feat: 도어용 게스트 티켓 도어 확인 및 유효성 검증 api - #197

src/main/java/com/permitseoul/permitserver/domain/admin/guestticket/core/domain/entity/GuestTicketEntity.java

@@ -7,6 +7,7 @@
 import java.time.LocalDateTime;
 
 @Entity
+@Getter
 @Table(name = "guests_tickets")
 @NoArgsConstructor(access = AccessLevel.PROTECTED)
 public class GuestTicketEntity {

src/main/java/com/permitseoul/permitserver/domain/admin/guestticket/core/repository/GuestTicketRepository.java

@@ -5,6 +5,10 @@
 import org.springframework.data.jpa.repository.JpaRepository;
 import org.springframework.stereotype.Repository;
 
+import java.util.Optional;
+
 @Repository
 public interface GuestTicketRepository extends JpaRepository<GuestTicketEntity, Long> {
+
+    Optional<GuestTicketEntity> findByGuestTicketCode(final String guestTicketCode);
 }

src/main/java/com/permitseoul/permitserver/domain/admin/timetable/base/api/dto/res/TimetableInfoResponse.java

@@ -1,6 +1,7 @@
 package com.permitseoul.permitserver.domain.admin.timetable.base.api.dto.res;
 
 public record TimetableInfoResponse(
+        String eventId,
         long timetableId,
         String timetableStartDate,  // (2025-11-03)
         String timetableStartTime,  //(15:30)
@@ -10,7 +11,8 @@ public record TimetableInfoResponse(
         String notionCategoryDataSourceId,
         String notionStageDataSourceId
 ) {
-    public static TimetableInfoResponse of(final long timetableId,
+    public static TimetableInfoResponse of(final String eventId,
+            final long timetableId,
                                            final String timetableStartDate,
                                            final String timetableStartTime,
                                            final String timetableEndDate,
@@ -19,6 +21,7 @@ public static TimetableInfoResponse of(final long timetableId,
                                            final String notionCategoryDataSourceId,
                                            final String notionStageDataSourceId) {
         return new TimetableInfoResponse(
+                eventId,
                 timetableId,
                 timetableStartDate,
                 timetableStartTime,

src/main/java/com/permitseoul/permitserver/domain/admin/timetable/base/api/service/AdminTimetableService.java

@@ -20,6 +20,7 @@
 import com.permitseoul.permitserver.global.external.notion.exception.NotFoundNotionResponseException;
 import com.permitseoul.permitserver.global.response.code.ErrorCode;
 import com.permitseoul.permitserver.global.util.LocalDateTimeFormatterUtil;
+import com.permitseoul.permitserver.global.util.SecureUrlUtil;
 import feign.FeignException;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Service;
@@ -34,6 +35,7 @@ public class AdminTimetableService {
     private final AdminTimetableFacade adminTimetableFacade;
     private final AdminTimetableRetriever adminTimetableRetriever;
     private final AdminTimetableUpdater adminTimetableUpdater;
+    private final SecureUrlUtil secureUrlUtil;
 
     public void saveInitialTimetableInfo(final long eventId,
                                          final LocalDateTime timetableStartAt,
@@ -94,6 +96,7 @@ public TimetableInfoResponse getTimetableInfo(final long eventId) {
         }
 
         return TimetableInfoResponse.of(
+                secureUrlUtil.encode(eventId),
                 timetable.getTimetableId(),
                 LocalDateTimeFormatterUtil.formatyyyyMMdd(timetable.getStartAt()),
                 LocalDateTimeFormatterUtil.formatHHmm(timetable.getStartAt()),

src/main/java/com/permitseoul/permitserver/domain/admin/util/QrCodeUtil.java

@@ -23,7 +23,7 @@
 public final class QrCodeUtil {
     private static final int QR_SIZE = 256;
     private static final String PNG = "PNG";
-    private static final String URL_PATH = "/entry/";
+    private static final String URL_PATH = "/entry/guest";
 
 
     public static byte[] generatePng(final String baseUrl, final String ticketCode) {

src/main/java/com/permitseoul/permitserver/domain/eventimage/EventImageBaseException.java

@@ -1,4 +1,6 @@
 package com.permitseoul.permitserver.domain.eventimage;
 
