100-hours-a-week
diff --git a/‎.github/workflows/cicd-bigbang-dev.yml‎
Lines changed: 89 additions & 0 deletions b/‎.github/workflows/cicd-bigbang-dev.yml‎
Lines changed: 89 additions & 0 deletions
diff --git a/‎.gitignore‎
Lines changed: 3 additions & 9 deletions b/‎.gitignore‎
Lines changed: 3 additions & 9 deletions
diff --git a/‎build.gradle‎
Lines changed: 36 additions & 1 deletion b/‎build.gradle‎
Lines changed: 36 additions & 1 deletion
diff --git a/‎db/init-data.sql‎
Lines changed: 13 additions & 0 deletions b/‎db/init-data.sql‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎src/main/java/com/moa/moa_server/config/RestTemplateConfig.java‎
Lines changed: 14 additions & 0 deletions b/‎src/main/java/com/moa/moa_server/config/RestTemplateConfig.java‎
Lines changed: 14 additions & 0 deletions
diff --git a/‎src/main/java/com/moa/moa_server/config/jpa/JpaAuditingConfig.java‎
Lines changed: 9 additions & 0 deletions b/‎src/main/java/com/moa/moa_server/config/jpa/JpaAuditingConfig.java‎
Lines changed: 9 additions & 0 deletions
diff --git a/‎src/main/java/com/moa/moa_server/config/querydsl/QuerydslConfig.java‎
Lines changed: 19 additions & 0 deletions b/‎src/main/java/com/moa/moa_server/config/querydsl/QuerydslConfig.java‎
Lines changed: 19 additions & 0 deletions
diff --git a/‎src/main/java/com/moa/moa_server/config/security/CustomAuthenticationEntryPoint.java‎
Lines changed: 32 additions & 0 deletions b/‎src/main/java/com/moa/moa_server/config/security/CustomAuthenticationEntryPoint.java‎
Lines changed: 32 additions & 0 deletions
diff --git a/‎src/main/java/com/moa/moa_server/config/security/DevSecurityConfig.java‎
Lines changed: 76 additions & 0 deletions b/‎src/main/java/com/moa/moa_server/config/security/DevSecurityConfig.java‎
Lines changed: 76 additions & 0 deletions
diff --git a/‎src/main/java/com/moa/moa_server/config/security/JwtAuthenticationFilter.java‎
Lines changed: 64 additions & 0 deletions b/‎src/main/java/com/moa/moa_server/config/security/JwtAuthenticationFilter.java‎
Lines changed: 64 additions & 0 deletions
@@ -0,0 +1,89 @@
+name: SpringBoot BigBang CI/CD - Dev V1
+
+on:
+  push:
+    branches:
+      - develop
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    environment: dev
+
+    steps:
+      - name: 🐵 Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: 🐵 Set up JDK 21
+        uses: actions/setup-java@v3
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+
+      - name: 🐵 Grant execute permission to Gradle
+        run: chmod +x gradlew
+
+      - name: 🐵 Build with Gradle (Without Tests)
+        run: |
+          echo "🐵 Building JAR without tests..."
+          ./gradlew clean build -x test || { echo '🚨 Build failed!'; exit 1; }
+          echo "✅ Build completed successfully!"
+
+      - name: 🐵 Save SSH Key
+        run: |
+          echo "🐵 Saving SSH key..."
+          echo "${{ secrets.GCP_CICD_SSH_KEY }}" > key.pem
+          chmod 600 key.pem
+          echo "✅ SSH key saved!"
+
+      - name: 🐵 Deploy to GCP VM
+        run: |
+          echo "🐵 Sending JAR to GCP..."
+
+          scp -i key.pem -o StrictHostKeyChecking=no \
+            build/libs/moa-server-0.0.1-SNAPSHOT.jar \
+            cicd@${{ secrets.GCP_BE_DEV_HOST }}:/home/cicd/moa-server-0.0.1-SNAPSHOT.jar || {
+              echo "🚨 Failed to upload JAR!"; exit 1;
+            }
+          echo "✅ JAR uploaded successfully!"
