example = "a1b2c3d4-e5f6-7890-1234-56789abcdef0"
     )
     @field:NotNull(message = "userId must not be null")
     val userId: UUID? = null,
 
-    @Schema(
+    @field:Schema(
         description = "User role",
         example = "USER"
     )

apis/src/main/kotlin/org/yapp/apis/auth/dto/request/SocialLoginRequest.kt

@@ -14,23 +14,23 @@ import org.yapp.domain.user.ProviderType
     description = "DTO for social login requests"
 )
 data class SocialLoginRequest private constructor(
-    @Schema(
+    @field:Schema(
         description = "Type of social login provider",
         example = "KAKAO",
         required = true
     )
     @field:NotBlank(message = "Provider type is required")
     val providerType: String? = null,
 
-    @Schema(
+    @field:Schema(
         description = "OAuth token issued by the social provider",
         example = "eyJ...",
         required = true
     )
     @field:NotBlank(message = "OAuth token is required")
     val oauthToken: String? = null,
 
-    @Schema(
+    @field:Schema(
         description = "Authorization code used to issue Apple access/refresh tokens (required only for Apple login)",
         example = "c322a426...",
         required = false

apis/src/main/kotlin/org/yapp/apis/auth/dto/request/TokenGenerateRequest.kt

@@ -11,15 +11,15 @@ import java.util.*
 )
 data class TokenGenerateRequest private constructor(
     @field:NotNull(message = "userId must not be null")
-    @Schema(description = "User ID", example = "f6b7d490-1b1a-4b9f-8e8e-27f8e3a5dafa")
+    @field:Schema(description = "User ID", example = "f6b7d490-1b1a-4b9f-8e8e-27f8e3a5dafa")
     val userId: UUID? = null,
 
     @field:NotBlank(message = "refreshToken must not be blank")
-    @Schema(description = "Generated refresh token", example = "eyJhbGciOiJIUzI1NiIsInR...")
+    @field:Schema(description = "Generated refresh token", example = "eyJhbGciOiJIUzI1NiIsInR...")
     val refreshToken: String? = null,
 
     @field:NotNull(message = "expiration must not be null")
-    @Schema(description = "Refresh token expiration time (in seconds)", example = "2592000")
+    @field:Schema(description = "Refresh token expiration time (in seconds)", example = "2592000")
     val expiration: Long? = null
 ) {
     fun validUserId() = userId!!

apis/src/main/kotlin/org/yapp/apis/auth/dto/request/TokenRefreshRequest.kt

@@ -8,7 +8,7 @@ import jakarta.validation.constraints.NotBlank
     description = "DTO for requesting an access token using a refresh token"
 )
 data class TokenRefreshRequest private constructor(
-    @Schema(
+    @field:Schema(
         description = "Valid refresh token issued during previous authentication",
         example = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
         required = true

apis/src/main/kotlin/org/yapp/apis/auth/dto/request/WithdrawStrategyRequest.kt

@@ -10,27 +10,27 @@ import java.util.*
 @Schema(description = "회원 탈퇴 처리 시 내부적으로 사용되는 요청 DTO")
 data class WithdrawStrategyRequest private constructor(
     @field:NotNull(message = "사용자 ID는 필수 값입니다.")
-    @Schema(
+    @field:Schema(
         description = "사용자 고유 ID",
         example = "123e4567-e89b-12d3-a456-426614174000"
     )
     val userId: UUID,
 
     @field:NotNull(message = "소셜 로그인 제공자 타입은 필수 값입니다.")
-    @Schema(
+    @field:Schema(
         description = "소셜 로그인 제공자 타입",
         example = "KAKAO"
     )
     val providerType: ProviderType,
 
     @field:NotBlank(message = "소셜 로그인 제공자로부터 발급받은 고유 ID는 필수 값입니다.")
-    @Schema(
+    @field:Schema(
         description = "소셜 로그인 제공자로부터 발급받은 고유 ID",
         example = "21412412412"
     )
     val providerId: String,
 
-    @Schema(
+    @field:Schema(
         description = "Apple 로그인 시 발급받은 리프레시 토큰 (Apple 로그인 회원 탈퇴 시에만 필요)",
         example = "r_abc123def456ghi789jkl0mnopqrstu",
         required = false

apis/src/main/kotlin/org/yapp/apis/auth/dto/response/AuthResponse.kt

@@ -8,13 +8,13 @@ import io.swagger.v3.oas.annotations.media.Schema
 )
 data class AuthResponse private constructor(
 
-    @Schema(
+    @field:Schema(
         description = "Access token for authorization",
         example = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
     )
     val accessToken: String,
 