-public abstract class EventImageBaseException extends RuntimeException {
+import com.permitseoul.permitserver.global.exception.PermitGlobalException;
+
+public abstract class EventImageBaseException extends PermitGlobalException {
 }

src/main/java/com/permitseoul/permitserver/domain/guest/GuestBaseException.java

@@ -0,0 +1,6 @@
+package com.permitseoul.permitserver.domain.guest;
+
+import com.permitseoul.permitserver.global.exception.PermitGlobalException;
+
+public abstract class GuestBaseException extends PermitGlobalException {
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/GuestExceptionHandler.java

@@ -0,0 +1,17 @@
+package com.permitseoul.permitserver.domain.guest.api;
+
+import com.permitseoul.permitserver.domain.guest.api.exception.GuestApiException;
+import com.permitseoul.permitserver.global.response.ApiResponseUtil;
+import com.permitseoul.permitserver.global.response.BaseResponse;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.ExceptionHandler;
+import org.springframework.web.bind.annotation.RestControllerAdvice;
+
+@RestControllerAdvice(basePackages = "com.permitseoul.permitserver.domain.guest")
+public class GuestExceptionHandler {
+
+    @ExceptionHandler(GuestApiException.class)
+    public ResponseEntity<BaseResponse<?>> handleGuestApiException(final GuestApiException e) {
+        return ApiResponseUtil.failure(e.getErrorCode());
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/controller/GuestController.java

@@ -0,0 +1,36 @@
+package com.permitseoul.permitserver.domain.guest.api.controller;
+
+
+import com.permitseoul.permitserver.domain.guest.api.dto.req.GuestTicketConfirmRequest;
+import com.permitseoul.permitserver.domain.guest.api.service.GuestService;
+import com.permitseoul.permitserver.global.response.ApiResponseUtil;
+import com.permitseoul.permitserver.global.response.BaseResponse;
+import com.permitseoul.permitserver.global.response.code.SuccessCode;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/guests")
+@RequiredArgsConstructor
+public class GuestController {
+    private final GuestService guestService;
+
+    //도어용 게스트 티켓 유효성 검증 api
+    @GetMapping("/tickets/door/validation/{ticketCode}")
+    public ResponseEntity<BaseResponse<?>> validateGuestTicket(
+            @PathVariable final String ticketCode
+    ) {
+        return ApiResponseUtil.success(SuccessCode.OK, guestService.validateGuestTicket(ticketCode));
+    }
+
+    //도어용 게스트 티켓 스텝 확인 api
+    @PostMapping("/tickets/door/staff/confirm")
+    public ResponseEntity<BaseResponse<?>> confirmGuestTicketByStaffAtDoor(
+            @RequestBody @Valid GuestTicketConfirmRequest guestTicketConfirmRequest
+    ) {
+        guestService.confirmGuestTicketByStaff(guestTicketConfirmRequest.ticketCode(), guestTicketConfirmRequest.checkCode());
+        return ApiResponseUtil.success(SuccessCode.OK);
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/dto/req/GuestTicketConfirmRequest.java

@@ -0,0 +1,12 @@
+package com.permitseoul.permitserver.domain.guest.api.dto.req;
+
+import jakarta.validation.constraints.NotBlank;
+
+public record GuestTicketConfirmRequest(
+        @NotBlank(message = "ticketCode가 비어있습니다.")
+        String ticketCode,
+
+        @NotBlank(message = "checkCode가 비어있습니다.")
+        String checkCode
+) {
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/dto/res/GuestTicketValidateResponse.java

@@ -0,0 +1,15 @@
+package com.permitseoul.permitserver.domain.guest.api.dto.res;
+
+import com.fasterxml.jackson.annotation.JsonFormat;
+import com.permitseoul.permitserver.domain.ticket.api.dto.res.DoorValidateUserTicket;
+
+import java.time.LocalDateTime;
+
+public record GuestTicketValidateResponse(
+        String eventName,
+        String ticketName
+) {
+    public static GuestTicketValidateResponse of(final String eventName) {
+        return new GuestTicketValidateResponse(eventName, "Guest Ticket");
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/exception/GuestApiException.java

