Issue:(#9, #10) cors 설정 변경 및 온보딩 구현

build.gradle.kts

@@ -34,7 +34,7 @@ dependencies {
     runtimeOnly("mysql:mysql-connector-java:8.0.33")
 
     // swagger
-    implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.1")
+    implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:2.7.0")
 
     // mail
     implementation("org.springframework.boot:spring-boot-starter-mail")

src/main/kotlin/gomushin/backend/core/CustomUserDetails.kt

@@ -2,21 +2,22 @@ package gomushin.backend.core
 
 import gomushin.backend.member.domain.entity.Member
 import org.springframework.security.core.GrantedAuthority
+import org.springframework.security.core.authority.SimpleGrantedAuthority
 import org.springframework.security.core.userdetails.UserDetails
 
 class CustomUserDetails(
     private val member: Member,
 ) : UserDetails {
     override fun getAuthorities(): MutableCollection<out GrantedAuthority> {
-        return mutableListOf()
+        return mutableListOf(SimpleGrantedAuthority("ROLE_${member.role.name}"))
     }
 
     override fun getPassword(): String {
         return ""
     }
 
     override fun getUsername(): String {
-        return member.name
+        return member.nickname
     }
 
     override fun isAccountNonExpired(): Boolean {

src/main/kotlin/gomushin/backend/core/common/web/response/ApiResponse.kt

@@ -5,6 +5,7 @@ import com.fasterxml.jackson.annotation.JsonIgnore
 import com.fasterxml.jackson.annotation.JsonInclude
 import com.fasterxml.jackson.annotation.JsonProperty
 import gomushin.backend.core.common.web.response.exception.ApiError
+import io.swagger.v3.oas.annotations.media.Schema
 import java.util.concurrent.CompletableFuture
 import java.util.function.Function
 import java.util.function.Supplier
@@ -20,6 +21,7 @@ data class ApiResponse<T>(
     val result: T? = null,
 
     @get:JsonProperty("error")
+    @Schema(hidden = true)
     val error: ApiError? = null,
 ) {
     init {

src/main/kotlin/gomushin/backend/core/configuration/security/CustomCorsConfiguration.kt

@@ -12,7 +12,8 @@ class CustomCorsConfiguration {
     @Bean
     fun corsConfigurationSource(): CorsConfigurationSource {
         val configuration = CorsConfiguration()
-        configuration.allowedOrigins = listOf("http://localhost:5173", "http://localhost:8080")
+        configuration.allowedOrigins =
+            listOf("http://localhost:5173", "http://localhost:8080", "https://frontend-sarang.vercel.app")
         configuration.allowedMethods = listOf("GET", "POST", "PUT", "DELETE", "OPTIONS")
         configuration.allowedHeaders = listOf("*")
         configuration.allowCredentials = true

src/main/kotlin/gomushin/backend/core/configuration/security/SecurityConfiguration.kt

@@ -1,8 +1,8 @@
 package gomushin.backend.core.configuration.security
 
-import gomushin.backend.core.oauth.handler.CustomSuccessHandler
 import gomushin.backend.core.infrastructure.filter.JwtAuthenticationFilter
 import gomushin.backend.core.jwt.JwtTokenProvider
+import gomushin.backend.core.oauth.handler.CustomSuccessHandler
 import gomushin.backend.core.oauth.service.CustomOAuth2UserService
 import gomushin.backend.core.service.CustomUserDetailsService
 import gomushin.backend.member.domain.repository.MemberRepository
@@ -18,7 +18,7 @@ import org.springframework.security.web.authentication.UsernamePasswordAuthentic
 @EnableWebSecurity
 class SecurityConfiguration(
     private val jwtTokenProvider: JwtTokenProvider,
-    private val memberRepository: MemberRepository
+    private val memberRepository: MemberRepository,
 ) {
 
