[보안 설정 개선] JwtTokenIssuanceFilter 및 JwtTokenValidationFilter 추가로 JWT 인증 로직을 강화하고, SecurityPathConfig를 통해 허용 경로 설정을 외부화하여 보안 유연성 향상. JwtAccessDeniedHandler 및 JwtAuthenticationEntryPoint 삭제로 코드 정리.

2025-08-22 00:58:15 +09:00
parent 09e06cd10b
commit 1850227d24
10 changed files with 100 additions and 138 deletions
--- a/src/main/resources/application.properties
+++ b/src/main/resources/application.properties
@@ -94,4 +94,9 @@ springdoc.swagger-ui.tagsSorter=alpha
 springdoc.swagger-ui.doc-expansion=none
 springdoc.swagger-ui.disable-swagger-default-url=true
 springdoc.default-produces-media-type=application/json
-springdoc.default-consumes-media-type=application/json
+springdoc.default-consumes-media-type=application/json
+
+# ========================================
+# 보안 설정 - 허용할 경로
+# ========================================
+security.permit-all-paths=/login,/members/register,/swagger-ui/**,/api-docs/**,/ws/**