데비앙의 블로그

<dependency>
  <groupId>io.jsonwebtoken</groupId>
  <artifactId>jjwt</artifactId>
  <version>0.9.0</version>
</dependency>

<beans:bean id="jwtInterceptor" class="인터셉터 만들 곳 경로"></beans:bean>
	
	<mvc:interceptors> 
		<mvc:interceptor> 
			<mvc:mapping path="/**"/>
			<mvc:exclude-mapping path="/api/Users/**"/> 
			<beans:ref bean="jwtInterceptor"/> 
		</mvc:interceptor> 
	</mvc:interceptors>

@Component
public class JwtInterceptor implements HandlerInterceptor{
	
	private static final String HEADER_AUTH = "Authorization";
	
	@Autowired
	private IJwtService jwtService;
	
	@Override
	public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
			throws Exception {
		final String token = request.getHeader(HEADER_AUTH);

		if(token != null && jwtService.isUsable(token)){
			return true;
		}else{
			System.out.println(request.getContextPath());
			response.sendError(401,"Authorized Error!!");
			return false;
		}
	}
}

@Service("jwtService")
public class JwtServiceImpl implements IJwtService{
	
	private static final String SALT =  "sunkakaocode";
	
	@Override
	public <T> String createToken(String key, T data, String subject){
		String jwt = Jwts.builder()
						 .setHeaderParam("typ", "JWT")
						 .setHeaderParam("regDate", System.currentTimeMillis())
						 .setSubject(subject)
						 .claim(key, data)
						 .signWith(SignatureAlgorithm.HS256, this.generateKey())
						 .compact();
		return jwt;
	}	

	private byte[] generateKey(){
		byte[] key = null;
		try {
			key = SALT.getBytes("UTF-8");
		} catch (UnsupportedEncodingException e) {
			e.printStackTrace();
		}
		
		return key;
	}
	
	@Override
	public boolean isUsable(String jwt) {
		boolean isUsable = false;
		try{
			Jws<Claims> claims = Jwts.parser()
					  .setSigningKey(this.generateKey())
					  .parseClaimsJws(jwt);
			isUsable = true;
		}catch (Exception e) {
			e.printStackTrace();
		}
		
		return isUsable;
	}
}

@Configuration
public class WebConfig implements WebMvcConfigurer{

	private static final String[] EXCLUDE_PATHS = {
	};

	@Autowired
	private JwtInterceptor jwtInterceptor;

	@Override
	public void addInterceptors(InterceptorRegistry registry) {
		registry.addInterceptor(jwtInterceptor).addPathPatterns("/**").excludePathPatterns(EXCLUDE_PATHS);
	}

    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")
        		.allowedMethods("GET", "POST", "PUT", "DELETE");
    }
}