🔀 :: 토큰 재발급 API 구현

src/main/kotlin/andreas311/miso/domain/auth/adapter/input/AuthAdapter.kt

@@ -8,19 +8,19 @@ import andreas311.miso.domain.auth.adapter.input.mapper.AuthDataMapper
 import andreas311.miso.domain.auth.application.port.input.LogoutUseCase
 import andreas311.miso.domain.auth.application.port.input.SignInUseCase
 import andreas311.miso.domain.auth.application.port.input.SignUpUseCase
+import andreas311.miso.domain.auth.application.port.input.TokenReissueUseCase
 import org.springframework.http.HttpStatus
 import org.springframework.http.ResponseEntity
-import org.springframework.web.bind.annotation.DeleteMapping
-import org.springframework.web.bind.annotation.PostMapping
-import org.springframework.web.bind.annotation.RequestBody
+import org.springframework.web.bind.annotation.*
 import javax.validation.Valid
 
 @RequestController("/auth")
 class AuthAdapter(
     private val authDataMapper: AuthDataMapper,
     private val signUpUseCase: SignUpUseCase,
     private val signInUseCase: SignInUseCase,
-    private val logoutUseCase: LogoutUseCase
+    private val logoutUseCase: LogoutUseCase,
+    private val tokenReissueUseCase: TokenReissueUseCase
 ) {
     @PostMapping
     fun signUp(@RequestBody @Valid signUpRequest: SignUpRequest): ResponseEntity<Void> =
@@ -37,4 +37,10 @@ class AuthAdapter(
     fun logout(): ResponseEntity<Void> =
         logoutUseCase.execute()
             .let { ResponseEntity.status(HttpStatus.NO_CONTENT).build() }
+
+    @PatchMapping
+    fun reissue(@RequestHeader("Refresh-Token") refreshToken: String): ResponseEntity<TokenResponse> =
+        tokenReissueUseCase.execute(refreshToken)
+            .let { authDataMapper toResponse it }
+            .let { ResponseEntity.ok(it) }
 }

src/main/kotlin/andreas311/miso/domain/auth/adapter/output/persistence/QueryRefreshTokenPersistenceAdapter.kt

@@ -4,6 +4,7 @@ import andreas311.miso.domain.auth.adapter.output.persistence.mapper.RefreshToke
 import andreas311.miso.domain.auth.adapter.output.persistence.repository.RefreshTokenRepository
 import andreas311.miso.domain.auth.application.port.output.QueryRefreshTokenPort
 import andreas311.miso.domain.auth.domain.RefreshToken
+import org.springframework.data.repository.findByIdOrNull
 import org.springframework.stereotype.Component
 import java.util.*
 
@@ -16,4 +17,9 @@ class QueryRefreshTokenPersistenceAdapter(
         val refreshTokenEntity = refreshTokenRepository.findByUserId(userId)
         return refreshTokenMapper.toDomain(refreshTokenEntity)
     }
+
+    override fun findByRefreshTokenOrNull(refreshToken: String): RefreshToken? {
+        val refreshTokenEntity = refreshTokenRepository.findByIdOrNull(refreshToken)
+        return refreshTokenMapper.toDomain(refreshTokenEntity)
+    }
 }

src/main/kotlin/andreas311/miso/domain/auth/application/port/input/TokenReissueUseCase.kt

@@ -0,0 +1,7 @@
+package andreas311.miso.domain.auth.application.port.input
+
+import andreas311.miso.domain.auth.application.port.output.dto.TokenDto
+
+interface TokenReissueUseCase {
+    fun execute(refreshToken: String): TokenDto
+}

src/main/kotlin/andreas311/miso/domain/auth/application/port/output/QueryRefreshTokenPort.kt

@@ -5,4 +5,6 @@ import java.util.UUID
 
 interface QueryRefreshTokenPort {
     fun findByUserIdOrNull(userId: UUID): RefreshToken?
+
+    fun findByRefreshTokenOrNull(refreshToken: String): RefreshToken?
 }

src/main/kotlin/andreas311/miso/domain/auth/application/port/output/TokenParsePort.kt

@@ -6,7 +6,7 @@ import javax.servlet.http.HttpServletRequest
 interface TokenParsePort {
     fun parseAccessToken(request: HttpServletRequest): String?
 
