fix : UserLevelCheckInterceptor logic

Skhuthon · Jun 29, 2024 · 6e91465 · 6e91465
1 parent a0447fd
commit 6e91465
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/...rc/main/java/com/skhuthon/skhuthon_0th_team9/global/common/UserLevelCheckInterceptor.java b/...rc/main/java/com/skhuthon/skhuthon_0th_team9/global/common/UserLevelCheckInterceptor.java
@@ -26,7 +26,10 @@ public boolean preHandle(@NonNull HttpServletRequest request,
                              @NonNull HttpServletResponse response,
                              @NonNull Object handler) {
 
-        HandlerMethod handlerMethod = (HandlerMethod) handler;
+        if (!(handler instanceof HandlerMethod handlerMethod)) {
+            return true;
+        }
+
         UserLevelCheck userLevelCheck = handlerMethod.getMethodAnnotation(UserLevelCheck.class);
 
         if (userLevelCheck == null) {

diff --git a/...0th_TEAM9/src/main/java/com/skhuthon/skhuthon_0th_team9/global/config/SecurityConfig.java b/...0th_TEAM9/src/main/java/com/skhuthon/skhuthon_0th_team9/global/config/SecurityConfig.java
@@ -38,11 +38,8 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .sessionManagement(c -> c.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
                 .cors(c -> c.configurationSource(configurationSource()))
                 .logout(AbstractHttpConfigurer::disable)
-                .authorizeHttpRequests((authorizeHttpRequests) ->
-                        authorizeHttpRequests
-                        .requestMatchers("/api/v1/**", "swagger-ui/**", "v3/api-docs/**").permitAll()
-                        .requestMatchers("/test").authenticated()
-                        .requestMatchers("/api/v1/admin/**").hasRole("ADMIN") // 관리자만 해당 URL에 접근할 수 있음
+                .authorizeHttpRequests((authorizeHttpRequests) -> authorizeHttpRequests
+                        .requestMatchers("/api/v1/**", "/swagger-ui/**", "v3/api-docs/**").permitAll()
                         .anyRequest().authenticated()
                 )
                 .exceptionHandling((exceptionHandling) -> exceptionHandling.authenticationEntryPoint(new CustomAuthenticationEntryPoint()))