07. Spring Security, Spring Session

• UserDetailsService 인터페이스의 loadUserByUsername 메소드를 구현해야함

• org.springframework.security.core.userdetails.User.UserBuilder를 이용해 반환 객체 UserDetails을 생성

• 주어진 loginId로 사용자 조회가 되지 않는다면 예외 처리함

@Service
public class UserService implements UserDetailsService {

  private final UserRepository userRepository;

  public UserService(UserRepository userRepository) {
    this.userRepository = userRepository;
  }

  @Override
  @Transactional(readOnly = true)
  public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
    return userRepository.findByLoginId(username)
      .map(user ->
        User.builder()
          .username(user.getLoginId())
          .password(user.getPasswd())
          .authorities(user.getGroup().getAuthorities())
          .build()
      )
      .orElseThrow(() -> new UsernameNotFoundException("Could not found user for " + username));
  }

}

• configure(AuthenticationManagerBuilder auth) 메소드 override
• 스프링 시큐리티에서 UserService 객체를 UserDetailsService 인터페이스 구현체로 사용할 수 있도록 등록

@Configuration
@EnableWebSecurity
public class WebSecurityConfigure extends WebSecurityConfigurerAdapter {

  private final Logger log = LoggerFactory.getLogger(getClass());

  private UserService userService;

  @Autowired
  private void setUserService(UserService userService) {
    this.userService = userService;
  }

	@Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.userDetailsService(userService);
  }

	// ... 생략 ...
}