     @Bean
@@ -67,6 +67,8 @@ class SecurityConfiguration(
                     "/favicon.ico",
                     "/error"
                 ).permitAll()
+                it.requestMatchers("/v1/member/onboarding").hasRole("GUEST")
+                it.anyRequest().authenticated()
             }
             .addFilterBefore(
                 JwtAuthenticationFilter(

src/main/kotlin/gomushin/backend/core/infrastructure/filter/JwtAuthenticationFilter.kt

@@ -17,7 +17,12 @@ class JwtAuthenticationFilter(
 ) : OncePerRequestFilter() {
 
     override fun shouldNotFilter(request: HttpServletRequest): Boolean {
-        return request.requestURI.contains("/v1/auth") || request.requestURI.contains("/v1/oauth")
+        val excludedPaths = listOf(
+            "/v1/auth", "/v1/oauth", "/swagger", "/v3/api-docs", "/api-docs"
+        )
+        return excludedPaths.any { path ->
+            request.requestURI.startsWith(path) || request.requestURI == path
+        }
     }
 
     override fun doFilterInternal(
@@ -40,6 +45,7 @@ class JwtAuthenticationFilter(
     private fun applyAuthentication(token: String) {
         val userId = tokenProvider.getMemberIdFromToken(token)
         val userDetails = customUserDetailsService.loadUserById(userId)
+
         val auth = UsernamePasswordAuthenticationToken(
             userDetails,
             null,

src/main/kotlin/gomushin/backend/core/jwt/JwtTokenProvider.kt

@@ -1,7 +1,7 @@
 package gomushin.backend.core.jwt
 
 interface JwtTokenProvider {
-    fun provideAccessToken(userId: Long): String
+    fun provideAccessToken(userId: Long, role: String): String
     fun getMemberIdFromToken(token: String): Long
     fun validateToken(token: String): Boolean
 }

src/main/kotlin/gomushin/backend/core/jwt/infrastructure/JwtTokenProviderImpl.kt

@@ -22,8 +22,8 @@ class JwtTokenProviderImpl(
     val ACCESS_TOKEN_EXPIRATION = jwtProperties.accessTokenExpiration
     val REFRESH_TOKEN_EXPIRATION = jwtProperties.refreshTokenExpiration
 
-    override fun provideAccessToken(userId: Long): String {
-        return createToken(userId, ACCESS_TOKEN_EXPIRATION, Type.ACCESS)
+    override fun provideAccessToken(userId: Long, role: String): String {
+        return createToken(userId, role, ACCESS_TOKEN_EXPIRATION, Type.ACCESS)
     }
 
     override fun getMemberIdFromToken(token: String): Long {
@@ -41,12 +41,13 @@ class JwtTokenProviderImpl(
                 is UnsupportedJwtException,
                 is MalformedJwtException,
                 is IllegalArgumentException -> return false
+
                 else -> throw e
             }
         }
     }
 
-    private fun createToken(userId: Long, expiration: Long, type: Type): String {
+    private fun createToken(userId: Long, role: String, expiration: Long, type: Type): String {
         val expirationMs = expiration * 60 * 1000
         val expiryDate = Date(System.currentTimeMillis() + expirationMs)
 
@@ -55,6 +56,7 @@ class JwtTokenProviderImpl(
             .audience().add(AUDIENCE).and()
             .subject(userId.toString())
             .claim("type", type.name)
+            .claim("role", role)
             .issuedAt(Date())
             .expiration(expiryDate)
             .signWith(SECRET_KEY)

src/main/kotlin/gomushin/backend/core/oauth/CustomOAuth2User.kt

@@ -27,4 +27,8 @@ class CustomOAuth2User(
     fun getUserId(): Long {
         return userDto.userId
     }
+
+    fun getRole() : String {
+        return userDto.role
+    }
 }