+
+          echo "🐵 Writing .env on remote server..."
+          ssh -i key.pem -o StrictHostKeyChecking=no cicd@${{ secrets.GCP_BE_DEV_HOST }} << 'EOF'
+            cat <<EENV | sudo tee /home/cicd/moa-backend.env > /dev/null
+          SPRING_PROFILES_ACTIVE=${{ secrets.SPRING_PROFILE }}
+          SPRING_DATASOURCE_URL=${{ secrets.DB_URL }}
+          SPRING_DATASOURCE_USERNAME=${{ secrets.DB_USERNAME }}
+          SPRING_DATASOURCE_PASSWORD=${{ secrets.DB_PASSWORD }}
+          JWT_SECRET=${{ secrets.JWT_SECRET }}
+          FRONTEND_URL=${{ secrets.FRONTEND_URL }}
+          AI_SERVER_URL=${{ secrets.AI_SERVER_URL }}
+          KAKAO_CLIENT_ID=${{ secrets.KAKAO_CLIENT_ID }}
+          KAKAO_ADMIN_KEY=${{ secrets.KAKAO_ADMIN_KEY }}
+          EENV
+            sudo chmod 600 /home/cicd/moa-backend.env
+            sudo chown cicd:cicd /home/cicd/moa-backend.env
+            echo "✅ .env file written and secured!"
+          EOF
+
+      - name: 🐵 Restart systemd Service
+        run: |
+          echo "🐵 Restarting Spring Boot systemd service..."
+          ssh -i key.pem -o StrictHostKeyChecking=no cicd@${{ secrets.GCP_BE_DEV_HOST }} << 'EOF'
+            echo "🐵 Running daemon-reload and restarting moa-backend..."
+            sudo systemctl daemon-reload || { echo "🚨 daemon-reload failed!"; exit 1; }
+            sudo systemctl restart moa-backend || { echo "🚨 Failed to restart service!"; exit 1; }
+
+            sleep 7
+            echo "✅ Service restarted successfully!"
+
+            echo "🐵 Checking process..."
+            if ! sudo pgrep -f 'java -jar' > /dev/null; then
+              echo "🚨 Spring Boot process not running!"
+              exit 1
+            fi
+
+            echo "✅ Spring Boot process is running!"
+
+            echo "🐵 Tail last 20 lines of server.log:"
+            sudo tail -n 20 /home/cicd/server.log || echo "🚨 Failed to read server.log"
+          EOF
@@ -26,12 +26,6 @@ out/
 !**/src/main/**/out/
 !**/src/test/**/out/
 
-### NetBeans ###
-/nbproject/private/
-/nbbuild/
-/dist/
-/nbdist/
-/.nb-gradle/
-
-### VS Code ###
-.vscode/
+*.env.*
+build-local.sh
+run-local.sh
@@ -27,16 +27,51 @@ dependencies {
 	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
 	implementation 'org.springframework.boot:spring-boot-starter-security'
 	implementation 'org.springframework.boot:spring-boot-starter-web'
-	implementation 'com.mysql:mysql-connector-j:8.0.33'
+	implementation 'com.mysql:mysql-connector-j'
+	implementation 'io.jsonwebtoken:jjwt-api:0.12.6'
+	implementation 'org.apache.commons:commons-lang3:3.12.0'
+	runtimeOnly 'io.jsonwebtoken:jjwt-impl:0.12.6'
+	runtimeOnly 'io.jsonwebtoken:jjwt-jackson:0.12.6'
 	compileOnly 'org.projectlombok:lombok'
 	developmentOnly 'org.springframework.boot:spring-boot-devtools'
 	runtimeOnly 'com.mysql:mysql-connector-j'
 	annotationProcessor 'org.projectlombok:lombok'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	testImplementation 'org.springframework.security:spring-security-test'
 	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+
+	// querydsl 의존성
+	implementation "com.querydsl:querydsl-core:5.1.0"
+	implementation "com.querydsl:querydsl-jpa:5.1.0:jakarta"
+
+	annotationProcessor "com.querydsl:querydsl-apt:5.1.0:jakarta"
+	annotationProcessor 'jakarta.persistence:jakarta.persistence-api'
+	annotationProcessor 'jakarta.annotation:jakarta.annotation-api'
+
+//	testImplementation 'org.springframework.boot:spring-boot-starter-test'
+//	testImplementation 'jakarta.persistence:jakarta.persistence-api'
+//	testImplementation 'com.querydsl:querydsl-jpa:5.1.0:jakarta'
 }
 
 tasks.named('test') {
 	useJUnitPlatform()
 }
+
+// QueryDSL Q파일 생성용
+def querydslDir = layout.buildDirectory.dir("generated/querydsl").get().asFile
+
+sourceSets {
+	main {
+		java {
