[Feat] OAuth Spring Security 적용

.github/workflows/ci-pull-request.yml

@@ -3,19 +3,14 @@ name: CI - Pull request
 on:
   pull_request:
     branches: [ main ]
-  issue_comment:
-    types: [ created ]
 
 permissions:
   contents: read
-  issues: write
-  pull-requests: write
 
 jobs:
   auto-check:
     name: 자동 검증 (ktlint + test)
     runs-on: ubuntu-latest
-    if: ${{ github.event_name == 'pull_request' }}
     steps:
       - name: Repository 접근
         uses: actions/checkout@v4
@@ -43,66 +38,7 @@ jobs:
         run: ./gradlew ktlintCheck
 
       - name: 테스트 실행
-        run: ./gradlew test
+        run: ./gradlew :linktrip-application:test
 
-  build:
-    name: ready for launch (CI)
-    runs-on: ubuntu-latest
-    if: ${{ github.event.issue.pull_request && contains(github.event.comment.body, '빌드검증')}}
-    steps:
-      - name: Get PR branch
-        id: get_branch
-        run: |
-          PR_NUMBER=$(jq --raw-output .issue.number "$GITHUB_EVENT_PATH")
-          BRANCH_NAME=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
-            "https://api.github.com/repos/${{ github.repository }}/pulls/$PR_NUMBER" | \
-            jq -r .head.ref)
-          echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
-
-      - name: Repository 접근
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ steps.get_branch.outputs.branch }}
-
-      - name: JDK 21 셋팅
-        uses: actions/setup-java@v4
-        with:
-          java-version: '21'
-          distribution: 'temurin'
-
-      - name: Gradle 의존성 캐싱
-        uses: actions/cache@v4
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
-
-      - name: ktlint check
-        run: ./gradlew ktlintCheck
-
-      - name: 프로젝트 빌드 (테스트 포함)
-        run: ./gradlew build
-
-      - name: Set build status output
-        id: set_status
-        run: echo "build_status=${{ job.status }}" >> $GITHUB_OUTPUT
-
-      - name: Comment on Pull Request
-        if: always()
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const status = '${{ steps.set_status.outputs.build_status }}';
-            const message = status === 'success' ? '빌드 성공 \n‍🚀' : '❌❌ 빌드 실패 ❌❌\n 코드 확인이 필요해요😵‍💫';
-            github.rest.issues.createComment({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: context.issue.number,
-              body: `${message}`
-            });
+      - name: 프로젝트 빌드
+        run: ./gradlew build -x test

gradle/libs.versions.toml

@@ -29,6 +29,7 @@ kotlin-logging = { group = "io.github.microutils", name = "kotlin-logging-jvm",
 # Spring
 spring-web = { group = "org.springframework", name = "spring-web" }
 spring-transaction = { group = "org.springframework", name = "spring-tx" }
+spring-boot-starter-security = { group = "org.springframework.boot", name = "spring-boot-starter-security" }
 
 spring-boot-starter-autoconfigure = { group = "org.springframework.boot", name = "spring-boot-autoconfigure" }
 spring-boot-starter-web = { group = "org.springframework.boot", name = "spring-boot-starter-web" }
@@ -88,10 +89,10 @@ test-runtime = ["junit"]
 # 모듈별
 bootstrap = ["spring-boot-starter-web", "spring-boot-starter-actuator"]
 domain-application = ["spring-boot-docs", "spring-transaction", "kotlinx-coroutines-core"]
-adaptor-input-http = ["spring-boot-starter-web", "spring-boot-starter-aop", "spring-boot-docs", "spring-boot-starter-validation", "jjwt-api", "jjwt-impl", "jjwt-jackson"]
+adaptor-input-http = ["spring-boot-starter-web", "spring-boot-starter-aop", "spring-boot-docs", "spring-boot-starter-validation", "spring-boot-starter-security", "jjwt-api", "jjwt-impl", "jjwt-jackson"]
 adaptor-persistence-mysql = ["spring-boot-starter-jpa", "mysql"]
 adaptor-cache-redis = ["spring-boot-starter-cache", "spring-boot-starter-redis"]
 adaptor-cache-caffeine = ["spring-boot-starter-cache", "caffeine", "bucket4j-core"]
 adaptor-storage-aws = ["spring-web", "aws-sdk-s3"]
-adaptor-output-http = ["spring-web", "google-genai"]
+adaptor-output-http = ["spring-web", "google-genai", "jjwt-api", "jjwt-impl", "jjwt-jackson"]
 adaptor-input-batch = ["spring-boot-starter-batch"]

linktrip-application/src/main/kotlin/com/linktrip/application/domain/member/AuthService.kt

@@ -2,31 +2,40 @@ package com.linktrip.application.domain.member
 
 import com.linktrip.application.port.input.AuthUseCase
 import com.linktrip.application.port.input.AuthUseCase.AuthResult
+import com.linktrip.application.port.output.auth.OAuthPort
 import com.linktrip.application.port.output.auth.TokenProvider
-import com.linktrip.application.port.output.persistence.MemberPort
+import com.linktrip.common.exception.ExceptionCode
+import com.linktrip.common.exception.LinktripException
+import mu.KotlinLogging
 import org.springframework.stereotype.Service
-import org.springframework.transaction.annotation.Transactional
+
+private val logger = KotlinLogging.logger {}
 
