feat: 비회원 로그인 jwt 적용

Author: min0962

src/main/java/com/oronaminc/join/member/security/AuthController.java

@@ -17,17 +17,11 @@
 import jakarta.servlet.http.HttpServletResponse;
 import jakarta.servlet.http.HttpSession;
 import jakarta.validation.Valid;
-import java.util.List;
 import java.util.Map;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.HttpStatus;
-import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
-import org.springframework.security.core.Authentication;
 import org.springframework.security.core.annotation.AuthenticationPrincipal;
-import org.springframework.security.core.authority.SimpleGrantedAuthority;
-import org.springframework.security.core.context.SecurityContext;
 import org.springframework.security.core.context.SecurityContextHolder;
-import org.springframework.security.web.context.HttpSessionSecurityContextRepository;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
@@ -64,31 +58,24 @@ public Map<String, AuthTokenResponse> kakaoLogin(
 
     @Operation(
         summary = "비회원 로그인",
-        description = "닉네임을 입력하면 비회원 세션이 생성되고 인증이 설정됩니다. 이후 모든 요청에 세션 인증이 적용됩니다.",
         responses = {
             @ApiResponse(responseCode = "201", description = "비회원 로그인 성공"),
             @ApiResponse(responseCode = "400", description = "닉네임 누락 또는 유효성 검증 실패")
         }
     )
     @PostMapping("/guest")
     @ResponseStatus(HttpStatus.CREATED)
-    public SessionInfoResponse guestLogin(@RequestBody @Valid GuestLoginRequest guestLoginRequest,
-        HttpServletRequest request) {
-        MemberDetails guest = authService.loadGuest(guestLoginRequest);
+    public Map<String, AuthTokenResponse> guestLogin(
+        @RequestBody @Valid GuestLoginRequest guestLoginRequest,
+        HttpServletResponse response) {
+        LoginResponse loginResponse = authService.loadGuest(guestLoginRequest);
 
-        Authentication authentication = new UsernamePasswordAuthenticationToken(
-            guest, null, List.of(new SimpleGrantedAuthority(guest.getRole()))
-        );
-
-        SecurityContext context = SecurityContextHolder.createEmptyContext();
-        context.setAuthentication(authentication);
-        SecurityContextHolder.setContext(context);
+        String refreshToken = loginResponse.refreshToken();
 
-        request.getSession(true)
-            .setAttribute(HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY,
-                context);
+        JwtUtils.addRefreshTokenCookie(response, refreshToken,
+            loginResponse.refreshTokenExpiresIn());
 
-        return toSessionInfoResponse(guest);
+        return Map.of("token", loginResponse.authTokenResponse());
     }
 
     @Operation(

src/main/java/com/oronaminc/join/member/security/AuthService.java

@@ -1,7 +1,6 @@
 package com.oronaminc.join.member.security;
 
 import static com.oronaminc.join.member.util.MemberMapper.toGuestMember;
-import static com.oronaminc.join.member.util.MemberMapper.toGuestMemberDetails;
 
 import com.oronaminc.join.member.dao.MemberRepository;
 import com.oronaminc.join.member.domain.Member;
@@ -72,13 +71,21 @@ public class AuthService extends DefaultOAuth2UserService {
     // }
 
     @Transactional
-    public MemberDetails loadGuest(GuestLoginRequest guestLoginRequest) {
+    public LoginResponse loadGuest(GuestLoginRequest guestLoginRequest) {
         Member guest = toGuestMember(guestLoginRequest);
 
         memberRepository.save(guest);
         guest.registerGuest();
 
-        return toGuestMemberDetails(guest);
+        TokenPair tokenPair = jwtTokenProvider.generateTokenPair(
+            new JwtMemberInfo(guest.getId(), guest.getNickname(), guest.getMemberType()));
+
+        AuthTokenResponse authTokenResponse = new AuthTokenResponse(tokenPair.accessToken(),
+            tokenPair.accessTokenExpiresIn(), guest.getId(),
+            guest.getNickname(), guest.getMemberType());
+
+        return new LoginResponse(authTokenResponse, tokenPair.refreshToken(),
+            tokenPair.refreshTokenExpiresIn());
     }
 
     @Transactional