인프런 스프링 시큐리티 강의 학습-10

private UserService userService;                                                    // 1
private PasswordEncoder passwordEncoder;                                            // 1

@Autowired
public setUserController(UserService userService, PasswordEncoder passwordEncoder) {   // 2
    this.userService = userService;
    this.passwordEncoder = passwordEncoder;
}

@GetMapping("/users")
public String createUser() {                                                        // 3
    return "/user/login/register";
}

@PostMapping("/users")
public String createUser(AccountDto accountDto) {                                   // 4
    ModelMapper modelMapper = new ModelMapper();
    Account account = modelMapper.map(accountDto, Account.class);
    account.setPassword(passwordEncoder.encode(account.getPassword()));
    userService.createUser(account);

    return "redirect:/";
}

@Entity                         // 1
@Setter                         // 2
@Getter                         // 3
public class Account {
    @Id                         // 4
    @GeneratedValue             // 5
    private Long Id;
    private String username;
    private String password;
    private String email;
    private String age;
    private String role;
}

@Data                           // 1
public class AccountDto {
    private String username;
    private String password;
    private String email;
    private String age;
    private String role;
}

public interface UserRepository extends JpaRepository<Account, Long> {}

public interface UserService {
    void createUser(Account account);
}

@Service("userService")
public class UserServiceImpl implements UserService {
    private UserRepository userRepository;

    @Autowired
    private void setUserServiceImpl(UserRepository userRepository) {
        this.userRepository = userRepository;
    }

    @Override
    @Transactional
    public void createUser(Account account) {
        userRepository.save(account);
    }
}

@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    http
            .authorizeRequests()
            .antMatchers("/", "/users", "/user/login/**").permitAll()
            .antMatchers("/mypage").hasRole("USER")
            .antMatchers("/messages").hasRole("MANAGER")
            .antMatchers("/config").hasRole("ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin();

    return http.build();
}

Account findByUsername(String username);

public class AccountContext extends User {
    private final Account account;

    public AccountContext(Account account, Collection<? extends GrantedAuthority> authorities) {
        super(account.getUsername(), account.getPassword(), authorities);
        this.account = account;
    }

    public Account getAccount() {
        return account;
    }
}

@Service("userDetailsService")                                                  // 1
public class CustomUserDetailsService implements UserDetailsService {
    private UserRepository userRepository;

    @Autowired
    private void setCustomUserDetailsService(UserRepository userRepository) {
        this.userRepository = userRepository;
    }

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        Account account = userRepository.findByUsername(username);              // 2

        if (account == null) {
            throw new UsernameNotFoundException("UsernameNotFoundException");   // 5
        }

        List<GrantedAuthority> roles = new ArrayList<>();                       // 3
        roles.add(new SimpleGrantedAuthority(account.getRole()));               // 3

        return new AccountContext(account, roles);                              // 4
    }
}

private UserDetailsService userDetailsService;

@Autowired
public setSecurityConfig(UserDetailsService userDetailsService) {
    this.userDetailsService = userDetailsService;
}

@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    AuthenticationManagerBuilder authenticationManagerBuilder = http.getSharedObject(AuthenticationManagerBuilder.class);   // 변경점
    authenticationManagerBuilder.userDetailsService(userDetailsService);                                                    // 변경점

    http
            .authorizeRequests()
            .antMatchers("/", "/users", "/user/login/**").permitAll()
            .antMatchers("/mypage").hasRole("USER")
            .antMatchers("/messages").hasRole("MANAGER")
            .antMatchers("/config").hasRole("ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin();

    return http.build();
}

@Autowired
private UserDetailsService userDetailsService;

@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.userDetailsService(userDetailsService);
}

@Component                                                                      // 5
public class CustomAuthenticationProvider implements AuthenticationProvider {
    private UserDetailsService userDetailsService;
    private PasswordEncoder passwordEncoder;

    @Autowired
    private void setCustomAuthenticationProvider(UserDetailsService userDetailsService, PasswordEncoder passwordEncoder) {
        this.userDetailsService = userDetailsService;
        this.passwordEncoder = passwordEncoder;
    }

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {                      // 1
        String username = authentication.getName();
        String password = (String) authentication.getCredentials();

        AccountContext accountContext = (AccountContext)userDetailsService.loadUserByUsername(username);                    // 3

        if (!passwordEncoder.matches(password, accountContext.getAccount().getPassword())) {                                 // 3
            throw new BadCredentialsException("BadCredentialsException");
        }

        return new UsernamePasswordAuthenticationToken(accountContext.getAccount(), null, accountContext.getAuthorities()); // 4
    }

    @Override
    public boolean supports(Class<?> authentication) {                                                                      // 2
        return UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication);
    }
}

// 1. 사라진 UserDetailsService
@Bean
public AuthenticationProvider authenticationProvider() {                            // 2
    return new CustomAuthenticationProvider();
}

public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    AuthenticationManagerBuilder authenticationManagerBuilder = http.getSharedObject(AuthenticationManagerBuilder.class);
    authenticationManagerBuilder.authenticationProvider(authenticationProvider());  // 2

    http.
    // 이하 동일
}