ISSUE-14 애플 & 카카오 소셜 로그인 연동 로직 구현

buildSrc/src/main/kotlin/Versions.kt

@@ -7,4 +7,5 @@ object Versions {
     const val MYSQL = "8.0.33"
     const val JJWT = "0.12.6"
     const val JDK = 17
+    const val OPEN_FEIGN = "4.1.0"
 }

core/src/main/kotlin/org/doorip/core/auth/AuthService.kt

@@ -1,10 +1,12 @@
 package org.doorip.core.auth
 
 import java.time.Duration
+import org.doorip.domain.AlreadyExistingUserException
 import org.doorip.domain.UnauthenticatedException
 import org.doorip.domain.entity.AuthPlatform
 import org.doorip.domain.entity.Token
 import org.doorip.domain.entity.UserId
+import org.doorip.domain.entity.UserInfo
 import org.doorip.domain.repository.AccessTokenRepository
 import org.doorip.domain.repository.AuthRepository
 import org.doorip.domain.repository.RefreshTokenRepository
@@ -18,10 +20,10 @@ internal class AuthService(
     private val refreshTokenRepository: RefreshTokenRepository,
     private val userRepository: UserRepository,
     private val authRepository: AuthRepository,
-) {
+) : AuthUseCase {
 
-    @Transactional(readOnly = true)
-    fun signIn(token: String, platform: String): Token {
+    @Transactional
+    override fun signIn(token: String, platform: String): UserInfo {
         val authPlatform = AuthPlatform.toAuthPlatform(platform)
         val platformId = authRepository.getPlatformId(token, authPlatform)
 
@@ -30,11 +32,16 @@ internal class AuthService(
             platform = authPlatform,
         ) ?: throw UnauthenticatedException
 
-        return issueToken(user.id)
+        val userInfo = UserInfo(
+            user = user,
+            token = issueToken(user.id),
+        )
+
+        return userInfo
     }
 
     @Transactional
-    fun signUp(token: String, platform: String, name: String, intro: String): Token {
+    override fun signUp(token: String, platform: String, name: String, intro: String): Token {
         val authPlatform = AuthPlatform.toAuthPlatform(platform)
         val platformId = authRepository.getPlatformId(token, authPlatform)
 
@@ -43,23 +50,23 @@ internal class AuthService(
             platform = authPlatform,
             name = name,
             intro = intro,
-        )
+        ) ?: throw AlreadyExistingUserException
 
         return issueToken(user.id)
     }
 
-    fun signOut(userId: UserId) {
+    override fun signOut(userId: UserId) {
         refreshTokenRepository.deleteRefreshToken(userId)
     }
 
-    fun reissue(refreshToken: String): Token {
+    override fun reissue(refreshToken: String): Token {
         val userId = refreshTokenRepository.getUserId(refreshToken) ?: throw UnauthenticatedException
 
         return issueToken(userId)
     }
 
     @Transactional
-    fun withdraw(userId: UserId) {
+    override fun withdraw(userId: UserId) {
         refreshTokenRepository.deleteRefreshToken(userId)
         userRepository.withdraw(userId)
     }

core/src/main/kotlin/org/doorip/core/auth/AuthUseCase.kt

@@ -0,0 +1,13 @@
+package org.doorip.core.auth
+
+import org.doorip.domain.entity.Token
+import org.doorip.domain.entity.UserId
+import org.doorip.domain.entity.UserInfo
+
+interface AuthUseCase {
+    fun signIn(token: String, platform: String): UserInfo
+    fun signUp(token: String, platform: String, name: String, intro: String): Token
+    fun signOut(userId: UserId)
+    fun reissue(refreshToken: String): Token
+    fun withdraw(userId: UserId)
+}

