refactor: 인증 방식 세션에서 JWT로 변경 #158
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🔍 개요
🚀 주요 변경 내용
세션 기반의 인증 방식을 JWT로 수정했습니다.
액세스 토큰은 15분, 리프레시 토큰은 30일로 지정했으며 미회원가입 유저의 임시 토큰은 10분입니다.
토큰을 리프레시하는 경우 로테이션으로 두 토큰 모두 새롭게 갱신되며, 이전에 사용한 액세스 토큰은 폐기되어 사용할 수 없도록 블랙리스트 처리했습니다.
리프레시 토큰은 쿠키에서 관리하며, 보안을 위해
http-only,secure옵션을 사용했습니다.💬 참고 사항
✅ Checklist (완료 조건)