diff --git a/src/main/java/com/muji_backend/kw_muji/common/config/WebConfig.java b/src/main/java/com/muji_backend/kw_muji/common/config/WebConfig.java index ff1d185..9156a11 100644 --- a/src/main/java/com/muji_backend/kw_muji/common/config/WebConfig.java +++ b/src/main/java/com/muji_backend/kw_muji/common/config/WebConfig.java @@ -1,6 +1,7 @@ package com.muji_backend.kw_muji.common.config; import com.muji_backend.kw_muji.common.security.JwtAuthenticationFilter; +import jakarta.servlet.http.HttpServletResponse; import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.springframework.context.annotation.Bean; @@ -45,7 +46,10 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { .anyRequest().authenticated()) // 나머지 모든 요청은 인증 필요 .requiresChannel(channelConfigurer -> channelConfigurer .requestMatchers(r -> r.getHeader("X-Forwarded-Proto") != null) - .requiresSecure()); + .requiresSecure()) + .exceptionHandling(exceptionHandling -> exceptionHandling + .authenticationEntryPoint((request, response, authException) -> response.sendError(HttpServletResponse.SC_UNAUTHORIZED)) + ); http.addFilterAfter(jwtAuthenticationFilter, CorsFilter.class);