 @Service
 class AuthService(
-    private val memberPort: MemberPort,
+    private val oAuthPorts: List<OAuthPort>,
+    private val memberService: MemberService,
     private val tokenProvider: TokenProvider,
 ) : AuthUseCase {
-    @Transactional
-    override fun authenticateBySerial(serialNumber: String): AuthResult {
-        val existingMember = memberPort.findBySerialNumber(serialNumber)
-
-        val member =
-            existingMember ?: memberPort.save(
-                Member.create(serialNumber = serialNumber),
-            )
+    override fun socialLogin(
+        providerType: ProviderType,
+        accessToken: String,
+    ): AuthResult {
+        val oAuthPort = getOAuthPort(providerType)
+        val oAuthInfo = oAuthPort.requestUserInfo(accessToken)
+        logger.info { "OAuth 사용자 정보 조회 완료: provider=$providerType" }
 
-        val accessToken = tokenProvider.create(member.id)
+        val result = memberService.findOrCreateByOAuth(providerType, oAuthInfo)
+        val token = tokenProvider.create(result.member.id)
 
         return AuthResult(
-            memberId = member.id,
-            accessToken = accessToken,
-            isNewMember = existingMember == null,
+            memberId = result.member.id,
+            accessToken = token,
+            isNewMember = result.isNewMember,
         )
     }
+
+    private fun getOAuthPort(providerType: ProviderType): OAuthPort =
+        oAuthPorts.find { it.getProviderType() == providerType }
+            ?: throw LinktripException(ExceptionCode.BAD_REQUEST_OAUTH_PROVIDER, providerType.name)
 }

linktrip-application/src/main/kotlin/com/linktrip/application/domain/member/Member.kt

@@ -5,15 +5,23 @@ import java.time.LocalDateTime
 
 data class Member(
     val id: String,
-    val serialNumber: String,
+    val email: String?,
+    val providerType: ProviderType,
+    val providerId: String,
     val createdAt: LocalDateTime = LocalDateTime.now(),
     val updatedAt: LocalDateTime = LocalDateTime.now(),
 ) {
     companion object {
-        fun create(serialNumber: String): Member =
+        fun create(
+            email: String?,
+            providerType: ProviderType,
+            providerId: String,
+        ): Member =
             Member(
                 id = IdGenerator.generate(),
-                serialNumber = serialNumber,
+                email = email,
+                providerType = providerType,
+                providerId = providerId,
             )
     }
 }

linktrip-application/src/main/kotlin/com/linktrip/application/domain/member/MemberService.kt

@@ -0,0 +1,40 @@
+package com.linktrip.application.domain.member
+
+import com.linktrip.application.port.output.auth.OAuthInfo
+import com.linktrip.application.port.output.persistence.MemberPort
+import mu.KotlinLogging
+import org.springframework.stereotype.Service
+import org.springframework.transaction.annotation.Transactional
+
+private val logger = KotlinLogging.logger {}
+
+@Service
+class MemberService(
+    private val memberPort: MemberPort,
+) {
+    @Transactional
+    fun findOrCreateByOAuth(
+        providerType: ProviderType,
+        oAuthInfo: OAuthInfo,
+    ): MemberLoginResult {
+        memberPort.findByProviderTypeAndProviderId(providerType, oAuthInfo.providerId)
+            ?.let { return MemberLoginResult(member = it, isNewMember = false) }
+
+        val newMember =
+            memberPort.save(
+                Member.create(
+                    email = oAuthInfo.email,
+                    providerType = providerType,
+                    providerId = oAuthInfo.providerId,
+                ),
+            )
+
+        logger.info { "신규 회원 생성: memberId=${newMember.id}, provider=$providerType" }
+        return MemberLoginResult(member = newMember, isNewMember = true)
+    }
+
+    data class MemberLoginResult(
+        val member: Member,
+        val isNewMember: Boolean,
+    )
+}

linktrip-application/src/main/kotlin/com/linktrip/application/domain/member/ProviderType.kt

@@ -0,0 +1,7 @@
+package com.linktrip.application.domain.member
+
+enum class ProviderType {
+    KAKAO,
+    GOOGLE,
+    APPLE,
+}

linktrip-application/src/main/kotlin/com/linktrip/application/port/input/AuthUseCase.kt

@@ -1,7 +1,12 @@
 package com.linktrip.application.port.input
 
+import com.linktrip.application.domain.member.ProviderType
+
 interface AuthUseCase {
-    fun authenticateBySerial(serialNumber: String): AuthResult
+    fun socialLogin(
+        providerType: ProviderType,
+        accessToken: String,
+    ): AuthResult
 
     data class AuthResult(
         val memberId: String,

linktrip-application/src/main/kotlin/com/linktrip/application/port/output/auth/OAuthInfo.kt

@@ -0,0 +1,9 @@
+package com.linktrip.application.port.output.auth
+
+import com.linktrip.application.domain.member.ProviderType
+
+data class OAuthInfo(
+    val providerType: ProviderType,
+    val providerId: String,
+    val email: String?,
+)

linktrip-application/src/main/kotlin/com/linktrip/application/port/output/auth/OAuthPort.kt

@@ -0,0 +1,9 @@
+package com.linktrip.application.port.output.auth
+
+import com.linktrip.application.domain.member.ProviderType
+
+interface OAuthPort {
+    fun getProviderType(): ProviderType
+
+    fun requestUserInfo(accessToken: String): OAuthInfo
+}

linktrip-application/src/main/kotlin/com/linktrip/application/port/output/persistence/MemberPort.kt

@@ -1,9 +1,13 @@
 package com.linktrip.application.port.output.persistence
 
 import com.linktrip.application.domain.member.Member
+import com.linktrip.application.domain.member.ProviderType
 
 interface MemberPort {
-    fun findBySerialNumber(serialNumber: String): Member?
+    fun findByProviderTypeAndProviderId(
+        providerType: ProviderType,
+        providerId: String,
+    ): Member?
 
     fun save(member: Member): Member
 }