src/main/kotlin/gomushin/backend/core/oauth/handler/CustomSuccessHandler.kt

@@ -34,13 +34,13 @@ class CustomSuccessHandler(
 
         var accessToken = ""
         getMemberByEmail(principal.getEmail())?.let {
-            accessToken = jwtTokenProvider.provideAccessToken(it.id)
+            accessToken = jwtTokenProvider.provideAccessToken(it.id, it.role.name)
         } ?: run {
-            accessToken = jwtTokenProvider.provideAccessToken(principal.getUserId())
+            accessToken = jwtTokenProvider.provideAccessToken(principal.getUserId(), principal.getRole())
         }
 
         response!!.addCookie(createCookie("access_token", accessToken))
-        response.sendRedirect("http://localhost:8080") // TODO: 프론트엔드 주소로 변경 , 환경변수 처리
+        response.sendRedirect("https://frontend-sarang.vercel.app")
     }
 
     private fun createCookie(key: String, value: String): Cookie {

src/main/kotlin/gomushin/backend/core/oauth/service/CustomOAuth2UserService.kt

@@ -7,6 +7,7 @@ import gomushin.backend.core.oauth.CustomOAuth2User
 import gomushin.backend.member.domain.entity.Member
 import gomushin.backend.member.domain.repository.MemberRepository
 import gomushin.backend.member.domain.value.Provider
+import gomushin.backend.member.domain.value.Role
 import org.springframework.security.oauth2.client.userinfo.DefaultOAuth2UserService
 import org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest
 import org.springframework.security.oauth2.core.user.OAuth2User
@@ -32,7 +33,7 @@ class CustomOAuth2UserService(
 
         getMemberByEmail(email)?.let {
             it.email = oAuth2Response.getEmail()
-            it.name = oAuth2Response.getName()
+            it.nickname = oAuth2Response.getName()
             it.profileImageUrl = oAuth2Response.getProfileImage()
 
             val savedMember = memberRepository.save(it)
@@ -42,18 +43,18 @@ class CustomOAuth2UserService(
                 name = oAuth2Response.getName(),
                 email = oAuth2Response.getEmail(),
                 profileImage = oAuth2Response.getProfileImage(),
-                role = "ROLE_USER",
+                role = Role.MEMBER.name,
                 registrationId = registrationId,
                 userId = savedMember.id,
             )
 
             return CustomOAuth2User(userDto)
         } ?: run {
             val newMember = Member.create(
-                name = oAuth2Response.getName(),
+                nickname = oAuth2Response.getName(),
                 email = oAuth2Response.getEmail(),
                 profileImageUrl = oAuth2Response.getProfileImage(),
-                provider = Provider.getProviderByValue(registrationId)
+                provider = Provider.getProviderByValue(registrationId),
             )
 
             val savedMember = memberRepository.save(newMember)
@@ -63,7 +64,7 @@ class CustomOAuth2UserService(
                 name = oAuth2Response.getName(),
                 email = oAuth2Response.getEmail(),
                 profileImage = oAuth2Response.getProfileImage(),
-                role = "ROLE_USER",
+                role = Role.MEMBER.name,
                 registrationId = registrationId,
                 userId = savedMember.id,
             )

src/main/kotlin/gomushin/backend/core/service/CustomUserDetailsService.kt

@@ -2,28 +2,21 @@ package gomushin.backend.core.service
 
 import gomushin.backend.core.CustomUserDetails
 import gomushin.backend.core.infrastructure.exception.BadRequestException
-import gomushin.backend.member.domain.entity.Member
 import gomushin.backend.member.domain.repository.MemberRepository
 import org.springframework.security.core.userdetails.UserDetails
 import org.springframework.security.core.userdetails.UserDetailsService
 import org.springframework.stereotype.Service
 