domain/src/main/kotlin/org/doorip/domain/DooripException.kt

@@ -18,6 +18,7 @@ data object UnauthenticatedException : ClientException("e4010", "인증 과정
 data object InvalidRequestValueException : ClientException("e4000", "잘못된 요청입니다.") { private fun readResolve(): Any = InvalidRequestValueException }
 data object MethodNotAllowedException : ClientException("e4050", "잘못된 HTTP method 요청입니다.") { private fun readResolve(): Any = MethodNotAllowedException }
 data object ConflictException : ClientException("e4090", "이미 존재하는 리소스입니다.") { private fun readResolve(): Any = ConflictException }
+data object AlreadyExistingUserException : ClientException("e4091", "이미 존재하는 회원입니다.") { private fun readResolve(): Any = AlreadyExistingUserException }
 
 // Server Exception
 sealed class ServerException(

domain/src/main/kotlin/org/doorip/domain/entity/User.kt

@@ -11,3 +11,8 @@ data class User(
     val intro: String,
     val result: Int?,
 )
+
+data class UserInfo(
+    val user: User,
+    val token: Token,
+)

domain/src/main/kotlin/org/doorip/domain/repository/UserRepository.kt

@@ -5,7 +5,7 @@ import org.doorip.domain.entity.User
 import org.doorip.domain.entity.UserId
 
 interface UserRepository {
-    fun create(platformId: String, platform: AuthPlatform, name: String, intro: String): User
+    fun create(platformId: String, platform: AuthPlatform, name: String, intro: String): User?
     fun getUser(platformId: String, platform: AuthPlatform): User?
     fun withdraw(userId: UserId)
 }

gateway/oauth/build.gradle.kts

@@ -6,6 +6,9 @@ plugins {
 
 dependencies {
     implementation(project(":domain"))
+    implementation(project(":support:jwt"))
+
+    implementation("org.springframework.cloud:spring-cloud-starter-openfeign:${Versions.OPEN_FEIGN}")
 }
 
 tasks {

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/AuthGateway.kt

@@ -2,14 +2,18 @@ package org.doorip.gateway.oauth
 
 import org.doorip.domain.entity.AuthPlatform
 import org.doorip.domain.repository.AuthRepository
+import org.doorip.gateway.oauth.apple.AppleAuthService
+import org.doorip.gateway.oauth.kakao.KakaoAuthService
 import org.springframework.stereotype.Component
 
 @Component
-internal class AuthGateway : AuthRepository {
+internal class AuthGateway(
+    private val appleAuthService: AppleAuthService,
+    private val kakaoAuthService: KakaoAuthService,
+) : AuthRepository {
 
-    override fun getPlatformId(token: String, platform: AuthPlatform): String {
-        // TODO
-
-        return token
+    override fun getPlatformId(token: String, platform: AuthPlatform): String = when (platform) {
+        AuthPlatform.APPLE -> appleAuthService.getPlatformId(token)
+        AuthPlatform.KAKAO -> kakaoAuthService.getPlatformId(token)
     }
 }

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/apple/AppleAuthService.kt

@@ -0,0 +1,16 @@
+package org.doorip.gateway.oauth.apple
+
+import org.springframework.stereotype.Component
+
+@Component
+internal class AppleAuthService(
+    private val keyGenerator: ApplePublicKeyGenerator,
+    private val validator: AppleIdTokenValidator,
+) {
+
+    internal fun getPlatformId(token: String): String {
+        val publicKey = keyGenerator.generatePublicKey(token)
+
+        return validator.validateAndGetSubject(token, publicKey)
+    }
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/apple/AppleFeignClient.kt

@@ -0,0 +1,11 @@
+package org.doorip.gateway.oauth.apple
+
+import org.doorip.gateway.oauth.apple.dto.ApplePublicKeys
+import org.springframework.cloud.openfeign.FeignClient
+import org.springframework.web.bind.annotation.GetMapping
+
+@FeignClient(value = "apple-client", url = "https://appleid.apple.com/auth/keys")
+internal interface AppleFeignClient {
+    @GetMapping
+    fun getApplePublicKeys(): ApplePublicKeys
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/apple/AppleIdTokenValidator.kt

