diff --git a/backend/src/main/java/com/votogether/domain/auth/controller/AuthController.java b/backend/src/main/java/com/votogether/domain/auth/controller/AuthController.java index e9fcacb86..781a0a9f1 100644 --- a/backend/src/main/java/com/votogether/domain/auth/controller/AuthController.java +++ b/backend/src/main/java/com/votogether/domain/auth/controller/AuthController.java @@ -75,7 +75,7 @@ private void addRefreshTokenToCookie(final HttpServletResponse httpServletRespon final ResponseCookie responseCookie = ResponseCookie.from("refreshToken", refreshToken) .httpOnly(true) .secure(true) - .path("/auth") + .path("/") .maxAge(1209600) .sameSite(SameSite.NONE.attributeValue()) .build(); @@ -94,7 +94,7 @@ private void expireCookie(final HttpServletResponse httpServletResponse, final S final ResponseCookie responseCookie = ResponseCookie.from("refreshToken", refreshToken) .httpOnly(true) .secure(true) - .path("/auth") + .path("/") .maxAge(0) .sameSite(SameSite.NONE.attributeValue()) .build(); diff --git a/backend/src/main/java/com/votogether/domain/auth/service/AuthService.java b/backend/src/main/java/com/votogether/domain/auth/service/AuthService.java index 58cc022e9..3cc786337 100644 --- a/backend/src/main/java/com/votogether/domain/auth/service/AuthService.java +++ b/backend/src/main/java/com/votogether/domain/auth/service/AuthService.java @@ -14,6 +14,7 @@ import com.votogether.global.jwt.TokenPayload; import com.votogether.global.jwt.TokenProcessor; import com.votogether.global.jwt.exception.JsonException; +import java.time.Duration; import java.util.Objects; import lombok.RequiredArgsConstructor; import org.springframework.data.redis.core.RedisTemplate; @@ -58,7 +59,7 @@ public ReissuedTokenDto reissueAuthToken( final String newAccessToken = tokenProcessor.generateAccessToken(accessTokenPayload.memberId()); final String newRefreshToken = tokenProcessor.generateRefreshToken(accessTokenPayload.memberId()); - redisTemplate.opsForValue().set(newRefreshToken, accessTokenPayload.memberId()); + redisTemplate.opsForValue().set(newRefreshToken, accessTokenPayload.memberId(), Duration.ofDays(14L)); return new ReissuedTokenDto(newAccessToken, newRefreshToken); }