fix: 배포앱의 HTTPS 요청에서 세션 쿠키가 저장되지 않는 버그 해결 작업(#143)

nginx/default.conf

@@ -24,5 +24,6 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
     }
 }

src/main/java/com/ftm/server/infrastructure/session/CookieSerializerConfig.java

@@ -0,0 +1,14 @@
+package com.ftm.server.infrastructure.session;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.session.web.http.CookieSerializer;
+
+@Configuration
+public class CookieSerializerConfig {
+
+    @Bean
+    public CookieSerializer cookieSerializer() {
+        return new ProtocolAwareCookieSerializer();
+    }
+}

src/main/java/com/ftm/server/infrastructure/session/ProtocolAwareCookieSerializer.java

@@ -0,0 +1,22 @@
+package com.ftm.server.infrastructure.session;
+
+import jakarta.servlet.http.HttpServletRequest;
+import org.springframework.session.web.http.DefaultCookieSerializer;
+
+public class ProtocolAwareCookieSerializer extends DefaultCookieSerializer {
+
+    @Override
+    public void writeCookieValue(CookieValue cookieValue) {
+        HttpServletRequest request = cookieValue.getRequest();
+        String proto = request.getHeader("X-Forwarded-Proto");
+
+        boolean isHttps = request.isSecure() || "https".equalsIgnoreCase(proto);
+
+        // HTTPS -> Secure O + SameSite=None
+        // HTTP -> Secure X + SameSite null
+        setUseSecureCookie(isHttps);
+        setSameSite(isHttps ? "None" : null);
+
+        super.writeCookieValue(cookieValue);
+    }
+}

src/main/resources/application-dev.yml

@@ -5,4 +5,7 @@ spring:
 
   jpa:
     hibernate:
-      ddl-auto: none
+      ddl-auto: none
+
+server:
+  forward-headers-strategy: native