@@ -0,0 +1,27 @@
+package org.doorip.gateway.oauth.apple
+
+import org.doorip.domain.UnauthenticatedException
+import org.doorip.support.jwt.JwtProvider
+import org.doorip.support.jwt.SignatureKey
+import org.springframework.beans.factory.annotation.Value
+import org.springframework.stereotype.Component
+
+@Component
+internal class AppleIdTokenValidator(
+    private val jwtProvider: JwtProvider,
+) {
+    @Value("\${oauth.apple.iss}")
+    lateinit var iss: String
+
+    @Value("\${oauth.apple.client-id}")
+    lateinit var clientId: String
+
+    internal fun validateAndGetSubject(token: String, key: SignatureKey): String {
+        return jwtProvider.validateAndGetSubject(
+            token = token,
+            key = key,
+            iss = iss,
+            aud = clientId,
+        ) ?: throw UnauthenticatedException
+    }
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/apple/ApplePublicKeyGenerator.kt

@@ -0,0 +1,36 @@
+package org.doorip.gateway.oauth.apple
+
+import feign.FeignException
+import org.doorip.domain.UnauthenticatedException
+import org.doorip.gateway.oauth.apple.dto.ApplePublicKeys
+import org.doorip.support.jwt.JwtProvider
+import org.doorip.support.jwt.RSAPublicKey
+import org.doorip.support.jwt.SignatureKey
+import org.springframework.stereotype.Component
+
+@Component
+internal class ApplePublicKeyGenerator(
+    private val httpClient: AppleFeignClient,
+    private val jwtProvider: JwtProvider,
+) {
+
+    internal fun generatePublicKey(token: String): SignatureKey {
+        val applePublicKeys = getApplePublicKeys()
+
+        val header = jwtProvider.parseHeader(token) ?: throw UnauthenticatedException
+
+        val alg = header["alg"] ?: throw UnauthenticatedException
+        val kid = header["kid"] ?: throw UnauthenticatedException
+        val key = applePublicKeys[alg, kid] ?: throw UnauthenticatedException
+
+        return RSAPublicKey(key.n, key.e, key.kty)
+    }
+
+    private fun getApplePublicKeys(): ApplePublicKeys {
+        try {
+            return httpClient.getApplePublicKeys()
+        } catch (e: FeignException) {
+            throw UnauthenticatedException
+        }
+    }
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/apple/dto/ApplePublicKey.kt

@@ -0,0 +1,10 @@
+package org.doorip.gateway.oauth.apple.dto
+
+internal data class ApplePublicKey(
+    val kty: String,
+    val kid: String,
+    val use: String,
+    val alg: String,
+    val n: String,
+    val e: String,
+)

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/apple/dto/ApplePublicKeys.kt

@@ -0,0 +1,12 @@
+package org.doorip.gateway.oauth.apple.dto
+
+internal data class ApplePublicKeys(
+    val keys: List<ApplePublicKey>,
+) {
+
+    operator fun get(alg: String, kid: String): ApplePublicKey? {
+        return keys.firstOrNull { key ->
+            key.alg == alg && key.kid == kid
+        }
+    }
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/config/OpenFeignConfig.kt

@@ -0,0 +1,8 @@
+package org.doorip.gateway.oauth.config
+
+import org.springframework.cloud.openfeign.EnableFeignClients
+import org.springframework.context.annotation.Configuration
+
+@EnableFeignClients(basePackages = ["org.doorip"])
+@Configuration
+internal class OpenFeignConfig

