fix: 소나큐브 에외 설정 #102

- SecurityConfig.java 소나큐브 예외 설정

Author: HYEONSIKOH

chat/src/main/java/org/example/soundlinkchat_java/global/config/SecurityConfig.java

@@ -1,6 +1,5 @@
 package org.example.soundlinkchat_java.global.config;
 
-import jakarta.servlet.ServletRequest;
 import lombok.RequiredArgsConstructor;
 import org.example.soundlinkchat_java.global.auth.JwtAuthenticationFilter;
 import org.example.soundlinkchat_java.global.auth.JwtProvider;
@@ -9,22 +8,26 @@
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 
 @Configuration
 @EnableWebSecurity
 @RequiredArgsConstructor
+@SuppressWarnings("squid:S4502")
 public class SecurityConfig {
-
     private final JwtProvider jwtProvider;
 
     @Bean
-    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+    public BCryptPasswordEncoder passwordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception{
         http
-                .csrf(csrf -> csrf
-                        .requireCsrfProtectionMatcher(ServletRequest::isSecure) // HTTPS만 CSRF 보호 적용
-                )
+                .csrf(AbstractHttpConfigurer::disable)
                 .authorizeHttpRequests(auth -> auth
 //                        .requestMatchers("/api/**").permitAll()
 //                        .requestMatchers("/swagger-ui/**").permitAll()
@@ -36,7 +39,6 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 // JwtAuthenticationFilter 추가
                 .addFilterBefore(new JwtAuthenticationFilter(jwtProvider), UsernamePasswordAuthenticationFilter.class);
 
-
         return http.build();
     }
-}
+}

default/src/main/java/org/dfbf/soundlink/global/config/SecurityConfig.java

@@ -17,6 +17,7 @@
 @Configuration
 @EnableWebSecurity
 @RequiredArgsConstructor
+@SuppressWarnings("squid:S4502")
 public class SecurityConfig {
     private final JwtProvider jwtProvider;
 
@@ -28,9 +29,7 @@ public BCryptPasswordEncoder passwordEncoder() {
     @Bean
     public SecurityFilterChain filterChain(HttpSecurity http) throws Exception{
         http
-                .csrf(csrf -> csrf
-                        .requireCsrfProtectionMatcher(ServletRequest::isSecure) // HTTPS만 CSRF 보호 적용
-                )
+                .csrf(AbstractHttpConfigurer::disable)
                 .authorizeHttpRequests(auth -> auth
 //                        .requestMatchers("/api/**").permitAll()
 //                        .requestMatchers("/swagger-ui/**").permitAll()