@@ -0,0 +1,12 @@
+package com.permitseoul.permitserver.domain.guest.api.exception;
+
+import com.permitseoul.permitserver.domain.guest.GuestBaseException;
+import com.permitseoul.permitserver.global.response.code.ErrorCode;
+import lombok.Getter;
+import lombok.RequiredArgsConstructor;
+
+@Getter
+@RequiredArgsConstructor
+public abstract class GuestApiException extends GuestBaseException {
+    private final ErrorCode errorCode;
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/exception/GuestNotFoundException.java

@@ -0,0 +1,9 @@
+package com.permitseoul.permitserver.domain.guest.api.exception;
+
+import com.permitseoul.permitserver.global.response.code.ErrorCode;
+
+public class GuestNotFoundException extends GuestApiException {
+    public GuestNotFoundException(ErrorCode errorCode) {
+        super(errorCode);
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/exception/GuestTicketIllegalException.java

@@ -0,0 +1,9 @@
+package com.permitseoul.permitserver.domain.guest.api.exception;
+
+import com.permitseoul.permitserver.global.response.code.ErrorCode;
+
+public class GuestTicketIllegalException extends GuestApiException{
+    public GuestTicketIllegalException(ErrorCode errorCode) {
+        super(errorCode);
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/api/service/GuestService.java

@@ -0,0 +1,74 @@
+package com.permitseoul.permitserver.domain.guest.api.service;
+
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.GuestTicketStatus;
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.entity.GuestTicketEntity;
+import com.permitseoul.permitserver.domain.admin.guestticket.core.exception.GuestTicketNotFoundException;
+import com.permitseoul.permitserver.domain.event.core.component.EventRetriever;
+import com.permitseoul.permitserver.domain.event.core.domain.Event;
+import com.permitseoul.permitserver.domain.event.core.exception.EventNotfoundException;
+import com.permitseoul.permitserver.domain.guest.api.dto.res.GuestTicketValidateResponse;
+import com.permitseoul.permitserver.domain.guest.api.exception.GuestNotFoundException;
+import com.permitseoul.permitserver.domain.guest.api.exception.GuestTicketIllegalException;
+import com.permitseoul.permitserver.domain.guest.core.component.GuestRetriever;
+import com.permitseoul.permitserver.domain.guest.core.component.GuestUpdater;
+import com.permitseoul.permitserver.domain.guest.core.domain.GuestTicket;
+import com.permitseoul.permitserver.domain.ticket.api.exception.NotFoundTicketException;
+import com.permitseoul.permitserver.domain.ticket.core.exception.TicketNotFoundException;
+import com.permitseoul.permitserver.domain.tickettype.core.exception.TicketTypeNotfoundException;
+import com.permitseoul.permitserver.global.response.code.ErrorCode;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.Objects;
+
+@Service
+@RequiredArgsConstructor
+public class GuestService {
+    private final GuestRetriever guestRetriever;
+    private final EventRetriever eventRetriever;
+    private final GuestUpdater guestUpdater;
+
+    public GuestTicketValidateResponse validateGuestTicket(final String ticketCode) {
+        try {
+            final GuestTicket guestTicket = guestRetriever.findGuestTicketByTicketCode(ticketCode);
+            validateGuestTicketStatus(guestTicket.getStatus());
+
+            final Event event = eventRetriever.findEventById(guestTicket.getEventId());
+            return GuestTicketValidateResponse.of(event.getName());
+        } catch (GuestTicketNotFoundException e) {
+            throw new GuestNotFoundException(ErrorCode.NOT_FOUND_GUEST_TICKET);
+        } catch (EventNotfoundException e) {
+            throw new GuestNotFoundException(ErrorCode.NOT_FOUND_EVENT);
+        }
+    }
+
+    @Transactional
+    public void confirmGuestTicketByStaff(final String ticketCode, final String checkCodeFromStaff) {
+        try {
+            final GuestTicketEntity guestTicketEntity = guestRetriever.findGuestTicketEntityByTicketCode(ticketCode);
+            validateGuestTicketStatus(guestTicketEntity.getStatus());
+
+            final Event event = eventRetriever.findEventById(guestTicketEntity.getEventId());
+            validateGuestTicketByCheckCode(event.getTicketCheckCode(), checkCodeFromStaff);
+
+            guestUpdater.updateGuestTicketStatus(guestTicketEntity, GuestTicketStatus.USED);
+        } catch (GuestTicketNotFoundException e) {
+            throw new GuestNotFoundException(ErrorCode.NOT_FOUND_GUEST_TICKET);
+        } catch (EventNotfoundException e) {
+            throw new GuestNotFoundException(ErrorCode.NOT_FOUND_EVENT);
+        }
+    }
+
+    private void validateGuestTicketStatus(final GuestTicketStatus status) {
+        if(status == GuestTicketStatus.USED) {
+            throw new GuestTicketIllegalException(ErrorCode.CONFLICT_ALREADY_USED_TICKET);
+        }
+    }
+
+    private void validateGuestTicketByCheckCode(final String checkCode, final String checkCodeFromStaff) {
+        if(!Objects.equals(checkCode, checkCodeFromStaff)) {
+            throw new GuestTicketIllegalException(ErrorCode.BAD_REQUEST_TICKET_CHECK_CODE_ERROR);
+        }
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/core/component/GuestRetriever.java

