Feature/mission 09/현

package.json

@@ -14,8 +14,14 @@
     "dotenv": "^17.2.3",
     "express": "^5.1.0",
     "http-status-codes": "^2.3.0",
+    "jsonwebtoken": "^9.0.2",
     "morgan": "^1.10.1",
     "mysql2": "^3.15.3",
-    "prisma": "^6.18.0"
+    "passport": "^0.7.0",
+    "passport-google-oauth20": "^2.0.0",
+    "passport-jwt": "^4.0.1",
+    "prisma": "^6.18.0",
+    "swagger-autogen": "^2.23.7",
+    "swagger-ui-express": "^5.0.1"
   }
 }

prisma/schema.prisma

@@ -24,6 +24,7 @@ model User {
   provider     String?      @db.VarChar(50)
   providerId   String?      @map("provider_id") @db.VarChar(100)
   preferences  UserPrefer[]
+  reviews Review[]
 
   @@map("user")
 }
@@ -75,6 +76,7 @@ model Review {
   body      String?  @db.Text
   createdAt DateTime @default(now()) @map("created_at")
   updatedAt DateTime @updatedAt @map("updated_at")
+  user      User     @relation(fields: [userId], references: [id])
   store     Store    @relation(fields: [storeId], references: [id])
 
   @@index([storeId], map: "review_store_id_fkey")

src/auth.config.js

@@ -0,0 +1,109 @@
+import dotenv from "dotenv";
+import { Strategy as GoogleStrategy } from "passport-google-oauth20";
+import { prisma } from "./db.config.js";
+import jwt from "jsonwebtoken"; // JWT 생성을 위해 import
+import { Strategy as JwtStrategy, ExtractJwt } from "passport-jwt";
+
+dotenv.config();
+const secret = process.env.JWT_SECRET; // .env의 비밀 키
+
+export const generateAccessToken = (user) => {
+  return jwt.sign({ id: Number(user.id), email: user.email }, secret, {
+    expiresIn: "1h",
+  });
+};
+
+export const generateRefreshToken = (user) => {
+  return jwt.sign({ id: Number(user.id) }, secret, { expiresIn: "14d" });
+};
+
+// GoogleVerify
+const googleVerify = async (profile) => {
+  const email = profile.emails?.[0]?.value;
+  if (!email) {
+    throw new Error(`profile.email was not found: ${profile}`);
+  }
+
+  const user = await prisma.user.findFirst({ where: { email } });
+  if (user !== null) {
+    return { id: user.id, email: user.email, name: user.name };
+  }
+
+  const created = await prisma.user.create({
+    data: {
+      email,
+      name: profile.displayName,
+      gender: null,
+      birth: new Date(1970, 0, 1),
+      address: "추후 수정",
+      specAddress: "추후 수정",
+      passwordHash: "GOOGLE_LOGIN",
+      status: null,
+      inactiveDate: null,
+      point: 0,
+      provider: "google",
+      providerId: profile.id,
+    },
+  });
+
+  return { id: created.id, email: created.email, name: created.name };
+};
+
+// GoogleStrategy
+
+export const googleStrategy = new GoogleStrategy(
+  {
+    clientID: process.env.PASSPORT_GOOGLE_CLIENT_ID,
+    clientSecret: process.env.PASSPORT_GOOGLE_CLIENT_SECRET,
+    callbackURL: "/auth/google/callback",
+    scope: ["email", "profile"],
+  },
+
+  async (accessToken, refreshToken, profile, cb) => {
+    try {
+      const user = await googleVerify(profile);
+
+      const jwtAccessToken = generateAccessToken(user);
+      const jwtRefreshToken = generateRefreshToken(user);
+
+      return cb(null, {
+        accessToken: jwtAccessToken,
+        refreshToken: jwtRefreshToken,
+      });
+    } catch (err) {
+      return cb(err);
+    }
+  }
+);
+
+const jwtOptions = {
+  // 요청 헤더의 'Authorization'에서 'Bearer <token>' 토큰을 추출
+  jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+  secretOrKey: process.env.JWT_SECRET,
+};
+
+export const jwtStrategy = new JwtStrategy(
+  jwtOptions,
+  async (payload, done) => {
+    try {
+      const user = await prisma.user.findFirst({
+        where: { id: BigInt(payload.id) },
+      });
+
+      if (!user) {
+        return done(null, false);
+      }
+
+      const safeUser = {
+        id: Number(user.id),
+        email: user.email,
+        name: user.name,
+        provider: user.provider,
+      };
+
+      return done(null, safeUser);
+    } catch (err) {
+      return done(err, false);
+    }
+  }
+);