From 99f56e855527de30b2a8e69642f9ca11983553bb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=ED=98=84=EC=84=B1=ED=95=84?= <hyunsp@gmail.com>
Date: Tue, 21 Jan 2025 13:21:09 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B3=84=EC=A0=95=20=EC=A1=B0=ED=9A=8C=20?=
 =?UTF-8?q?=EC=B6=94=EA=B0=80.=20API=20=EA=B6=8C=ED=95=9C=20=EC=B6=94?=
 =?UTF-8?q?=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../user/controller/AccountController.java         | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/main/java/com/eactive/testmaster/user/controller/AccountController.java b/src/main/java/com/eactive/testmaster/user/controller/AccountController.java
index 0f3d822..4fe7d2f 100644
--- a/src/main/java/com/eactive/testmaster/user/controller/AccountController.java
+++ b/src/main/java/com/eactive/testmaster/user/controller/AccountController.java
@@ -2,7 +2,10 @@ package com.eactive.testmaster.user.controller;
 
 import com.eactive.testmaster.common.util.SecurityUtil;
 import com.eactive.testmaster.user.dto.PasswordChangeRequestDTO;
+import com.eactive.testmaster.user.entity.User;
 import com.eactive.testmaster.user.service.UserService;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.annotation.Secured;
 import org.springframework.stereotype.Controller;
 import org.springframework.transaction.annotation.Transactional;
 import org.springframework.ui.ModelMap;
@@ -11,6 +14,7 @@ import org.springframework.validation.Validator;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.ModelAttribute;
 import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
 
 @Controller
 public class AccountController {
@@ -25,13 +29,23 @@ public class AccountController {
         this.userService = userService;
     }
 
+    @GetMapping("/api/account")
+    @ResponseBody
+    @Secured("ROLE_API_TESTER")
+    public ResponseEntity<User> account(ModelMap model) {
+        return ResponseEntity.ok().body(SecurityUtil.getCurrentUser());
+    }
+
+
     @GetMapping("/change_password.do")
+    @Secured("ROLE_API_TESTER")
     public String changePassword(@ModelAttribute("passwordChangeRequest") PasswordChangeRequestDTO passwordChangeRequestDTO) {
         return UPDATE_PW;
     }
 
     @PostMapping(value = "/update_password.do")
     @Transactional
+    @Secured("ROLE_API_TESTER")
     public String updatePassword(ModelMap model, @ModelAttribute("passwordChangeRequest") PasswordChangeRequestDTO passwordChangeRequestDTO,
                                  BindingResult result) {