djb-eapim/elink-test-master
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

PATCH Method인 경우에도 url을 csrf 에 추가

Browse Source
This commit is contained in:
김율태
2025-02-05 17:50:07 +09:00
parent 387bc00671
commit 47b5081839
1 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/com/eactive/testmaster/api/controller/MockApiHandlerMapping.java
+14 -4
View File
@@ -1,10 +1,12 @@
package com.eactive.testmaster.api.controller; package com.eactive.testmaster.api.controller;
import com.eactive.testmaster.api.entity.MockRoute; import java.util.Arrays;
import com.eactive.testmaster.api.service.MockRouteService; import java.util.HashSet;
import com.eactive.testmaster.config.CsrfExclusionService; import java.util.Set;
import javax.annotation.PostConstruct; import javax.annotation.PostConstruct;
import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletRequest;
import org.slf4j.Logger; import org.slf4j.Logger;
import org.slf4j.LoggerFactory; import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
@@ -13,6 +15,10 @@ import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.mvc.method.RequestMappingInfo; import org.springframework.web.servlet.mvc.method.RequestMappingInfo;
import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping; import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping;
import com.eactive.testmaster.api.entity.MockRoute;
import com.eactive.testmaster.api.service.MockRouteService;
import com.eactive.testmaster.config.CsrfExclusionService;
@Component @Component
public class MockApiHandlerMapping { public class MockApiHandlerMapping {
@@ -30,6 +36,9 @@ public class MockApiHandlerMapping {
@Autowired @Autowired
private CsrfExclusionService csrfExclusionService; private CsrfExclusionService csrfExclusionService;
/** PATCH 도 추가 */
final Set<String> csrfAllowedMethods = new HashSet<>(Arrays.asList("POST", "PUT", "PATCH"));
@PostConstruct @PostConstruct
public void initialize() { public void initialize() {
mockRouteService.initAllRoutes(); mockRouteService.initAllRoutes();
@@ -46,7 +55,8 @@ public class MockApiHandlerMapping {
try { try {
requestMappingHandlerMapping.registerMapping(mappingInfo, mockApiController, MockApiController.class.getDeclaredMethod("handleRequest", HttpServletRequest.class)); requestMappingHandlerMapping.registerMapping(mappingInfo, mockApiController, MockApiController.class.getDeclaredMethod("handleRequest", HttpServletRequest.class));
if (mockRoute.getMethod().equalsIgnoreCase("POST") || mockRoute.getMethod().equalsIgnoreCase("PUT")) {
if (csrfAllowedMethods.contains(mockRoute.getMethod().toUpperCase())) {
csrfExclusionService.addExcludedPath(mockRoute.getPathPattern()); csrfExclusionService.addExcludedPath(mockRoute.getPathPattern());
} }
logger.info("Registered mapping for {} {}", mockRoute.getMethod(), mockRoute.getPathPattern()); logger.info("Registered mapping for {} {}", mockRoute.getMethod(), mockRoute.getPathPattern());