fix: JWT 인증 버그 수정 및 예외처리 HTTP 상태코드 통일

src/main/java/chainsawman/gesture/config/SecurityConfig.java

@@ -1,6 +1,5 @@
 package chainsawman.gesture.config;
-import chainsawman.gesture.global.TokenProvider;
-import chainsawman.gesture.security.CustomUserDetailsService;
+
 import chainsawman.gesture.security.InternalAuthFilter;
 import chainsawman.gesture.security.JwtAuthenticationFilter;
 import lombok.RequiredArgsConstructor;
@@ -17,15 +16,13 @@
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 
-
 @Configuration
 @EnableWebSecurity
 @EnableMethodSecurity
 @RequiredArgsConstructor
 public class SecurityConfig {
 
-    private final TokenProvider tokenProvider;
-    private final CustomUserDetailsService customUserDetailsService;
+    private final JwtAuthenticationFilter jwtAuthenticationFilter;
     private final InternalAuthFilter internalAuthFilter;
 
     @Bean
@@ -38,7 +35,6 @@ public AuthenticationManager authenticationManager(AuthenticationConfiguration c
         return configuration.getAuthenticationManager();
     }
 
-
     @Bean
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         http
@@ -50,17 +46,16 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers(
                                 "/auth/**",
+                                "/users/check-id",
                                 "/swagger-ui/**",
                                 "/swagger-ui.html",
                                 "/v3/api-docs/**",
                                 "/v3/api-docs"
                         ).permitAll()
                         .anyRequest().permitAll()
                 )
-                .addFilterBefore(new JwtAuthenticationFilter(tokenProvider, customUserDetailsService),
-                        UsernamePasswordAuthenticationFilter.class)
+                .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class)
                 .addFilterBefore(internalAuthFilter, JwtAuthenticationFilter.class);
         return http.build();
     }
-
 }

src/main/java/chainsawman/gesture/exceptions/room/NotRoomHostException.java

@@ -5,6 +5,6 @@
 
 public class NotRoomHostException extends DomainException {
     public NotRoomHostException() {
-        super(HttpStatus.FORBIDDEN, "ROOM_007", "통화방 호스트만 초대할 수 있습니다.");
+        super(HttpStatus.FORBIDDEN, "ROOM_007", "통화방 호스트만 가능한 기능입니다.");
     }
 }

src/main/java/chainsawman/gesture/exceptions/user/InvalidPasswordException.java

@@ -5,6 +5,6 @@
 
 public class InvalidPasswordException extends DomainException {
     public InvalidPasswordException() {
-        super(HttpStatus.BAD_REQUEST, "USER_003", "비밀번호가 올바르지 않습니다.");
+        super(HttpStatus.UNAUTHORIZED, "USER_003", "비밀번호가 올바르지 않습니다.");
     }
 }

src/main/java/chainsawman/gesture/global/ApiGlobalResponseHandler.java

@@ -89,7 +89,7 @@ public ResponseEntity<ApiResponse<Void>> handleValidException(MethodArgumentNotV
                 .findFirst()
                 .orElse("입력값이 올바르지 않습니다.");
         return ResponseEntity.status(HttpStatus.BAD_REQUEST)
-                .body(ApiResponse.error("COMMON_400", "입력값이 올바르지 않습니다."));
+                .body(ApiResponse.error("COMMON_400", message));
     }
 
     @ExceptionHandler(Exception.class)

src/main/java/chainsawman/gesture/security/JwtAuthenticationFilter.java

@@ -1,6 +1,8 @@
 package chainsawman.gesture.security;
 
+import chainsawman.gesture.entity.user.User;
 import chainsawman.gesture.global.TokenProvider;
+import chainsawman.gesture.repository.user.UserRepository;
 import jakarta.servlet.FilterChain;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
@@ -9,18 +11,19 @@
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.context.SecurityContextHolder;
-import org.springframework.security.core.userdetails.UserDetails;
-import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.stereotype.Component;
 import org.springframework.util.StringUtils;
 import org.springframework.web.filter.OncePerRequestFilter;
 
 import java.io.IOException;
+import java.util.List;
 
