Merge pull request #414 from TaskFlow-CLAP/CLAP-329

CLAP-329 토큰 재발급 엔드포인트에 대해 액세스 토큰 검증을 하지 않도록 수정

Author: joowojr

src/main/java/clap/server/adapter/inbound/security/filter/JwtAuthenticationFilter.java

@@ -49,7 +49,7 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
             SWAGGER_ENDPOINTS
     ).flatMap(Arrays::stream).toArray(String[]::new);
 
-    public static final String[] ANONYMOUS_ENDPOINTS = {LOGIN_ENDPOINT, REISSUANCE_ENDPOINT, PASSWORD_EMAIL_ENDPOINT};
+    public static final String[] ANONYMOUS_ENDPOINTS = {LOGIN_ENDPOINT, PASSWORD_EMAIL_ENDPOINT};
 
     @Override
     protected void doFilterInternal(
@@ -58,7 +58,6 @@ protected void doFilterInternal(
             @NotNull FilterChain filterChain
     ) throws ServletException, IOException {
         try {
-
             if (isAnonymousRequest(request)) {
                 filterChain.doFilter(request, response);
                 return;
@@ -76,10 +75,11 @@ protected void doFilterInternal(
     }
 
     private boolean isAnonymousRequest(HttpServletRequest request) {
+        String requestUri = request.getRequestURI();
         boolean isAnonymousURI = Arrays.stream(ANONYMOUS_ENDPOINTS)
-                .anyMatch(endpoint -> new AntPathMatcher().match(endpoint, request.getRequestURI()));
+                .anyMatch(endpoint -> new AntPathMatcher().match(endpoint, requestUri));
         boolean isAnonymous = request.getHeader(HttpHeaders.AUTHORIZATION) == null;
-        return isAnonymousURI && isAnonymous;
+        return (isAnonymousURI && isAnonymous) || requestUri.equals(REISSUANCE_ENDPOINT);
     }
 
     @Override