|
4 | 4 | import lombok.RequiredArgsConstructor; |
5 | 5 | import lombok.extern.slf4j.Slf4j; |
6 | 6 | import org.jetbrains.annotations.NotNull; |
| 7 | +import org.springframework.http.server.ServerHttpRequest; |
| 8 | +import org.springframework.http.server.ServerHttpResponse; |
7 | 9 | import org.springframework.messaging.Message; |
8 | 10 | import org.springframework.messaging.MessageChannel; |
9 | 11 | import org.springframework.messaging.simp.stomp.StompCommand; |
10 | 12 | import org.springframework.messaging.simp.stomp.StompHeaderAccessor; |
11 | 13 | import org.springframework.messaging.support.ChannelInterceptor; |
12 | 14 | import org.springframework.messaging.support.MessageHeaderAccessor; |
13 | 15 | import org.springframework.stereotype.Component; |
| 16 | +import org.springframework.web.socket.WebSocketHandler; |
| 17 | +import org.springframework.web.socket.server.HandshakeInterceptor; |
| 18 | + |
| 19 | +import java.util.Map; |
14 | 20 |
|
15 | 21 | /** |
16 | 22 | * http가 아닌, 웹소켓에서 인증을 위한 인터셉터 (filter는 사용 안됨) |
17 | 23 | */ |
18 | 24 | @Slf4j |
19 | 25 | @Component |
20 | 26 | @RequiredArgsConstructor |
21 | | -public class StompAuthInterceptor implements ChannelInterceptor { |
| 27 | +public class StompAuthInterceptor implements HandshakeInterceptor { |
22 | 28 |
|
23 | 29 | private final JwtTokenProvider jwtTokenProvider; |
24 | 30 |
|
25 | 31 | @Override |
26 | | - public Message<?> preSend(@NotNull Message<?> message, @NotNull MessageChannel channel) { |
27 | | - StompHeaderAccessor accessor = MessageHeaderAccessor.getAccessor(message, StompHeaderAccessor.class); |
28 | | - log.info("StompAuthInterceptor preSend"); |
29 | | - log.info(accessor.getCommand().toString()); |
30 | | - if(StompCommand.CONNECT.equals(accessor.getCommand())) { |
31 | | - String authHeader = accessor.getFirstNativeHeader("Authorization"); |
32 | | - log.info("StompAuthInterceptor authHeader: {}", authHeader); |
33 | | - |
34 | | - if (authHeader == null || !authHeader.startsWith("Bearer ")) { |
35 | | - throw new IllegalArgumentException("Missing or invalid Authorization header"); |
36 | | - } |
37 | | - |
38 | | - String token = authHeader.substring(7); |
39 | | - log.info("StompAuthInterceptor preSend token: {}", token); |
40 | | - jwtTokenProvider.validateToken(token); |
41 | | - Long userId = jwtTokenProvider.getUserId(token); |
42 | | - log.info("StompAuthInterceptor preSend userId: {}", userId); |
43 | | - accessor.getSessionAttributes().put("userId", userId); |
| 32 | + public boolean beforeHandshake( |
| 33 | + ServerHttpRequest request, |
| 34 | + ServerHttpResponse response, |
| 35 | + WebSocketHandler wsHandler, |
| 36 | + Map<String, Object> attributes |
| 37 | + ) { |
| 38 | + String authHeader = request.getHeaders().getFirst("Authorization"); |
| 39 | + log.info("StompAuthInterceptor authHeader: {}", authHeader); |
| 40 | + |
| 41 | + if (authHeader == null || !authHeader.startsWith("Bearer ")) { |
| 42 | + throw new IllegalArgumentException("Missing or invalid Authorization header"); |
44 | 43 | } |
45 | | - return message; |
| 44 | + |
| 45 | + String token = authHeader.substring(7); |
| 46 | + log.info("StompAuthInterceptor preSend token: {}", token); |
| 47 | + jwtTokenProvider.validateToken(token); |
| 48 | + Long userId = jwtTokenProvider.getUserId(token); |
| 49 | + log.info("StompAuthInterceptor preSend userId: {}", userId); |
| 50 | + attributes.put("userId", userId); |
| 51 | + return true; |
| 52 | + } |
| 53 | + |
| 54 | + @Override |
| 55 | + public void afterHandshake(ServerHttpRequest request, ServerHttpResponse response, WebSocketHandler wsHandler, Exception exception) { |
46 | 56 | } |
47 | 57 | } |
0 commit comments