🔥 hotfix : 프론트 헤더 접근 권한 문제 수정

src/main/java/com/seeat/server/domain/auth/application/dto/response/TokenResponse.java

@@ -0,0 +1,11 @@
+package com.seeat.server.domain.auth.application.dto.response;
+
+/**
+ * accessToken 응답입니다.
+ *
+ * @param accessToken accessToken
+ */
+public record TokenResponse(
+        String accessToken
+) {
+}

src/main/java/com/seeat/server/domain/auth/presentation/AuthController.java

@@ -0,0 +1,60 @@
+package com.seeat.server.domain.auth.presentation;
+
+import com.seeat.server.domain.auth.application.dto.response.TokenResponse;
+import com.seeat.server.domain.auth.presentation.swagger.AuthControllerSpec;
+import com.seeat.server.domain.user.domain.entity.User;
+import com.seeat.server.global.response.ApiResponse;
+import com.seeat.server.global.response.CustomException;
+import com.seeat.server.global.response.ErrorCode;
+import com.seeat.server.global.util.JwtConstants;
+import com.seeat.server.security.jwt.service.TokenService;
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletRequest;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Optional;
+
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/api/v1/auth")
+public class AuthController implements AuthControllerSpec {
+
+    private final TokenService tokenService;
+
+    @GetMapping
+    public ApiResponse<TokenResponse> getAccessToken(HttpServletRequest request){
+
+        // 클라이언트 쿠키에서 refreshToken 추출
+        String refreshToken = extractRefreshTokenFromCookies(request.getCookies());
+
+        // 사용자 정보 조회
+        Optional<User> user = tokenService.getUserFromRefreshToken(refreshToken);
+        if (user.isEmpty()) {
+
+            return ApiResponse.fail(new CustomException(ErrorCode.NOT_USER, null));
+        }
+
+        // 새로운 accessToken 생성
+        String newAccessToken = tokenService.generateAccessToken(user.get());
+
+        // accessToken 응답
+        return ApiResponse.ok(new TokenResponse(newAccessToken));
+    }
+
+    private String extractRefreshTokenFromCookies(Cookie[] cookies) {
+        // 쿠키에서 refreshToken 추출
+        if (cookies == null) return null;
+
+        for (Cookie cookie : cookies) {
+            if (JwtConstants.REFRESH_TOKEN_COOKIE.equals(cookie.getName())) {
+                // 쿠키 값 반환
+                return cookie.getValue();
+            }
+        }
+        // 없으면 null
+        return null;
+    }
+}

src/main/java/com/seeat/server/domain/auth/presentation/swagger/AuthControllerSpec.java

@@ -0,0 +1,16 @@
+package com.seeat.server.domain.auth.presentation.swagger;
+
+import com.seeat.server.domain.auth.application.dto.response.TokenResponse;
+import com.seeat.server.global.response.ApiResponse;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.servlet.http.HttpServletRequest;
+import org.springframework.web.bind.annotation.GetMapping;
+
+@Tag(name = "토큰 조회 API", description = "토큰 조회하는 API 입니다.")
+public interface AuthControllerSpec {
+    @Operation(summary = "AccessToken 조회", description = "RefreshToken 기반 AccessToken 재발급")
+    @GetMapping
+    ApiResponse<TokenResponse> getAccessToken(HttpServletRequest request);
+
+}

src/main/java/com/seeat/server/global/service/RedisService.java

@@ -10,6 +10,8 @@
 
 import java.time.Duration;
 import java.util.Map;
+import java.util.Set;
+
 /**
  * Redis와의 상호작용을 담당하는 서비스 클래스
  *
@@ -44,6 +46,17 @@ public <T> T getValues(String key, Class<T> clazz) {
         return objectMapper.convertValue(value, clazz);
     }
 
+    public boolean existsRefreshToken(String token) {
+        Set<String> keys = redisTemplate.keys(REFRESH_TOKEN_PREFIX + "*");
+        if (keys == null || keys.isEmpty()) return false;
+
+        ValueOperations<String, Object> values = redisTemplate.opsForValue();
+
+        return keys.stream()
+                .map(values::get)
+                .anyMatch(value -> token.equals(value));
+    }
+
     public void deleteValues(String key) {
         redisTemplate.delete(key);
     }

src/main/java/com/seeat/server/security/config/CorsConfig.java

@@ -35,6 +35,8 @@ public CorsConfigurationSource corsConfigurationSource() {
         configuration.addAllowedMethod("*");
         configuration.setAllowCredentials(true);
 
+        configuration.addExposedHeader("Authorization");
+
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         source.registerCorsConfiguration("/**", configuration);
         return source;

src/main/java/com/seeat/server/security/config/RequestMatcherHolder.java

@@ -74,6 +74,9 @@ public class RequestMatcherHolder {
             new RequestInfo(DELETE, "/api/v1/search", null),
             new RequestInfo(GET, "/api/v1/search/**", null),
 
+            // 토큰 조회 관련
+            new RequestInfo(GET, "/api/v1/auth", null),
+
             // static resources
             new RequestInfo(GET, "/docs/**", null),
             new RequestInfo(GET, "/*.ico", null),

src/main/java/com/seeat/server/security/jwt/service/TokenService.java

@@ -10,12 +10,14 @@
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.RequiredArgsConstructor;
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.data.redis.core.RedisTemplate;
 import org.springframework.http.HttpHeaders;
 import org.springframework.security.core.Authentication;
 import org.springframework.stereotype.Service;
 
 import java.time.Duration;
 import java.util.Arrays;
+import java.util.Optional;
 
 /**
  * 토큰 발급 서비스
@@ -80,4 +82,23 @@ public void generateDevTokensAndSetHeaders(Long userId, String username, UserRol
 
         response.addCookie(refreshTokenCookie);
     }
+
+    public Optional<User> getUserFromRefreshToken(String refreshToken) {
+        if (refreshToken == null || !redisService.existsRefreshToken(refreshToken)) {
+            return Optional.empty();
+        }
+
+        if (!jwtProvider.validateToken(refreshToken)) {
+            return Optional.empty();
+        }
+
+        Authentication authentication = jwtProvider.getAuthentication(refreshToken);
+        User user = (User) authentication.getPrincipal();
+
+        return Optional.ofNullable(user);
+    }
+
+    public String generateAccessToken(User user) {
+        return jwtProvider.generateAccessToken(user);
+    }
 }