+			srcDir querydslDir
+		}
+	}
+}
+
+tasks.withType(JavaCompile).configureEach {
+	options.generatedSourceOutputDirectory.set(querydslDir)
+}
+
+compileJava {
+	options.annotationProcessorPath = configurations.annotationProcessor
+}
@@ -0,0 +1,13 @@
+-- 시스템 유저
+INSERT INTO `user` (id, nickname, email, role, user_status, last_active_at, created_at, updated_at)
+SELECT 1, 'SYSTEM', 'system@moa.com', 'ADMIN', 'ACTIVE', NOW(), NOW(), NOW()
+WHERE NOT EXISTS (
+    SELECT 1 FROM `user` WHERE id = 1
+);
+
+-- 공개 그룹
+INSERT INTO `group` (id, user_id, name, description, invite_code, created_at, updated_at)
+SELECT 1, 1, '공개', '모든 사용자가 속한 공개 투표 그룹입니다.', 'public', NOW(), NOW()
+WHERE NOT EXISTS (
+    SELECT 1 FROM `group` WHERE id = 1
+);
@@ -0,0 +1,14 @@
+package com.moa.moa_server.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.client.RestTemplate;
+
+@Configuration
+public class RestTemplateConfig {
+
+    @Bean
+    public RestTemplate restTemplate() {
+        return new RestTemplate();
+    }
+}
@@ -0,0 +1,9 @@
+package com.moa.moa_server.config.jpa;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.data.jpa.repository.config.EnableJpaAuditing;
+
+@Configuration
+@EnableJpaAuditing
+public class JpaAuditingConfig {
+}
@@ -0,0 +1,19 @@
+package com.moa.moa_server.config.querydsl;
+
+import com.querydsl.jpa.impl.JPAQueryFactory;
+import jakarta.persistence.EntityManager;
+import jakarta.persistence.PersistenceContext;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration
+public class QuerydslConfig {
+
+    @PersistenceContext
+    private EntityManager em;
+
+    @Bean
+    public JPAQueryFactory jpaQueryFactory() {
+        return new JPAQueryFactory(em);
+    }
+}
@@ -0,0 +1,32 @@
+package com.moa.moa_server.config.security;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.moa.moa_server.domain.global.dto.ApiResponse;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.AuthenticationEntryPoint;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+
+@Component
+@RequiredArgsConstructor
+public class CustomAuthenticationEntryPoint implements AuthenticationEntryPoint {
+
+    private final ObjectMapper objectMapper;
+
+    @Override
+    public void commence(HttpServletRequest request,
+                         HttpServletResponse response,
+                         AuthenticationException authException) throws IOException {
+
+        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401
+        response.setContentType("application/json");
+        response.setCharacterEncoding("UTF-8");
+
+        ApiResponse apiResponse = new ApiResponse("INVALID_TOKEN", null);
+        response.getWriter().write(objectMapper.writeValueAsString(apiResponse));
+    }
+}
@@ -0,0 +1,76 @@
+package com.moa.moa_server.config.security;
+
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Profile;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.CorsConfigurationSource;
+import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
+
+import java.util.List;
+
+import static com.moa.moa_server.config.security.SecurityConstants.ALLOWED_URLS;
+
+@RequiredArgsConstructor
+@EnableWebSecurity
+@Configuration
+@Profile("dev")
+public class DevSecurityConfig {
+
+    @Value("${frontend.url}")
+    private String frontendUrl;
+
+    private final JwtAuthenticationFilter jwtAuthenticationFilter;
+    private final CustomAuthenticationEntryPoint customAuthenticationEntryPoint;
+
+    @Bean
+    public SecurityFilterChain securityFilterChain(HttpSecurity http, CorsConfigurationSource corsConfigurationSource) throws Exception {
+        http
+                .csrf(AbstractHttpConfigurer::disable)
+                .cors(cors -> cors.configurationSource(corsConfigurationSource))
+                .httpBasic(AbstractHttpConfigurer::disable)