@@ -0,0 +1,22 @@
+package com.permitseoul.permitserver.domain.guest.core.component;
+
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.entity.GuestTicketEntity;
+import com.permitseoul.permitserver.domain.admin.guestticket.core.exception.GuestTicketNotFoundException;
+import com.permitseoul.permitserver.domain.admin.guestticket.core.repository.GuestTicketRepository;
+import com.permitseoul.permitserver.domain.guest.core.domain.GuestTicket;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Component;
+
+@Component
+@RequiredArgsConstructor
+public class GuestRetriever {
+    private final GuestTicketRepository guestTicketRepository;
+
+    public GuestTicket findGuestTicketByTicketCode(final String ticketCode) {
+        return GuestTicket.fromEntity(guestTicketRepository.findByGuestTicketCode(ticketCode).orElseThrow(GuestTicketNotFoundException::new));
+    }
+
+    public GuestTicketEntity findGuestTicketEntityByTicketCode(final String ticketCode) {
+        return guestTicketRepository.findByGuestTicketCode(ticketCode).orElseThrow(GuestTicketNotFoundException::new);
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/core/component/GuestUpdater.java

@@ -0,0 +1,13 @@
+package com.permitseoul.permitserver.domain.guest.core.component;
+
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.GuestTicketStatus;
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.entity.GuestTicketEntity;
+import org.springframework.stereotype.Component;
+
+@Component
+public class GuestUpdater {
+
+    public void updateGuestTicketStatus(final GuestTicketEntity guestTicketEntity, final GuestTicketStatus guestTicketStatus) {
+        guestTicketEntity.updateStatus(guestTicketStatus);
+    }
+}

src/main/java/com/permitseoul/permitserver/domain/guest/core/domain/GuestTicket.java

@@ -0,0 +1,30 @@
+package com.permitseoul.permitserver.domain.guest.core.domain;
+
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.GuestTicketStatus;
+import com.permitseoul.permitserver.domain.admin.guestticket.core.domain.entity.GuestTicketEntity;
+import lombok.Getter;
+import lombok.RequiredArgsConstructor;
+
+import java.time.LocalDateTime;
+
+@Getter
+@RequiredArgsConstructor
+public class GuestTicket {
+    private final Long guestTicketId;
+    private final long eventId;
+    private final long guestId;
+    private final String guestTicketCode;
+    private final GuestTicketStatus status;
+    private final LocalDateTime usedTime;
+
+    public static GuestTicket fromEntity(final GuestTicketEntity guestTicketEntity) {
+        return new GuestTicket(
+                guestTicketEntity.getGuestTicketId(),
+                guestTicketEntity.getEventId(),
+                guestTicketEntity.getGuestId(),
+                guestTicketEntity.getGuestTicketCode(),
+                guestTicketEntity.getStatus(),
+                guestTicketEntity.getUsedTime()
+        );
+    }
+}

src/main/java/com/permitseoul/permitserver/global/config/SecurityConfig.java

@@ -39,7 +39,8 @@ public class SecurityConfig {
             "/api/tickets/info/*",
             "/api/tickets/door/staff/confirm",
             "/api/tickets/door/validation/*",
-            "/api/notion/**"
+            "/api/notion/**",
+            "api/guests/**"
     };
 
     private static final String[] adminURIList = {