 @Service
 class CustomUserDetailsService(private val memberRepository: MemberRepository) : UserDetailsService {
-    override fun loadUserByUsername(username: String?): UserDetails {
-        if (username == null) {
-            throw BadRequestException("saranggun.member.not-provided-name")
-        }
-
-        return memberRepository.findByName(username!!)?.let { createUserDetail(it) }
+    override fun loadUserByUsername(email: String): UserDetails {  // 파라미터명 username → email로 변경
+        val member = memberRepository.findByEmail(email)
             ?: throw BadRequestException("sarangggun.member.not-exist-member")
+        return CustomUserDetails(member)
     }
 
     fun loadUserById(id: Long): UserDetails =
-        memberRepository.findById(id).map { createUserDetail(it) }
+        memberRepository.findById(id)
+            .map { CustomUserDetails(it) }
             .orElseThrow { BadRequestException("sarangggun.member.not-exist-member") }
-
-    private fun createUserDetail(member: Member): UserDetails {
-        return CustomUserDetails(member)
-    }
 }

src/main/kotlin/gomushin/backend/member/application/MemberInfoFacade.kt

@@ -0,0 +1,22 @@
+package gomushin.backend.member.application
+
+import gomushin.backend.core.CustomUserDetails
+import gomushin.backend.member.domain.service.MemberInfoService
+import gomushin.backend.member.presentation.dto.response.GuestInfoResponse
+import org.springframework.stereotype.Component
+
+@Component
+class MemberInfoFacade(
+    private val memberInfoService: MemberInfoService,
+) {
+    fun getMemberInfo(customUserDetails: CustomUserDetails): Any {
+        val authorities = customUserDetails.authorities
+
+//        if (authorities.any { it.authority == "ROLE_GUEST" }) {
+        val member = memberInfoService.getGuestInfo(customUserDetails.getId())
+        return GuestInfoResponse.of(member)
+//        }
+
+        // TODO: Member 구현 시 , 분기를 통해 MEMBER와 GUEST를 구분할 수 있도록 수정
+    }
+}

src/main/kotlin/gomushin/backend/member/application/OnboardingFacade.kt

@@ -0,0 +1,13 @@
+package gomushin.backend.member.application
+
+import gomushin.backend.member.domain.service.OnboardingService
+import gomushin.backend.member.presentation.dto.request.OnboardingRequest
+import org.springframework.stereotype.Component
+
+@Component
+class OnboardingFacade(
+    private val onboardingService: OnboardingService,
+) {
+
+    fun onboarding(id: Long, onboardingRequest: OnboardingRequest) = onboardingService.onboarding(id, onboardingRequest)
+}

src/main/kotlin/gomushin/backend/member/domain/entity/Member.kt

@@ -2,7 +2,9 @@ package gomushin.backend.member.domain.entity
 
 import gomushin.backend.core.infrastructure.jpa.shared.BaseEntity
 import gomushin.backend.member.domain.value.Provider
+import gomushin.backend.member.domain.value.Role
 import jakarta.persistence.*
+import java.time.LocalDate
 
 @Entity
 @Table(name = "member")
@@ -11,25 +13,35 @@ class Member(
     @GeneratedValue(strategy = GenerationType.IDENTITY)
     val id: Long = 0L,
 
-    var name: String,
+    @Column(name = "nickname", nullable = false)
+    var nickname: String,
 
-    @Column(unique = true)
+    @Column(name = "email", unique = true, nullable = false)
     var email: String,
 
+    @Column(name = "birth_date")
+    var birthDate: LocalDate? = null,
+
+    @Column(name = "profile_image_url")
     var profileImageUrl: String?,
 
     @Enumerated(EnumType.STRING)
+    @Column(name = "provider", nullable = false)
     val provider: Provider,
-): BaseEntity()  {
+
+    @Enumerated(EnumType.STRING)
+    @Column(name = "role", nullable = false)
+    var role: Role = Role.GUEST,
+) : BaseEntity() {
     companion object {
         fun create(
-            name: String,
+            nickname: String,
             email: String,
             profileImageUrl: String?,
             provider: Provider
         ): Member {
             return Member(
-                name = name,
+                nickname = nickname,
                 email = email,
                 profileImageUrl = profileImageUrl ?: "",
                 provider = provider,