토큰 관련 이슈 해결 (#135)

Step3-kakao-tech-campus · Nov 11, 2023 · d4ea44b · d4ea44b
2 parents 1fb7c98 + 75861f8
commit d4ea44b
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/src/main/java/com/bungaebowling/server/user/controller/UserController.java b/src/main/java/com/bungaebowling/server/user/controller/UserController.java
@@ -58,8 +58,10 @@ public ResponseEntity<?> logout(@AuthenticationPrincipal CustomUserDetails userD
         userService.logout(userDetails.getId());
 
         ResponseCookie responseCookie = ResponseCookie.from("refreshToken", "")
-                .maxAge(0)
+                .httpOnly(true) // javascript 접근 방지
+                .secure(true) // https 통신 강제
                 .sameSite("None")
+                .maxAge(0)
                 .build();
 
         var response = ApiUtils.success();

diff --git a/src/main/resources/application-deploy.yml b/src/main/resources/application-deploy.yml
@@ -43,7 +43,7 @@ logging:
 # jwt token config
 bungaebowling:
   token_exp:
-    access: 172800
+    access: 600
     refresh: 2592000
   secret: ${TOKEN_SECRET}
   domain: ${DOMAIN}

diff --git a/src/main/resources/application-product.yml b/src/main/resources/application-product.yml
@@ -49,7 +49,7 @@ logging:
 # jwt token config
 bungaebowling:
   token_exp:
-    access: 172800
+    access: 600
     refresh: 2592000
   secret: ${TOKEN_SECRET}
   domain: ${DOMAIN}