[BE] Fix/#424 refresh token duplicated (#425)

* fix: RefreshToken Payload 추가 및 CORS 완화 * fix: Refresh Token Header 허용
woowacourse-teams · Sep 17, 2023 · 14a72b9 · 14a72b9
1 parent 303a5fb
commit 14a72b9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/backend/src/main/java/com/mapbefine/mapbefine/auth/infrastructure/JwtTokenProvider.java b/backend/src/main/java/com/mapbefine/mapbefine/auth/infrastructure/JwtTokenProvider.java
@@ -11,14 +11,13 @@
 import io.jsonwebtoken.Jwts;
 import io.jsonwebtoken.SignatureAlgorithm;
 import java.util.Date;
+import java.util.UUID;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
 
 @Component
 public class JwtTokenProvider implements TokenProvider {
 
-    private static final String EMPTY = "";
-
     private final String secretKey;
     private final long accessExpirationTime;
     private final long refreshExpirationTime;
@@ -41,7 +40,9 @@ public String createAccessToken(String payload) {
     }
 
     public String createRefreshToken() {
-        return createToken(EMPTY, refreshExpirationTime);
+        UUID payload = UUID.randomUUID();
+
+        return createToken(payload.toString(), refreshExpirationTime);
     }
 
     private String createToken(String payload, Long validityInMilliseconds) {

diff --git a/backend/src/main/java/com/mapbefine/mapbefine/common/config/WebConfig.java b/backend/src/main/java/com/mapbefine/mapbefine/common/config/WebConfig.java
@@ -18,7 +18,6 @@ public void addCorsMappings(CorsRegistry registry) {
                 .allowedOrigins("http://localhost:3000", "https://mapbefine.kro.kr", "https://mapbefine.com")
                 .allowedHeaders("refresh-token")
                 .allowedMethods("*")
-                .allowCredentials(true)
                 .exposedHeaders(LOCATION, SET_COOKIE);
     }