Merge pull request #214 from Juinjang/feat/#213

feat: deactivate swagger ui when prod(#213)
Juinjang · Sep 2, 2024 · f9e1c00 · f9e1c00
2 parents b0dc682 + cc57c17
commit f9e1c00
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 12 deletions.
diff --git a/src/main/java/umc/th/juinjang/config/SecurityConfig.java b/src/main/java/umc/th/juinjang/config/SecurityConfig.java
@@ -1,13 +1,12 @@
 package umc.th.juinjang.config;
 
 import lombok.RequiredArgsConstructor;
-import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.core.annotation.Order;
+import org.springframework.core.env.Environment;
 import org.springframework.security.authentication.AuthenticationManager;
 import org.springframework.security.config.Customizer;
-import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
@@ -21,26 +20,38 @@
 import umc.th.juinjang.jwt.JwtExceptionFilter;
 import umc.th.juinjang.service.JwtService;
 
+import java.util.Arrays;
+
 @Configuration
 @EnableWebSecurity
 @RequiredArgsConstructor
 public class SecurityConfig {
     private final AuthenticationConfiguration authenticationConfiguration;
 
-    @Autowired
     private final JwtService jwtService;
 
-    @Autowired
     private final JwtExceptionFilter jwtExceptionFilter;
 
+    private final Environment environment;
     @Bean
     @Order(0)
     public WebSecurityCustomizer webSecurityCustomizer(){
-        return web -> web.ignoring()
-                .requestMatchers("/swagger-ui/**", "/swagger/**", "/swagger-resources/**", "/swagger-ui.html", "/test",
-                        "/configuration/ui",  "/v3/api-docs/**", "/h2-console/**", "/api/auth/regenerate-token",
-                        "/api/auth/kakao/**", "/api/auth/apple/**", "/api/checklist/**", "/api/report/**");
-
+        String[] activeProfiles = environment.getActiveProfiles();
+        boolean isProd = Arrays.asList(activeProfiles).contains("prod");
+
+        //prod아닐때
+        if (!isProd) {
+            return web -> web.ignoring()
+                    .requestMatchers("/swagger-ui/**", "/swagger/**", "/swagger-resources/**", "/swagger-ui.html", "/test",
+                            "/configuration/ui",  "/v3/api-docs/**", "/h2-console/**", "/api/auth/regenerate-token",
+                            "/api/auth/kakao/**", "/api/auth/apple/**");
+        }
+        else {
+            return web -> web.ignoring()
+                    .requestMatchers("/h2-console/**", "/api/auth/regenerate-token",
+                            "/api/auth/kakao/**", "/api/auth/apple/**" );
+        }
+
     }
 
     //선언 방식이 3.x에서 바뀜
@@ -54,7 +65,7 @@ protected SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .csrf(AbstractHttpConfigurer::disable)
                 .formLogin(Customizer.withDefaults())
                 .sessionManagement((sessionManagement) ->
-                        sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
+                                sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
 //                        세션을 사용하지 않는다고 설정함
                 )
                 .addFilter(new JwtAuthenticationFilter(authenticationManager(authenticationConfiguration),jwtService))

diff --git a/src/main/java/umc/th/juinjang/config/SwaggerConfig.java b/src/main/java/umc/th/juinjang/config/SwaggerConfig.java
@@ -8,9 +8,7 @@
 import io.swagger.v3.oas.models.servers.Server;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
-import org.springframework.context.annotation.Profile;
 
-@Profile("!prod")
 @Configuration
 public class SwaggerConfig {