Merge pull request #22 from HandTris/#20

회원 관리 기능

build.gradle

@@ -45,6 +45,10 @@ dependencies {
     implementation group: 'org.webjars', name: 'sockjs-client', version: '1.5.1'
     implementation group: 'org.webjars', name: 'stomp-websocket', version: '2.3.4'
 
+    // Security
+    implementation 'org.springframework.boot:spring-boot-starter-security'
+    testImplementation 'org.springframework.security:spring-security-test'
+
 }
 
 tasks.named('test') {

src/main/java/jungle/HandTris/application/service/MemberService.java

@@ -0,0 +1,61 @@
+package jungle.HandTris.application.service;
+
+import jungle.HandTris.domain.Member;
+import jungle.HandTris.domain.exception.DuplicateNicknameException;
+import jungle.HandTris.domain.exception.DuplicateUsernameException;
+import jungle.HandTris.domain.exception.PasswordMismatchException;
+import jungle.HandTris.domain.exception.UserNotFoundException;
+import jungle.HandTris.domain.repo.MemberRepository;
+import jungle.HandTris.global.exception.ErrorCode;
+import jungle.HandTris.presentation.dto.request.MemberRequest;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.stereotype.Service;
+import jakarta.transaction.Transactional;
+
+import java.util.Optional;
+
+@Service
+@RequiredArgsConstructor
+public class MemberService {
+    private final MemberRepository memberRepository;
+    private final BCryptPasswordEncoder bCryptPasswordEncoder;
+
+    @Transactional
+    public Long signin (MemberRequest memberRequest) {
+        String username = memberRequest.username();
+        String password = memberRequest.password();
+
+        Member member = Optional.ofNullable(memberRepository.findByUsername(username))
+                .orElseThrow(() -> new UserNotFoundException());
+
+        // 비밀번호 확인
+        if (!bCryptPasswordEncoder.matches(password, member.getPassword())) {
+            throw new PasswordMismatchException();
+        }
+
+        return member.getId();
+    }
+
+    @Transactional
+    public void signup(MemberRequest memberRequest) {
+        boolean usernameExists = memberRepository.existsByUsername(memberRequest.username());
+        boolean nicknameExists = memberRepository.existsByNickname(memberRequest.nickname());
+
+        if (nicknameExists) {
+            throw new DuplicateNicknameException();
+        }
+
+        if (usernameExists) {
+            throw new DuplicateUsernameException();
+        }
+
+        String username = memberRequest.username();
+        String password = memberRequest.password();
+        String nickname = memberRequest.nickname();
+
+        Member data = new Member(username, bCryptPasswordEncoder.encode(password), nickname);
+
+        memberRepository.save(data);
+    }
+}

src/main/java/jungle/HandTris/domain/Member.java

@@ -2,8 +2,13 @@
 
 
 import jakarta.persistence.*;
+import lombok.AccessLevel;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
 
 @Entity
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
 public class Member {
     @Id
     @GeneratedValue(strategy = GenerationType.IDENTITY)
@@ -17,5 +22,10 @@ public class Member {
 
     @Column(nullable = false, unique = true)
     private String nickname;
-
+
+    public Member(String username, String password, String nickname) {
+        this.username = username;
+        this.password = password;
+        this.nickname = nickname;
+    }
 }

src/main/java/jungle/HandTris/domain/exception/DuplicateNicknameException.java

@@ -0,0 +1,4 @@
+package jungle.HandTris.domain.exception;
+
+public class DuplicateNicknameException extends RuntimeException{
+}

src/main/java/jungle/HandTris/domain/exception/DuplicateUsernameException.java

@@ -0,0 +1,4 @@
+package jungle.HandTris.domain.exception;
+
+public class DuplicateUsernameException extends RuntimeException {
+}

src/main/java/jungle/HandTris/domain/exception/PasswordMismatchException.java

@@ -0,0 +1,4 @@
+package jungle.HandTris.domain.exception;
+
+public class PasswordMismatchException extends RuntimeException {
+}

src/main/java/jungle/HandTris/domain/exception/UserNotFoundException.java

@@ -0,0 +1,4 @@
+package jungle.HandTris.domain.exception;
+
+public class UserNotFoundException extends RuntimeException {
+}

src/main/java/jungle/HandTris/domain/repo/MemberRepository.java

@@ -0,0 +1,12 @@
+package jungle.HandTris.domain.repo;
+
+import jungle.HandTris.domain.Member;
+import org.springframework.data.repository.Repository;
+
+public interface MemberRepository extends Repository<Member, Long> {
+    Member findByUsername(String username);
+    boolean existsByUsername(String username);
+    boolean existsByNickname(String nickname);
+
+    Member save(Member member);
+}

src/main/java/jungle/HandTris/global/config/Security/SecurityConfig.java

@@ -0,0 +1,32 @@
+package jungle.HandTris.global.config.Security;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration
+@EnableWebSecurity
+public class SecurityConfig {
+
+    @Bean
+    public BCryptPasswordEncoder bCryptPasswordEncoder() {
+
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+
+        http
+                .authorizeHttpRequests(auth -> auth
+                        .anyRequest().permitAll()
+                )
+                .csrf((auth) -> auth.disable()
+                );
+
+        return http.build();
+    }
+}

src/main/java/jungle/HandTris/global/exception/ErrorCode.java

@@ -1,6 +1,10 @@
 package jungle.HandTris.global.exception;
 