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/kakao/KakaoAuthService.kt

@@ -0,0 +1,25 @@
+package org.doorip.gateway.oauth.kakao
+
+import feign.FeignException
+import org.doorip.domain.UnauthenticatedException
+import org.springframework.stereotype.Component
+
+@Component
+internal class KakaoAuthService(
+    private val httpClient: KakaoFeignClient,
+) {
+
+    fun getPlatformId(token: String): String {
+        try {
+            val kakaoAccessTokenInfo = httpClient.getKakaoAccessTokenInfo(HEADER_BEARER + token)
+
+            return kakaoAccessTokenInfo.id.toString()
+        } catch (ex: FeignException) {
+            throw UnauthenticatedException
+        }
+    }
+
+    companion object {
+        private const val HEADER_BEARER = "Bearer "
+    }
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/kakao/KakaoFeignClient.kt

@@ -0,0 +1,12 @@
+package org.doorip.gateway.oauth.kakao
+
+import org.doorip.gateway.oauth.kakao.dto.KakaoAccessTokenInfo
+import org.springframework.cloud.openfeign.FeignClient
+import org.springframework.web.bind.annotation.GetMapping
+import org.springframework.web.bind.annotation.RequestHeader
+
+@FeignClient(name = "kakao-kakao-feign", url = "https://kapi.kakao.com/v1/user/access_token_info")
+internal interface KakaoFeignClient {
+    @GetMapping
+    fun getKakaoAccessTokenInfo(@RequestHeader("Authorization") token: String): KakaoAccessTokenInfo
+}

gateway/oauth/src/main/kotlin/org/doorip/gateway/oauth/kakao/dto/KakaoAccessTokenInfo.kt

@@ -0,0 +1,5 @@
+package org.doorip.gateway.oauth.kakao.dto
+
+internal data class KakaoAccessTokenInfo(
+    val id: Long,
+)

gateway/oauth/src/main/resources/application-oauth.yml

@@ -0,0 +1,4 @@
+oauth:
+    apple:
+        iss: https://appleid.apple.com
+        client-id: ${APPLE_CLIENT_ID}

gateway/rdb/src/main/kotlin/org/doorip/gateway/rdb/BaseJpaEntity.kt

@@ -0,0 +1,21 @@
+package org.doorip.gateway.rdb
+
+import jakarta.persistence.Column
+import jakarta.persistence.EntityListeners
+import jakarta.persistence.MappedSuperclass
+import java.time.LocalDateTime
+import org.springframework.data.annotation.CreatedDate
+import org.springframework.data.annotation.LastModifiedDate
+import org.springframework.data.jpa.domain.support.AuditingEntityListener
+
+@MappedSuperclass
+@EntityListeners(AuditingEntityListener::class)
+internal abstract class BaseJpaEntity {
+    @CreatedDate
+    @Column(name = "created_at", updatable = false, nullable = false)
+    var createdDate: LocalDateTime = LocalDateTime.now()
+
+    @LastModifiedDate
+    @Column(name = "updated_at", nullable = false)
+    var updatedDate: LocalDateTime = LocalDateTime.now()
+}

gateway/rdb/src/main/kotlin/org/doorip/gateway/rdb/config/JpaConfig.kt

@@ -0,0 +1,8 @@
+package org.doorip.gateway.rdb.config
+
+import org.springframework.context.annotation.Configuration
+import org.springframework.data.jpa.repository.config.EnableJpaAuditing
+
+@EnableJpaAuditing
+@Configuration
+internal class JpaConfig

gateway/rdb/src/main/kotlin/org/doorip/gateway/rdb/token/RefreshTokenGateway.kt

@@ -9,6 +9,7 @@ import org.doorip.domain.entity.UserId
 import org.doorip.domain.repository.RefreshTokenRepository
 import org.springframework.data.repository.findByIdOrNull
 import org.springframework.stereotype.Component
+import org.springframework.transaction.annotation.Transactional
 
 @Component
 internal class RefreshTokenGateway(
@@ -48,6 +49,7 @@ internal class RefreshTokenGateway(
         return encoder.encodeToString(savedRefreshToken.refreshToken)
     }
 
+    @Transactional
     override fun deleteRefreshToken(userId: UserId) {
         refreshTokenJpaRepository.deleteByUserId(userId)
     }