-    @Schema(
+    @field:Schema(
         description = "Refresh token used to obtain a new access token",
         example = "dGhpc2lzYXJlZnJlc2h0b2tlbg=="
     )

apis/src/main/kotlin/org/yapp/apis/auth/dto/response/RefreshTokenResponse.kt

@@ -8,7 +8,7 @@ import org.yapp.domain.token.RefreshToken.Token
     description = "Response DTO containing the issued refresh token"
 )
 data class RefreshTokenResponse(
-    @Schema(description = "The refresh token string", example = "eyJhbGciOiJIUz...")
+    @field:Schema(description = "The refresh token string", example = "eyJhbGciOiJIUz...")
     val refreshToken: String
 ) {
     companion object {

apis/src/main/kotlin/org/yapp/apis/auth/dto/response/TokenPairResponse.kt

@@ -8,13 +8,13 @@ import io.swagger.v3.oas.annotations.media.Schema
 )
 data class TokenPairResponse private constructor(
 
-    @Schema(
+    @field:Schema(
         description = "Access token for user authorization",
         example = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
     )
     val accessToken: String,
 
-    @Schema(
+    @field:Schema(
         description = "Refresh token to get new access token",
         example = "dGhpc2lzYXJlZnJlc2h0b2tlbg=="
     )

apis/src/main/kotlin/org/yapp/apis/auth/dto/response/UserCreateInfoResponse.kt

@@ -8,32 +8,32 @@ import org.yapp.domain.user.ProviderType
     description = "Response DTO containing user information for newly registered users via social login"
 )
 data class UserCreateInfoResponse private constructor(
-    @Schema(
+    @field:Schema(
         description = "사용자 이메일",
         example = "[email protected]",
         nullable = true
     )
     val email: String?,
 
-    @Schema(
+    @field:Schema(
         description = "사용자 닉네임",
         example = "코딩하는곰", nullable = true
     )
     val nickname: String?,
 
-    @Schema(
+    @field:Schema(
         description = "사용자 프로필 이미지 URL",
         example = "https://example.com/image.jpg", nullable = true
     )
     val profileImageUrl: String? = null,
 
-    @Schema(
+    @field:Schema(
         description = "소셜 로그인 제공자",
         example = "KAKAO")
 
     val providerType: ProviderType,
 
-    @Schema(
+    @field:Schema(
         description = "소셜 제공자에서 발급한 식별자",
         example = "12345678901234567890"
     )

apis/src/main/kotlin/org/yapp/apis/auth/dto/response/UserIdResponse.kt

@@ -9,7 +9,7 @@ import java.util.*
     description = "Response DTO that contains the user ID extracted from a refresh token"
 )
 data class UserIdResponse(
-    @Schema(description = "User ID", example = "a1b2c3d4-e5f6-7890-1234-56789abcdef0")
+    @field:Schema(description = "User ID", example = "a1b2c3d4-e5f6-7890-1234-56789abcdef0")
     val userId: UUID
 ) {
     companion object {

apis/src/main/kotlin/org/yapp/apis/auth/service/AppleAuthService.kt

@@ -1,14 +1,12 @@
 package org.yapp.apis.auth.service
 
-import org.springframework.stereotype.Service
-import org.springframework.validation.annotation.Validated
 import org.yapp.apis.auth.exception.AuthErrorCode
 import org.yapp.apis.auth.exception.AuthException
 import org.yapp.apis.auth.manager.AppleApiManager
+import org.yapp.globalutils.annotation.ApplicationService
 import org.yapp.infra.external.oauth.apple.response.AppleTokenResponse
 
-@Service
-@Validated
+@ApplicationService
 class AppleAuthService(
     private val appleApiManager: AppleApiManager,
 ) {

apis/src/main/kotlin/org/yapp/apis/auth/service/AuthTokenService.kt

@@ -1,18 +1,16 @@
 package org.yapp.apis.auth.service
 
 import jakarta.validation.Valid
-import org.springframework.stereotype.Service
-import org.springframework.validation.annotation.Validated
 import org.yapp.apis.auth.dto.request.DeleteTokenRequest
 import org.yapp.apis.auth.dto.request.GenerateTokenPairRequest
 import org.yapp.apis.auth.dto.request.TokenGenerateRequest
 import org.yapp.apis.auth.dto.request.TokenRefreshRequest
 import org.yapp.apis.auth.dto.response.TokenPairResponse
 import org.yapp.apis.auth.dto.response.UserIdResponse
 import org.yapp.gateway.jwt.JwtTokenService
+import org.yapp.globalutils.annotation.ApplicationService
 