+                .formLogin(AbstractHttpConfigurer::disable)
+                .exceptionHandling(ex -> ex.authenticationEntryPoint(customAuthenticationEntryPoint))
+                .authorizeHttpRequests(auth -> auth
+                        .requestMatchers(HttpMethod.GET, "/api/v1/votes").permitAll()
+                        .requestMatchers(ALLOWED_URLS).permitAll()
+                        .anyRequest().authenticated()
+                )
+                .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
+                .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
+
+        return http.build();
+    }
+
+    /**
+     * CORS 정책을 설정하고, 이를 Spring Security에 등록하는 Bean을 반환
+     */
+    @Bean
+    public CorsConfigurationSource corsConfigurationSource() {
+        CorsConfiguration config = new CorsConfiguration();
+
+        config.setAllowedOriginPatterns(List.of(frontendUrl, "http://localhost:5173")); // 요청을 허용할 출처(origin) 패턴을 설정
+        config.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS")); // 허용할 HTTP 메서드 목록 지정
+        config.setAllowedHeaders(List.of("*")); // 모든 요청 헤더 허용
+        config.setAllowCredentials(true); // 인증 정보를 포함한 요청(Cookie 등)을 허용
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); // 경로 별로 다른 CORS 설정을 적용할 수 있도록 지원하는 구현체
+        source.registerCorsConfiguration("/**", config); // 모든 경로에 위에서 설정한 CORS 정책을 적용
+        return source;
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoder() { return new BCryptPasswordEncoder(); }
+
+}
@@ -0,0 +1,64 @@
+package com.moa.moa_server.config.security;
+
+import com.moa.moa_server.domain.auth.handler.AuthException;
+import com.moa.moa_server.domain.auth.service.JwtTokenService;
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.authentication.AuthenticationCredentialsNotFoundException;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
+import org.springframework.stereotype.Component;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import java.io.IOException;
+import java.util.Optional;
+
+@RequiredArgsConstructor
+@Component
+public class JwtAuthenticationFilter extends OncePerRequestFilter {
+
+    private final JwtTokenService jwtTokenService; // 토큰 유효성 검증 및 userId 추출
+
+    @Override
+    protected void doFilterInternal(HttpServletRequest request,
+                                    HttpServletResponse response,
+                                    FilterChain filterChain)
+            throws ServletException, IOException {
+
+        try {
+            // 헤더에서 토큰 추출
+            Optional<String> tokenOptional = extractToken(request);
+
+            if (tokenOptional.isPresent()) {
+                // 토큰 검증 및 userId 추출
+                String token = tokenOptional.get();
+                Long userId = jwtTokenService.validateAndExtractUserId(token);
+
+                // 인증 객체 생성
+                UsernamePasswordAuthenticationToken authentication =
+                        new UsernamePasswordAuthenticationToken(userId, null, null);
+                authentication.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
+
+                // SecurityContext에 저장
+                SecurityContextHolder.getContext().setAuthentication(authentication);
+            }
+
+            filterChain.doFilter(request, response);
+        } catch (AuthException e) {
+            // AuthException을 AuthenticationException으로 감싸서 Spring Security로 위임
+            throw new AuthenticationCredentialsNotFoundException(e.getCode(), e);
+        }
+    }
+
+    private Optional<String> extractToken(HttpServletRequest request) {
+        String authHeader = request.getHeader("Authorization");
+        if (authHeader != null && authHeader.startsWith("Bearer ")) {
+            return Optional.of(authHeader.substring(7));
+        }
+        return Optional.empty();
+    }
+}