+@Component
 @RequiredArgsConstructor
 public class JwtAuthenticationFilter extends OncePerRequestFilter {
 
     private final TokenProvider tokenProvider;
-    private final UserDetailsService userDetailsService;
+    private final UserRepository userRepository;
 
     @Override
     protected void doFilterInternal(
@@ -33,17 +36,13 @@ protected void doFilterInternal(
 
         if (StringUtils.hasText(token) && tokenProvider.validateToken(token)) {
             String email = tokenProvider.getEmail(token);
-            UserDetails userDetails = userDetailsService.loadUserByUsername(email);
-
-            if (SecurityContextHolder.getContext().getAuthentication() == null) {
-                UsernamePasswordAuthenticationToken authentication =
-                        new UsernamePasswordAuthenticationToken(
-                                userDetails,
-                                null,
-                                userDetails.getAuthorities()
-                        );
-                SecurityContextHolder.getContext().setAuthentication(authentication);
-            }
+            userRepository.findByEmailAndIsDeactivatedFalse(email).ifPresent(user -> {
+                if (SecurityContextHolder.getContext().getAuthentication() == null) {
+                    UsernamePasswordAuthenticationToken authentication =
+                            new UsernamePasswordAuthenticationToken(user, null, List.of());
+                    SecurityContextHolder.getContext().setAuthentication(authentication);
+                }
+            });
         }
 
         filterChain.doFilter(request, response);

src/main/java/chainsawman/gesture/service/AuthService.java

@@ -16,7 +16,7 @@
 import chainsawman.gesture.global.TokenProvider;
 import chainsawman.gesture.repository.user.RefreshTokenRepository;
 import chainsawman.gesture.repository.user.UserRepository;
-import jakarta.transaction.Transactional;
+import org.springframework.transaction.annotation.Transactional;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;

src/main/java/chainsawman/gesture/service/CallService.java

@@ -11,7 +11,7 @@
 import chainsawman.gesture.exceptions.call.CallAlreadyJoinedException;
 import chainsawman.gesture.exceptions.call.CallParticipantNotFoundException;
 import chainsawman.gesture.exceptions.call.NoActiveCallException;
-import chainsawman.gesture.exceptions.room.RoomMemberNotFoundException;
+import chainsawman.gesture.exceptions.room.NotRoomMemberException;
 import chainsawman.gesture.exceptions.room.RoomNotFoundException;
 import chainsawman.gesture.repository.call.CallParticipantRepository;
 import chainsawman.gesture.repository.call.CallRepository;
@@ -42,7 +42,7 @@ public CallJoinResponse joinCall(Long roomIdx) {
                 .orElseThrow(RoomNotFoundException::new);
 
         if (!roomMemberRepository.existsByRoom_IdxAndUser_Idx(roomIdx, currentUser.getIdx())) {
-            throw new RoomMemberNotFoundException();
+            throw new NotRoomMemberException();
         }
 
         // 활성 통화 세션이 없으면 새로 생성 (최초 참여자가 호스트)

src/main/java/chainsawman/gesture/service/MeetingService.java

@@ -21,7 +21,6 @@
 import chainsawman.gesture.repository.room.RoomRepository;
 import chainsawman.gesture.security.SecurityUtils;
 import lombok.RequiredArgsConstructor;
-import org.springframework.security.access.AccessDeniedException;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 

src/main/java/chainsawman/gesture/service/RoomService.java

@@ -15,8 +15,8 @@
 import chainsawman.gesture.exceptions.room.RoomFullException;
 import chainsawman.gesture.exceptions.room.RoomMaxParticipantExceededException;
 import chainsawman.gesture.exceptions.room.RoomMemberNotFoundException;
+import chainsawman.gesture.exceptions.room.NotRoomHostException;
 import chainsawman.gesture.exceptions.room.RoomNotFoundException;
-import chainsawman.gesture.dto.room.response.RoomLeaveResponse;
 import chainsawman.gesture.exceptions.user.InvalidPasswordException;
 import chainsawman.gesture.repository.chat.ChatParticipantRepository;
 import chainsawman.gesture.repository.chat.ChatRoomRepository;
@@ -26,7 +26,6 @@
 import lombok.RequiredArgsConstructor;
 import org.springframework.data.domain.Page;
 import org.springframework.data.domain.Pageable;
-import org.springframework.security.access.AccessDeniedException;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
@@ -160,7 +159,7 @@ public RoomPatchResponse patchRoom(Long roomIdx, RoomPatchRequest request) {
                 .orElseThrow(RoomNotFoundException::new);
 
