✨ [feat] 관리자 로그인/로그아웃, 인증 정보 조회 기능 (#55)

* ✨ feat: 관리자 form 로그인, 로그아웃 기능

* 🚚 rename: 로그아웃 성공 핸들러 이름 변경

* ✨ feat: 사용자/관리자 인증 정보 조회 기능

* 🐛 fix: 관리자 로그인 성공 시, last_login 업데이트

* chore: Java 스타일 수정

* 🚚 rename: dto 클래스 이름 변경

* chore: Java 스타일 수정

* 🐛 fix: CORS 설정 추가

* chore: Java 스타일 수정

* 🐛 fix: OAuth 인증 성공 시 redirect 경로 지정

* chore: Java 스타일 수정

* ♻️ refactor: CORS 요청 경로 모두 허용

* chore: Java 스타일 수정

* 🐛 fix: OAuth 인증 후 리다이렉트 경로 수정

---------

Co-authored-by: github-actions <>

Author: jiwon1217

backend/src/main/java/io/f1/backend/domain/admin/app/AdminDetailService.java

@@ -0,0 +1,30 @@
+package io.f1.backend.domain.admin.app;
+
+import io.f1.backend.domain.admin.dao.AdminRepository;
+import io.f1.backend.domain.admin.dto.AdminPrincipal;
+import io.f1.backend.domain.admin.entity.Admin;
+
+import lombok.RequiredArgsConstructor;
+
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+@Service
+@RequiredArgsConstructor
+public class AdminDetailService implements UserDetailsService {
+
+    private final AdminRepository adminRepository;
+
+    @Override
+    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
+        Admin admin =
+                adminRepository
+                        .findByUsername(username)
+                        .orElseThrow(
+                                () -> new UsernameNotFoundException("E404007: 존재하지 않는 관리자입니다."));
+        // 프론트엔드로 내려가지 않는 예외
+        return new AdminPrincipal(admin);
+    }
+}

backend/src/main/java/io/f1/backend/domain/admin/app/handler/AdminLoginFailureHandler.java

@@ -0,0 +1,38 @@
+package io.f1.backend.domain.admin.app.handler;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+
+import io.f1.backend.domain.admin.dto.AdminLoginFailResponse;
+
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+import lombok.RequiredArgsConstructor;
+
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.authentication.AuthenticationFailureHandler;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+
+@Component
+@RequiredArgsConstructor
+public class AdminLoginFailureHandler implements AuthenticationFailureHandler {
+
+    private final ObjectMapper objectMapper;
+
+    @Override
+    public void onAuthenticationFailure(
+            HttpServletRequest request,
+            HttpServletResponse response,
+            AuthenticationException exception)
+            throws IOException {
+        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401
+        response.setContentType("application/json;charset=UTF-8");
+
+        AdminLoginFailResponse errorResponse =
+                new AdminLoginFailResponse("E401005", "아이디 또는 비밀번호가 일치하지 않습니다.");
+
+        response.getWriter().write(objectMapper.writeValueAsString(errorResponse));
+    }
+}

backend/src/main/java/io/f1/backend/domain/admin/app/handler/AdminLoginSuccessHandler.java

@@ -0,0 +1,47 @@
+package io.f1.backend.domain.admin.app.handler;
+
+import static io.f1.backend.domain.user.constants.SessionKeys.ADMIN;
+import static io.f1.backend.global.util.SecurityUtils.getCurrentAdminPrincipal;
+
+import io.f1.backend.domain.admin.dao.AdminRepository;
+import io.f1.backend.domain.admin.dto.AdminPrincipal;
+import io.f1.backend.domain.admin.entity.Admin;
+
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import jakarta.servlet.http.HttpSession;
+
+import lombok.RequiredArgsConstructor;
+
+import org.springframework.security.core.Authentication;
+import org.springframework.security.web.authentication.AuthenticationSuccessHandler;
+import org.springframework.stereotype.Component;
+
+import java.time.LocalDateTime;
+
+@Component
+@RequiredArgsConstructor
+public class AdminLoginSuccessHandler implements AuthenticationSuccessHandler {
+
+    private final AdminRepository adminRepository;
+    private final HttpSession httpSession;
+
+    @Override
+    public void onAuthenticationSuccess(
+            HttpServletRequest request,
+            HttpServletResponse response,
+            Authentication authentication) {
+
+        AdminPrincipal principal = getCurrentAdminPrincipal();
+        Admin admin =
+                adminRepository
+                        .findByUsername(principal.getUsername())
+                        .orElseThrow(() -> new RuntimeException("E404007: 존재하지 않는 관리자입니다."));
+
+        admin.updateLastLogin(LocalDateTime.now());
+        adminRepository.save(admin);
+        httpSession.setAttribute(ADMIN, principal.getAuthenticationAdmin());
+
+        response.setStatus(HttpServletResponse.SC_OK); // 200
+    }
+}