 import jakarta.validation.ConstraintViolationException;
+import jungle.HandTris.domain.exception.DuplicateNicknameException;
+import jungle.HandTris.domain.exception.DuplicateUsernameException;
+import jungle.HandTris.domain.exception.PasswordMismatchException;
+import jungle.HandTris.domain.exception.UserNotFoundException;
 import lombok.Getter;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.HttpStatusCode;
@@ -15,7 +19,11 @@ public enum ErrorCode {
     INTERNAL_SERVER_ERROR(HttpStatus.INTERNAL_SERVER_ERROR, "서버에 오류가 생겼습니다. 관리자에게 문의하세요.", Set.of()),
     INVALID_INPUT_VALUE(HttpStatus.BAD_REQUEST, "입력 값이 올바르지 않습니다.",
             Set.of(MethodArgumentNotValidException.class, ConstraintViolationException.class)),
-    METHOD_NOT_ALLOWED(HttpStatus.METHOD_NOT_ALLOWED, "지원하지 않는 HTTP 메서드입니다.", Set.of(HttpRequestMethodNotSupportedException.class));
+    METHOD_NOT_ALLOWED(HttpStatus.METHOD_NOT_ALLOWED, "지원하지 않는 HTTP 메서드입니다.", Set.of(HttpRequestMethodNotSupportedException.class)),
+    DUPLICATE_NICKNAME(HttpStatus.BAD_REQUEST, "이미 존재하는 닉네임 입니다.", Set.of(DuplicateNicknameException.class)),
+    DUPLICATE_USERNAME(HttpStatus.BAD_REQUEST, "이미 존재하는 ID 입니다.", Set.of(DuplicateUsernameException.class)),
+    USER_NOT_FOUND(HttpStatus.UNAUTHORIZED, "등록된 사용자가 없습니다.", Set.of(UserNotFoundException.class)),
+    INVALID_CREDENTIALS(HttpStatus.UNAUTHORIZED, "비밀번호가 일치하지 않습니다.", Set.of(PasswordMismatchException.class));
 
     private final HttpStatusCode status;
     private final String code;

src/main/java/jungle/HandTris/presentation/controller/AuthController.java

@@ -0,0 +1,34 @@
+package jungle.HandTris.presentation.controller;
+
+import jakarta.validation.Valid;
+import jungle.HandTris.application.service.MemberService;
+import jungle.HandTris.global.dto.ResponseEnvelope;
+import jungle.HandTris.presentation.dto.request.MemberRequest;
+import jungle.HandTris.presentation.dto.response.MemberIdDetails;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/auth")
+@RequiredArgsConstructor
+public class AuthController {
+
+    private final MemberService memberService;
+
+    @PostMapping("/signup")
+    @ResponseStatus(HttpStatus.CREATED)
+    public ResponseEnvelope<String> signup(@RequestBody @Valid MemberRequest memberRequest) {
+        memberService.signup(memberRequest);
+
+        return ResponseEnvelope.of("Signup Successful");
+    }
+
+    @PostMapping("/signin")
+    public ResponseEnvelope<MemberIdDetails> signin(@RequestBody MemberRequest memberRequest) {
+        Long memberId = memberService.signin(memberRequest);
+
+        return ResponseEnvelope.of(new MemberIdDetails(memberId));
+    }
+}

src/main/java/jungle/HandTris/presentation/dto/request/MemberRequest.java

@@ -0,0 +1,25 @@
+package jungle.HandTris.presentation.dto.request;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Pattern;
+import jakarta.validation.constraints.Size;
+
+public record MemberRequest(@NotBlank(message = "아이디는 필수 입력 값입니다.")
+                            @Size(min = 4, max = 10, message = "아이디는 최소 4자 이상, 10자 이하여야 합니다")
+                            @Pattern(regexp = "^[a-z0-9]+$", message = "아이디는 알파벳 소문자(a~z), 숫자(0~9)로 구성되어야 합니다.")
+                            @Pattern(regexp = "^(?!.*admin$)", message = "admin은 사용할 수 없습니다.")
+                            String username,
+
+                            @NotBlank(message = "비밀번호는 필수 입력 값입니다.")
+                            @Size(min = 8, max = 15, message = "비밀번호는 8자 이상 15자 이하여야 합니다.")
+                            @Pattern(regexp = "^(?=.*[a-zA-Z])(?=.*\\d)(?=.*[!@#$%^&*])[a-zA-Z\\d!@#$%^&*]+$", message = "비밀번호는 영문, 숫자, 특수문자를 각각 1개 이상 포함해야 합니다.")
+                            String password,
+
+                            @NotBlank(message = "닉네임은 필수 입력 값입니다.")
+                            @Size(min = 4, max = 20, message = "닉네임은 최소 4자 이상, 20자 이하여야 합니다")
+                            @Pattern(regexp = "^[a-zA-Z0-9]+$", message = "닉네임은 알파벳 대소문자와 숫자만 사용 가능합니다.")
+                            @Pattern(regexp = "^(?!.*admin$)", message = "admin은 사용할 수 없습니다.")
+                            String nickname) {
+
+}
+

src/main/java/jungle/HandTris/presentation/dto/response/MemberIdDetails.java

@@ -0,0 +1,4 @@
+package jungle.HandTris.presentation.dto.response;
+
+public record MemberIdDetails(Long Id) {
+}