         if (!room.getHost().getIdx().equals(currentUser.getIdx())) {
-            throw new AccessDeniedException("방장만 수정할 수 있습니다.");
+            throw new NotRoomHostException();
         }
 
         int currentCount = roomMemberRepository.countByRoom_Idx(roomIdx);
@@ -208,7 +207,7 @@ public RoomDeleteResponse deleteRoom(Long roomIdx) {
                 .orElseThrow(RoomNotFoundException::new);
 
         if (!room.getHost().getIdx().equals(currentUser.getIdx())) {
-            throw new AccessDeniedException("방장만 삭제할 수 있습니다.");
+            throw new NotRoomHostException();
         }
 
         roomMemberRepository.deleteAllByRoom_Idx(roomIdx);

src/main/java/chainsawman/gesture/service/UserService.java

@@ -15,7 +15,6 @@
 import chainsawman.gesture.repository.user.UserRepository;
 import chainsawman.gesture.security.SecurityUtils;
 import lombok.RequiredArgsConstructor;
-import org.springframework.http.ResponseEntity;
 import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;

src/test/java/chainsawman/gesture/service/CallServiceTest.java

@@ -10,7 +10,7 @@
 import chainsawman.gesture.exceptions.call.CallAlreadyJoinedException;
 import chainsawman.gesture.exceptions.call.CallParticipantNotFoundException;
 import chainsawman.gesture.exceptions.call.NoActiveCallException;
-import chainsawman.gesture.exceptions.room.RoomMemberNotFoundException;
+import chainsawman.gesture.exceptions.room.NotRoomMemberException;
 import chainsawman.gesture.exceptions.room.RoomNotFoundException;
 import chainsawman.gesture.repository.call.CallParticipantRepository;
 import chainsawman.gesture.repository.call.CallRepository;
@@ -73,7 +73,7 @@ void joinCall_creates_new_session_when_no_active_call() {
         given(roomMemberRepository.existsByRoom_IdxAndUser_Idx(10L, 1L)).willReturn(true);
         given(callRepository.findByRoom_IdxAndEndedAtIsNull(10L)).willReturn(Optional.empty());
         given(callRepository.save(any(Call.class))).willReturn(newCall);
-        given(callParticipantRepository.existsByCall_IdxAndUser_IdxAndLeftAtIsNull(100L, 1L)).willReturn(false);
+        given(callParticipantRepository.existsByUser_IdxAndLeftAtIsNull(1L)).willReturn(false);
         given(callParticipantRepository.save(any(CallParticipant.class))).willAnswer(inv -> {
             CallParticipant p = inv.getArgument(0);
             ReflectionTestUtils.setField(p, "joinedAt", LocalDateTime.now());
@@ -100,7 +100,7 @@ void joinCall_joins_existing_session() {
         given(roomRepository.findById(10L)).willReturn(Optional.of(room));
         given(roomMemberRepository.existsByRoom_IdxAndUser_Idx(10L, 1L)).willReturn(true);
         given(callRepository.findByRoom_IdxAndEndedAtIsNull(10L)).willReturn(Optional.of(existingCall));
-        given(callParticipantRepository.existsByCall_IdxAndUser_IdxAndLeftAtIsNull(100L, 1L)).willReturn(false);
+        given(callParticipantRepository.existsByUser_IdxAndLeftAtIsNull(1L)).willReturn(false);
         given(callParticipantRepository.save(any(CallParticipant.class))).willAnswer(inv -> {
             CallParticipant p = inv.getArgument(0);
             ReflectionTestUtils.setField(p, "joinedAt", LocalDateTime.now());
@@ -127,14 +127,14 @@ void joinCall_room_not_found() {
     }
 
