[#163] feat: spring security 에 어드민 관련 설정을 추가한다

milzipmoza-developers · May 22, 2020 · 9db3248 · 9db3248
1 parent 69fcace
commit 9db3248
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/tecobrary-admin/src/main/java/com/woowacourse/tecobrary/admin/security/SecurityConfig.java b/tecobrary-admin/src/main/java/com/woowacourse/tecobrary/admin/security/SecurityConfig.java
@@ -28,12 +28,14 @@ protected void configure(HttpSecurity http) throws Exception {
                 .antMatchers("/", "/login", "/oauth2/authorization/**", "/static/**").permitAll()
 
                 .antMatchers("/api/librarybook/**").hasAuthority(AdminRole.ROLE_ADMIN.name())
+                .antMatchers("/api/admin/**").hasAuthority(AdminRole.ROLE_ADMIN.name())
 
                 .anyRequest().authenticated()
                 .and().logout().logoutSuccessUrl("/").invalidateHttpSession(true)
                 .and().oauth2Login().userInfoEndpoint().userService(userSecurityService);
 
-        if (environment.acceptsProfiles(Profiles.of("local"))) {
+        if (environment.acceptsProfiles(Profiles.of("local"))
+                || environment.acceptsProfiles(Profiles.of("localdev"))) {
             http.oauth2Login()
                     .defaultSuccessUrl(DEVELOP_ORIGIN)
                     .loginPage(DEVELOP_ORIGIN);

diff --git a/...src/main/java/com/woowacourse/tecobrary/admin/security/extractor/GoogleUserExtractor.java b/...src/main/java/com/woowacourse/tecobrary/admin/security/extractor/GoogleUserExtractor.java
@@ -45,6 +45,6 @@ public Admin extract(OAuth2User oAuth2User) {
         Admin admin = adminRepository.findByEmail(email)
                 .orElseThrow(() -> new IllegalArgumentException("등록된 유저가 아닙니다."));
 
-        return admin.updateUserInfo(name, picture);
+        return adminRepository.save(admin.updateUserInfo(name, picture));
     }
 }