-@Service
-@Validated
+@ApplicationService
 class AuthTokenService(
     private val refreshTokenService: RefreshTokenService,
     private val jwtTokenService: JwtTokenService

apis/src/main/kotlin/org/yapp/apis/auth/service/RefreshTokenService.kt

@@ -1,17 +1,15 @@
 package org.yapp.apis.auth.service
 
 import jakarta.validation.Valid
-import org.springframework.stereotype.Service
-import org.springframework.validation.annotation.Validated
 import org.yapp.apis.auth.dto.request.TokenGenerateRequest
 import org.yapp.apis.auth.dto.request.TokenRefreshRequest
 import org.yapp.apis.auth.dto.response.RefreshTokenResponse
 import org.yapp.apis.auth.dto.response.UserIdResponse
 import org.yapp.domain.token.RefreshTokenDomainService
+import org.yapp.globalutils.annotation.ApplicationService
 import java.util.*
 
-@Service
-@Validated
+@ApplicationService
 class RefreshTokenService(
     private val refreshTokenDomainService: RefreshTokenDomainService,
 ) {

apis/src/main/kotlin/org/yapp/apis/auth/service/UserSignInService.kt

@@ -1,28 +1,31 @@
 package org.yapp.apis.auth.service
 
 import jakarta.validation.Valid
-import org.springframework.stereotype.Service
 import org.springframework.transaction.annotation.Propagation
 import org.springframework.transaction.annotation.Transactional
 import org.yapp.apis.user.dto.request.FindOrCreateUserRequest
+import org.yapp.apis.user.dto.request.SaveAppleRefreshTokenRequest
 import org.yapp.apis.user.dto.response.CreateUserResponse
 import org.yapp.apis.user.service.UserAccountService
+import org.yapp.globalutils.annotation.ApplicationService
 
-@Service
+@ApplicationService
 class UserSignInService(
     private val userAccountService: UserAccountService,
 ) {
     @Transactional(propagation = Propagation.REQUIRES_NEW)
     fun processSignIn(
-        @Valid request: FindOrCreateUserRequest,
-        appleRefreshToken: String?
+        @Valid request: FindOrCreateUserRequest, appleRefreshToken: String?
     ): CreateUserResponse {
-        val createUserResponse = userAccountService.findOrCreateUser(request)
+        val initialUserResponse = userAccountService.findOrCreateUser(request)
 
-        appleRefreshToken?.let {
-            userAccountService.updateAppleRefreshToken(createUserResponse.id, it)
-        }
-
-        return createUserResponse
+        return appleRefreshToken.takeIf { !it.isNullOrBlank() }
+            ?.let { token ->
+                userAccountService.updateAppleRefreshToken(
+                    SaveAppleRefreshTokenRequest.of(
+                        initialUserResponse, token
+                    )
+                )
+            } ?: initialUserResponse
     }
 }

apis/src/main/kotlin/org/yapp/apis/auth/service/UserWithdrawalService.kt

@@ -1,12 +1,12 @@
 package org.yapp.apis.auth.service
 
-import org.springframework.stereotype.Service
 import org.springframework.transaction.annotation.Propagation
 import org.springframework.transaction.annotation.Transactional
 import org.yapp.apis.user.service.UserAccountService
+import org.yapp.globalutils.annotation.ApplicationService
 import java.util.*
 
-@Service
+@ApplicationService
 class UserWithdrawalService(
     private val userAccountService: UserAccountService,
     private val refreshTokenService: RefreshTokenService

apis/src/main/kotlin/org/yapp/apis/auth/strategy/signin/SignInStrategyResolver.kt

@@ -1,10 +1,10 @@
 package org.yapp.apis.auth.strategy.signin
 
-import org.springframework.stereotype.Service
+import org.springframework.stereotype.Component
 import org.yapp.apis.auth.exception.AuthErrorCode
 import org.yapp.apis.auth.exception.AuthException
 
-@Service
+@Component
 class SignInStrategyResolver(
     private val strategies: List<SignInStrategy>
 ) {

apis/src/main/kotlin/org/yapp/apis/auth/usecase/AuthUseCase.kt

@@ -71,8 +71,10 @@ class AuthUseCase(
 
     private fun fetchAppleRefreshTokenIfNeeded(credentials: SignInCredentials): String? {
         if (credentials is AppleAuthCredentials) {
-            return appleAuthService.fetchAppleOauthTokens(credentials.authorizationCode).refreshToken
+            val tokenResponse = appleAuthService.fetchAppleOauthTokens(credentials.authorizationCode)
+            return tokenResponse.refreshToken
         }
+
         return null
     }
 }