Spring Security ‐ 초기화 설정 - thought-corner/Backend-PlayGround GitHub Wiki

public interface SecurityFilterChain {

    /**
     * 현재 요청이 이 필터 체인의 보안 규칙과 일치하는지 여부를 확인합니다.
     */
    boolean matches(HttpServletRequest request);

    /**
     * 이 체인에 포함된 서블릿 필터(Filter) 목록을 반환합니다.
     */
    List<Filter> getFilters();

}

public final class DefaultSecurityFilterChain implements SecurityFilterChain, BeanNameAware, BeanFactoryAware {

    private static final Log logger = LogFactory.getLog(DefaultSecurityFilterChain.class);

    private final RequestMatcher requestMatcher;

    private final List<Filter> filters;

    private @Nullable String beanName;

    private @Nullable ConfigurableListableBeanFactory beanFactory;

    // 가변 인자(Varargs)를 사용하는 생성자
    public DefaultSecurityFilterChain(RequestMatcher requestMatcher, Filter... filters) {
        this(requestMatcher, Arrays.asList(filters));
    }

    // 리스트를 사용하는 생성자 (핵심 로직)
    public DefaultSecurityFilterChain(RequestMatcher requestMatcher, List<Filter> filters) {
        if (filters.isEmpty()) {
            logger.debug(LogMessage.format("Will not secure %s", requestMatcher));
        } else {
            List<String> filterNames = new ArrayList<>();
            for (Filter filter : filters) {
                filterNames.add(filter.getClass().getSimpleName());
            }
            String names = StringUtils.collectionToDelimitedString(filterNames, ", ");
            logger.debug(LogMessage.format("Will secure %s with filters: %s", requestMatcher, names));
        }
        this.requestMatcher = requestMatcher;
        this.filters = new ArrayList<>(filters);
    }

    public RequestMatcher getRequestMatcher() {
        return this.requestMatcher;
    }

    @Override
    public List<Filter> getFilters() {
        return this.filters;
    }

    @Override
    public boolean matches(HttpServletRequest request) {
        return this.requestMatcher.matches(request);
    }

    @Override
    public String toString() {
        List<String> filterNames = new ArrayList<>();
        for (Filter filter : this.filters) {
            String name = filter.getClass().getSimpleName();
            // 'Filter' 접미사를 제거하여 가독성 있는 로그 출력
            if (name.endsWith("Filter")) {
                name = name.substring(0, name.length() - "Filter".length());
            }
            filterNames.add(name);
        }

        String declaration = this.getClass().getSimpleName();
        if (this.beanName != null) {
            declaration += " defined as '" + this.beanName + "'";
            if (this.beanFactory != null) {
                BeanDefinition bd = this.beanFactory.getBeanDefinition(this.beanName);
                String description = bd.getResourceDescription();
                if (description != null) {
                    declaration += " in [" + description + "]";
                }
            }
        }
        return declaration + " matching [" + this.requestMatcher + "] and having filters " + filterNames;
    }

    @Override
    public void setBeanName(@NonNull String name) {
        this.beanName = name;
    }

    @Override
    public void setBeanFactory(BeanFactory beanFactory) throws BeansException {
        if (beanFactory instanceof ConfigurableListableBeanFactory listable) {
            this.beanFactory = listable;
        }
    }

}

@ManagementContextConfiguration(value = ManagementContextType.CHILD, proxyBeanMethods = false)
@ConditionalOnWebApplication(type = Type.SERVLET)
class ServletManagementChildContextConfiguration {

    @Bean
    ServletManagementWebServerFactoryCustomizer servletManagementWebServerFactoryCustomizer(
            ListableBeanFactory beanFactory) {
        return new ServletManagementWebServerFactoryCustomizer(beanFactory);
    }

    @Configuration(proxyBeanMethods = false)
    @ConditionalOnClass({ EnableWebSecurity.class, Filter.class })
    @ConditionalOnBean(name = BeanIds.SPRING_SECURITY_FILTER_CHAIN, search = SearchStrategy.ANCESTORS)
    static class ServletManagementContextSecurityConfiguration {

        @Bean
        Filter springSecurityFilterChain(HierarchicalBeanFactory beanFactory) {
            BeanFactory parent = beanFactory.getParentBeanFactory();
            Assert.state(parent != null, "'parent' must not be null");
            // 부모 컨텍스트(ANCESTORS)에서 기존 보안 필터 체인 빈을 찾아 가져옴
            return parent.getBean(BeanIds.SPRING_SECURITY_FILTER_CHAIN, Filter.class);
        }

        @Bean
        @ConditionalOnBean(name = "securityFilterChainRegistration", search = SearchStrategy.ANCESTORS)
        DelegatingFilterProxyRegistrationBean securityFilterChainRegistration(HierarchicalBeanFactory beanFactory) {
            BeanFactory parent = beanFactory.getParentBeanFactory();
            Assert.state(parent != null, "'parent' must not be null");
            // 부모 컨텍스트에서 필터 등록 빈을 찾아 공유함
            return parent.getBean("securityFilterChainRegistration", DelegatingFilterProxyRegistrationBean.class);
        }

    }

}