Conversation
- application.yml (로컬) 삭제 - 공통 application.yml에 쿠키 설정 추가: cookie.secure, cookie.same-site
- application.yml 속 cookie.secure 설정값 기반으로 LoginFilter 동작 분기 - SameSite=Strict 및 Secure 옵션 동적 설정 - SecurityConfig에서 LoginFilter 생성 시 secure 설정 주입
- @configuration(proxyBeanMethods = false)로 프록시 충돌 제거 - AuthenticationManager 빈 주입 방식 수정 (AOT 호환성 강화) - application.yml의 cookie.secure 설정 적용
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
목적
환경에 따라 쿠키 보안 설정(
SameSite,Secure)을 다르게 적용하여 로그인 쿠키의 보안 수준을 강화.변경 사항
LoginFilter에SameSite=Strict및Secure속성 적용isSecureCookie값을application.yml에서 주입받아 동적으로 처리secure: false, 배포(prod)에서는secure: true로 동작application-dev.yml,application-prod.yml에cookie.secure,cookie.same-site설정 추가