-    fun parseRefreshTokenToken(refreshToken: String): String?
+    fun parseRefreshToken(refreshToken: String): String?
 
     fun authentication(token: String): Authentication
 }

src/main/kotlin/andreas311/miso/domain/auth/application/service/TokenReissueService.kt

@@ -0,0 +1,49 @@
+package andreas311.miso.domain.auth.application.service
+
+import andreas311.miso.common.annotation.RollbackService
+import andreas311.miso.domain.auth.application.event.SaveRefreshTokenEvent
+import andreas311.miso.domain.auth.application.port.input.TokenReissueUseCase
+import andreas311.miso.domain.auth.application.port.output.QueryRefreshTokenPort
+import andreas311.miso.domain.auth.application.port.output.TokenGeneratePort
+import andreas311.miso.domain.auth.application.port.output.TokenParsePort
+import andreas311.miso.domain.auth.application.port.output.dto.TokenDto
+import andreas311.miso.domain.user.application.exception.UserNotFoundException
+import andreas311.miso.domain.user.application.port.output.QueryUserPort
+import andreas311.miso.domain.user.domain.User
+import andreas311.miso.global.security.jwt.common.exception.InvalidTokenTypeException
+import andreas311.miso.global.security.jwt.common.exception.TokenExpiredException
+import org.springframework.context.ApplicationEventPublisher
+
+@RollbackService
+class TokenReissueService(
+    private val queryUserPort: QueryUserPort,
+    private val tokenParsePort: TokenParsePort,
+    private val tokenGeneratePort: TokenGeneratePort,
+    private val queryRefreshTokenPort: QueryRefreshTokenPort,
+    private val applicationEventPublisher: ApplicationEventPublisher
+) : TokenReissueUseCase {
+    override fun execute(refreshToken: String): TokenDto {
+        val parsedRefreshToken = tokenParsePort.parseRefreshToken(refreshToken)
+            ?: throw InvalidTokenTypeException()
+
+        val refreshToken = queryRefreshTokenPort.findByRefreshTokenOrNull(parsedRefreshToken)
+            ?: throw TokenExpiredException()
+
+        val user = queryUserPort.findByIdOrNull(refreshToken.userId)
+            ?: throw UserNotFoundException()
+
+        val token = tokenGeneratePort.generateToken(user.email, user.role)
+
+        publishSaveRefreshToken(token, user)
+
+        return token
+    }
+
+    private fun publishSaveRefreshToken(token: TokenDto, user: User) {
+        val saveRefreshTokenEvent = SaveRefreshTokenEvent(
+            userId = user.id,
+            refreshToken = token.refreshToken
+        )
+        applicationEventPublisher.publishEvent(saveRefreshTokenEvent)
+    }
+}

src/main/kotlin/andreas311/miso/domain/user/adapter/output/persistence/QueryUserPersistenceAdapter.kt

@@ -4,7 +4,9 @@ import andreas311.miso.domain.user.adapter.output.persistence.mapper.UserMapper
 import andreas311.miso.domain.user.adapter.output.persistence.repository.UserRepository
 import andreas311.miso.domain.user.application.port.output.QueryUserPort
 import andreas311.miso.domain.user.domain.User
+import org.springframework.data.repository.findByIdOrNull
 import org.springframework.stereotype.Component
+import java.util.*
 
 @Component
 class QueryUserPersistenceAdapter(
@@ -18,4 +20,9 @@ class QueryUserPersistenceAdapter(
 
     override fun existsByEmail(email: String): Boolean =
         userRepository.existsByEmail(email)
+
+    override fun findByIdOrNull(id: UUID): User? {
+        val userEntity = userRepository.findByIdOrNull(id)
+        return userMapper.toDomain(userEntity)
+    }
 }

src/main/kotlin/andreas311/miso/domain/user/application/port/output/CommandUserPort.kt

@@ -4,5 +4,6 @@ import andreas311.miso.domain.user.domain.User
 
 interface CommandUserPort {
     fun saveUser(user: User): User
+
     fun deleteByEmail(email: String)
 }

src/main/kotlin/andreas311/miso/domain/user/application/port/output/QueryUserPort.kt

@@ -1,8 +1,12 @@
 package andreas311.miso.domain.user.application.port.output
 
 import andreas311.miso.domain.user.domain.User
+import java.util.UUID
 
 interface QueryUserPort {
     fun findByEmailOrNull(email: String): User?
+
     fun existsByEmail(email: String): Boolean
+
+    fun findByIdOrNull(id: UUID): User?
 }

src/main/kotlin/andreas311/miso/global/security/jwt/TokenParseAdapter.kt

@@ -26,7 +26,7 @@ class TokenParseAdapter(
             .let { it ?: return null }
             .let { if (it.startsWith(JwtProperties.TOKEN_PREFIX)) it.replace(JwtProperties.TOKEN_PREFIX, "") else null }
 
-    override fun parseRefreshTokenToken(refreshToken: String): String? =
+    override fun parseRefreshToken(refreshToken: String): String? =
         if (refreshToken.startsWith(JwtProperties.TOKEN_PREFIX)) refreshToken.replace(JwtProperties.TOKEN_PREFIX, "") else null
 
     override fun authentication(token: String): Authentication =