     @Test
-    @DisplayName("통화 참여 - 방 멤버가 아니면 RoomMemberNotFoundException")
+    @DisplayName("통화 참여 - 방 멤버가 아니면 NotRoomMemberException")
     void joinCall_not_a_room_member() {
         given(securityUtils.getCurrentUser()).willReturn(user);
         given(roomRepository.findById(10L)).willReturn(Optional.of(room));
         given(roomMemberRepository.existsByRoom_IdxAndUser_Idx(10L, 1L)).willReturn(false);
 
         assertThatThrownBy(() -> callService.joinCall(10L))
-                .isInstanceOf(RoomMemberNotFoundException.class);
+                .isInstanceOf(NotRoomMemberException.class);
     }
 
     @Test
@@ -146,7 +146,7 @@ void joinCall_already_joined() {
         given(roomRepository.findById(10L)).willReturn(Optional.of(room));
         given(roomMemberRepository.existsByRoom_IdxAndUser_Idx(10L, 1L)).willReturn(true);
         given(callRepository.findByRoom_IdxAndEndedAtIsNull(10L)).willReturn(Optional.of(existingCall));
-        given(callParticipantRepository.existsByCall_IdxAndUser_IdxAndLeftAtIsNull(100L, 1L)).willReturn(true);
+        given(callParticipantRepository.existsByUser_IdxAndLeftAtIsNull(1L)).willReturn(true);
 
         assertThatThrownBy(() -> callService.joinCall(10L))
                 .isInstanceOf(CallAlreadyJoinedException.class);

src/test/java/chainsawman/gesture/service/FriendServiceTest.java

@@ -18,6 +18,7 @@
 import chainsawman.gesture.exceptions.user.UserNotFoundException;
 import chainsawman.gesture.repository.friend.FriendInviteRepository;
 import chainsawman.gesture.repository.friend.FriendshipRepository;
+import chainsawman.gesture.repository.room.RoomMemberRepository;
 import chainsawman.gesture.repository.room.RoomRepository;
 import chainsawman.gesture.repository.user.UserRepository;
 import chainsawman.gesture.security.SecurityUtils;
@@ -47,6 +48,7 @@ class FriendServiceTest {
     @Mock FriendInviteRepository friendInviteRepository;
     @Mock UserRepository userRepository;
     @Mock RoomRepository roomRepository;
+    @Mock RoomMemberRepository roomMemberRepository;
     @Mock SecurityUtils securityUtils;
 
     @InjectMocks FriendService friendService;
@@ -81,6 +83,7 @@ void invite_success() {
         given(securityUtils.getCurrentUser()).willReturn(sender);
         given(userRepository.findByIdxAndIsDeactivatedFalse(2L)).willReturn(Optional.of(receiver));
         given(roomRepository.findById(55L)).willReturn(Optional.of(room));
+        given(roomMemberRepository.existsByRoom_IdxAndUser_Idx(55L, 2L)).willReturn(false);
         given(friendInviteRepository.save(any(FriendInvite.class))).willAnswer(inv -> {
             FriendInvite invite = inv.getArgument(0);
             ReflectionTestUtils.setField(invite, "idx", 10L);
@@ -132,6 +135,7 @@ void invite_duplicate_pending() {
         given(securityUtils.getCurrentUser()).willReturn(sender);
         given(userRepository.findByIdxAndIsDeactivatedFalse(2L)).willReturn(Optional.of(receiver));
         given(roomRepository.findById(55L)).willReturn(Optional.of(room));
+        given(roomMemberRepository.existsByRoom_IdxAndUser_Idx(55L, 2L)).willReturn(false);
         given(friendInviteRepository.existsBySender_IdxAndReceiver_IdxAndRoom_IdxAndStatus(
                 1L, 2L, 55L, InvitationStatus.PENDING)).willReturn(true);