backend/src/main/java/io/f1/backend/domain/admin/dao/AdminRepository.java

@@ -0,0 +1,14 @@
+package io.f1.backend.domain.admin.dao;
+
+import io.f1.backend.domain.admin.entity.Admin;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+
+import java.util.Optional;
+
+@Repository
+public interface AdminRepository extends JpaRepository<Admin, Long> {
+
+    Optional<Admin> findByUsername(String username);
+}

backend/src/main/java/io/f1/backend/domain/admin/dto/AdminLoginFailResponse.java

@@ -0,0 +1,11 @@
+package io.f1.backend.domain.admin.dto;
+
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+
+@Getter
+@AllArgsConstructor
+public class AdminLoginFailResponse {
+    private String code;
+    private String message;
+}

backend/src/main/java/io/f1/backend/domain/admin/dto/AdminPrincipal.java

@@ -0,0 +1,59 @@
+package io.f1.backend.domain.admin.dto;
+
+import io.f1.backend.domain.admin.entity.Admin;
+
+import lombok.Getter;
+
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+import java.util.Collections;
+
+@Getter
+public class AdminPrincipal implements UserDetails {
+
+    public static final String ROLE_ADMIN = "ROLE_ADMIN";
+    private final AuthenticationAdmin authenticationAdmin;
+    private final String password;
+
+    public AdminPrincipal(Admin admin) {
+        this.authenticationAdmin = AuthenticationAdmin.from(admin);
+        this.password = admin.getPassword();
+    }
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        return Collections.singleton(() -> ROLE_ADMIN);
+    }
+
+    @Override
+    public String getPassword() {
+        return this.password;
+    }
+
+    @Override
+    public String getUsername() {
+        return authenticationAdmin.username();
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return true;
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return true;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return true;
+    }
+}

backend/src/main/java/io/f1/backend/domain/admin/dto/AuthenticationAdmin.java

@@ -0,0 +1,10 @@
+package io.f1.backend.domain.admin.dto;
+
+import io.f1.backend.domain.admin.entity.Admin;
+
+public record AuthenticationAdmin(Long adminId, String username) {
+
+    public static AuthenticationAdmin from(Admin admin) {
+        return new AuthenticationAdmin(admin.getId(), admin.getUsername());
+    }
+}

backend/src/main/java/io/f1/backend/domain/admin/entity/Admin.java

@@ -8,9 +8,12 @@
 import jakarta.persistence.GenerationType;
 import jakarta.persistence.Id;
 
+import lombok.Getter;
+
 import java.time.LocalDateTime;
 
 @Entity
+@Getter
 public class Admin extends BaseEntity {
 
     @Id
@@ -25,4 +28,8 @@ public class Admin extends BaseEntity {
 
     @Column(nullable = false)
     private LocalDateTime lastLogin;
+
+    public void updateLastLogin(LocalDateTime lastLogin) {
+        this.lastLogin = lastLogin;
+    }
 }

backend/src/main/java/io/f1/backend/domain/auth/api/AuthController.java

@@ -0,0 +1,32 @@
+package io.f1.backend.domain.auth.api;
+
+import static io.f1.backend.global.util.SecurityUtils.getAuthentication;
+
+import io.f1.backend.domain.admin.dto.AdminPrincipal;
+import io.f1.backend.domain.auth.dto.CurrentUserAndAdminResponse;
+import io.f1.backend.domain.user.dto.UserPrincipal;
+
+import lombok.RequiredArgsConstructor;
+
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.Authentication;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/auth")
+@RequiredArgsConstructor
+public class AuthController {
+
+    @GetMapping("/me")
+    public ResponseEntity<?> getCurrentUserOrAdmin() {
+        Authentication authentication = getAuthentication();
+        Object principal = authentication.getPrincipal();
+
+        if (principal instanceof UserPrincipal userPrincipal) {
+            return ResponseEntity.ok(CurrentUserAndAdminResponse.from(userPrincipal));
+        }
+        return ResponseEntity.ok(CurrentUserAndAdminResponse.from((AdminPrincipal) principal));
+    }
+}

backend/src/main/java/io/f1/backend/domain/auth/dto/CurrentUserAndAdminResponse.java

@@ -0,0 +1,21 @@
+package io.f1.backend.domain.auth.dto;
+
+import io.f1.backend.domain.admin.dto.AdminPrincipal;
+import io.f1.backend.domain.user.dto.UserPrincipal;
+
+public record CurrentUserAndAdminResponse(Long id, String name, String role) {
+
+    public static CurrentUserAndAdminResponse from(UserPrincipal userPrincipal) {
+        return new CurrentUserAndAdminResponse(
+                userPrincipal.getUserId(),
+                userPrincipal.getUserNickname(),
+                UserPrincipal.ROLE_USER);
+    }
+
+    public static CurrentUserAndAdminResponse from(AdminPrincipal adminPrincipal) {
+        return new CurrentUserAndAdminResponse(
+                adminPrincipal.getAuthenticationAdmin().adminId(),
+                adminPrincipal.getUsername(),
+                AdminPrincipal.ROLE_ADMIN);
+    }
+}