refactor: 쿠키 생성도 token으로 분리

Author: summersummerwhy

apps/backend/src/auth/auth.controller.ts

@@ -7,8 +7,6 @@ import { MessageResponseDto } from './dtos/messageResponse.dto';
 import { ApiOperation, ApiResponse } from '@nestjs/swagger';
 import { TokenService } from './token/token.service';
 
-const HALF_YEAR = 6 * 30 * 24 * 60 * 60 * 1000;
-
 export enum AuthResponseMessage {
   AUTH_LOGGED_OUT = '로그아웃하였습니다.',
 }
@@ -40,21 +38,8 @@ export class AuthController {
     const refreshToken = this.tokenService.generateRefreshToken(payload);
 
     // 토큰을 쿠키에 담아서 메인 페이지로 리디렉션
-    res.cookie('accessToken', accessToken, {
-      httpOnly: true,
-      secure: true,
-      sameSite: 'strict', // CSRF 방지
-      maxAge: HALF_YEAR,
-      expires: new Date(Date.now() + HALF_YEAR),
-    });
-
-    res.cookie('refreshToken', refreshToken, {
-      httpOnly: true,
-      secure: true,
-      sameSite: 'strict', // CSRF 방지
-      maxAge: HALF_YEAR,
-      expires: new Date(Date.now() + HALF_YEAR),
-    });
+    this.tokenService.setAccessTokenCookie(res, accessToken);
+    this.tokenService.setRefreshTokenCookie(res, refreshToken);
 
     res.redirect(302, '/');
   }
@@ -79,21 +64,8 @@ export class AuthController {
     const refreshToken = this.tokenService.generateRefreshToken(payload);
 
     // 토큰을 쿠키에 담아서 메인 페이지로 리디렉션
-    res.cookie('accessToken', accessToken, {
-      httpOnly: true,
-      secure: true,
-      sameSite: 'strict', // CSRF 방지
-      maxAge: HALF_YEAR,
-      expires: new Date(Date.now() + HALF_YEAR),
-    });
-
-    res.cookie('refreshToken', refreshToken, {
-      httpOnly: true,
-      secure: true,
-      sameSite: 'strict', // CSRF 방지
-      maxAge: HALF_YEAR,
-      expires: new Date(Date.now() + HALF_YEAR),
-    });
+    this.tokenService.setAccessTokenCookie(res, accessToken);
+    this.tokenService.setRefreshTokenCookie(res, refreshToken);
 
     res.redirect(302, '/');
   }
@@ -103,16 +75,7 @@ export class AuthController {
   @Post('logout')
   logout(@Res() res: Response) {
     // 쿠키 삭제 (옵션이 일치해야 삭제됨)
-    res.clearCookie('access_token', {
-      httpOnly: true,
-      secure: true,
-      sameSite: 'strict',
-    });
-    res.clearCookie('refresh_token', {
-      httpOnly: true,
-      secure: true,
-      sameSite: 'strict',
-    });
+    this.tokenService.clearCookies(res);
     return res.status(200).json({
       message: AuthResponseMessage.AUTH_LOGGED_OUT,
     });

apps/backend/src/auth/guards/jwt-auth.guard.ts

@@ -21,6 +21,8 @@ export class JwtAuthGuard implements CanActivate {
 
     // 쿠키가 아예 없는 경우는 로그인 안 된 상태로 간주
     if (!cookies || !cookies.accessToken || !cookies.refreshToken) {
+      // 관련된 쿠키 비워주기
+      this.tokenService.clearCookies(response);
       throw new LoginRequiredException();
     }
 
@@ -44,13 +46,7 @@ export class JwtAuthGuard implements CanActivate {
             await this.tokenService.refreshAccessToken(refreshToken);
 
           // 쿠키 업데이트
-          response.cookie('accessToken', newAccessToken, {
-            httpOnly: true,
-            secure: true,
-            sameSite: 'strict',
-            maxAge: 60 * 60 * 1000, // 1시간 (ms 단위)
-            expires: new Date(Date.now() + 60 * 60 * 1000), // 1시간 후 (Date 객체로 설정)
-          });
+          this.tokenService.setAccessTokenCookie(response, newAccessToken);
 
           // 요청 객체에 사용자 정보 추가
           const decodedNewToken = this.jwtService.verify(newAccessToken, {

apps/backend/src/auth/token/token.service.ts

@@ -4,6 +4,7 @@ import { Response } from 'express';
 
 const HOUR = 60 * 60;
 const FIVE_MONTHS = 5 * 30 * 24 * 60 * 60;
+const MS_HALF_YEAR = 6 * 30 * 24 * 60 * 60 * 1000;
 
 @Injectable()
 export class TokenService {
@@ -27,7 +28,7 @@ export class TokenService {
     try {
       // refreshToken을 검증한다
       const decoded = this.jwtService.verify(refreshToken, {
-        secret: process.env.JWT_REFRESH_SECRET,
+        secret: process.env.JWT_SECRET,
       });
 
       // 새로운 accessToken을 발급한다
@@ -37,6 +38,26 @@ export class TokenService {
     }
   }
 
+  setAccessTokenCookie(response: Response, accessToken: string): void {
+    response.cookie('accessToken', accessToken, {
+      httpOnly: true,
+      secure: true,
+      sameSite: 'strict',
+      maxAge: MS_HALF_YEAR,
+      expires: new Date(Date.now() + MS_HALF_YEAR),
+    });
+  }
+
+  setRefreshTokenCookie(response: Response, refreshToken: string): void {
+    response.cookie('refreshToken', refreshToken, {
+      httpOnly: true,
+      secure: true,
+      sameSite: 'strict',
+      maxAge: MS_HALF_YEAR,
+      expires: new Date(Date.now() + MS_HALF_YEAR),
+    });
+  }
+
   clearCookies(response: Response) {
     response.clearCookie('accessToken', {
       httpOnly: true,