Merge pull request #226 from songbuild00/feature-be-#74#77

[BE] feat#74#77 회원가입, 로그인 구현

BE/package.json

@@ -34,18 +34,24 @@
     "@nestjs/common": "^10.4.7",
     "@nestjs/config": "^3.3.0",
     "@nestjs/core": "^10.4.7",
+    "@nestjs/jwt": "^10.2.0",
     "@nestjs/mapped-types": "*",
+    "@nestjs/passport": "^10.0.3",
     "@nestjs/platform-express": "^10.0.0",
     "@nestjs/platform-socket.io": "^10.4.6",
     "@nestjs/swagger": "^8.0.5",
     "@nestjs/typeorm": "^10.0.2",
     "@nestjs/websockets": "^10.4.7",
     "axios": "^1.7.7",
+    "bcrypt": "^5.1.1",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "dotenv": "^16.4.5",
     "ioredis": "^5.4.1",
     "mysql2": "^3.11.4",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "passport-local": "^1.0.0",
     "redis": "^4.7.0",
     "reflect-metadata": "^0.2.0",
     "rxjs": "^7.8.1",
@@ -56,10 +62,13 @@
     "@nestjs/cli": "^10.0.0",
     "@nestjs/schematics": "^10.0.0",
     "@nestjs/testing": "^10.4.6",
+    "@types/bcrypt": "^5.0.2",
     "@types/express": "^4.17.17",
     "@types/ioredis-mock": "^8.2.5",
     "@types/jest": "^29.5.2",
     "@types/node": "^20.3.1",
+    "@types/passport-jwt": "^4.0.1",
+    "@types/passport-local": "^1.0.38",
     "@types/socket.io": "^3.0.2",
     "@types/supertest": "^6.0.0",
     "@typescript-eslint/eslint-plugin": "^7.0.0",

BE/src/app.module.ts

@@ -14,6 +14,7 @@ import { InitDBModule } from './InitDB/InitDB.module';
 import { UserModule } from './user/user.module';
 import { QuizSetModule } from './quiz-set/quiz-set.module';
 import { WaitingRoomModule } from './waiting-room/waiting-room.module';
+import { AuthModule } from './auth/auth.module';
 
 @Module({
   imports: [
@@ -45,7 +46,8 @@ import { WaitingRoomModule } from './waiting-room/waiting-room.module';
     QuizSetModule,
     UserModule,
     InitDBModule,
-    WaitingRoomModule
+    WaitingRoomModule,
+    AuthModule
   ],
   controllers: [AppController],
   providers: [AppService]

BE/src/auth/auth.controller.spec.ts

@@ -0,0 +1,18 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { AuthController } from './auth.controller';
+
+describe('AuthController', () => {
+  let controller: AuthController;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      controllers: [AuthController]
+    }).compile();
+
+    controller = module.get<AuthController>(AuthController);
+  });
+
+  it('should be defined', () => {
+    expect(controller).toBeDefined();
+  });
+});

BE/src/auth/auth.controller.ts

@@ -0,0 +1,27 @@
+import { Body, Controller, Get, Post, Request, UseGuards } from '@nestjs/common';
+import { AuthService } from './auth.service';
+import { LocalAuthGuard } from './guard/local-auth.guard';
+import { JwtAuthGuard } from './guard/jwt-auth.guard';
+import { SignupDto } from './dto/signup.dto';
+
+@Controller('/api/auth')
+export class AuthController {
+  constructor(private authService: AuthService) {}
+
+  @Post('signup')
+  async signup(@Body() signupDto: SignupDto) {
+    return this.authService.signup(signupDto);
+  }
+
+  @UseGuards(LocalAuthGuard)
+  @Post('login')
+  async login(@Request() req) {
+    return this.authService.login(req.user);
+  }
+
+  @UseGuards(JwtAuthGuard)
+  @Get('profile')
+  async profile(@Request() req) {
+    return req.user;
+  }
+}

BE/src/auth/auth.module.ts

@@ -0,0 +1,26 @@
+import { Module } from '@nestjs/common';
+import { AuthService } from './auth.service';
+import { AuthController } from './auth.controller';
+import { UserModule } from '../user/user.module';
+import { PassportModule } from '@nestjs/passport';
+import { JwtModule } from '@nestjs/jwt';
+import { JwtStrategy } from './guard/jwt.strategy';
+import { LocalStrategy } from './guard/local.strategy';
+import { ConfigModule } from '@nestjs/config';
+
+@Module({
+  imports: [
+    UserModule,
+    PassportModule,
+    JwtModule.registerAsync({
+      imports: [ConfigModule],
+      useFactory: () => ({
+        secret: process.env.JWT_SECRET || 'SECRET_KEY',
+        signOptions: { expiresIn: '1d' }
+      })
+    })
+  ],
+  providers: [AuthService, LocalStrategy, JwtStrategy],
+  controllers: [AuthController]
+})
+export class AuthModule {}

BE/src/auth/auth.service.spec.ts

@@ -0,0 +1,18 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { AuthService } from './auth.service';
+
+describe('AuthService', () => {
+  let service: AuthService;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      providers: [AuthService],
+    }).compile();
+
+    service = module.get<AuthService>(AuthService);
+  });
+
+  it('should be defined', () => {
+    expect(service).toBeDefined();
+  });
+});

BE/src/auth/auth.service.ts

@@ -0,0 +1,45 @@
+import { Injectable } from '@nestjs/common';
+import { UserService } from '../user/user.service';
+import { JwtService } from '@nestjs/jwt';
+import { UserModel } from '../user/entities/user.entity';
+import * as bcrypt from 'bcrypt';
+import { SignupDto } from './dto/signup.dto';
+
+@Injectable()
+export class AuthService {
+  constructor(
+    private userService: UserService,
+    private jwtService: JwtService
+  ) {}
+
+  async validateUserInLocal(email: string, password: string) {
+    const user = await this.userService.findOne(email);
+    if (user && (await bcrypt.compare(password, user.password))) {
+      return user;
+    }
+    return null;
+  }
+
+  async validateUserInJwt(id: number, email: string) {
+    const user = await this.userService.findOne(email);
+    if (user && user.id === id) {
+      return user;
+    }
+    return null;
+  }
+
+  async login(user: UserModel) {
+    const payload = { sub: user.id, email: user.email };
+    return {
+      access_token: this.jwtService.sign(payload)
+    };
+  }
+
+  async signup(signupDto: SignupDto) {
+    const user = await this.userService.create(signupDto);
+    if (user) {
+      return user;
+    }
+    return null;
+  }
+}

BE/src/auth/dto/signup.dto.ts

@@ -0,0 +1,12 @@
+import { IsEmail, IsString } from 'class-validator';
+
+export class SignupDto {
+  @IsEmail()
+  email: string;
+
+  @IsString()
+  password: string;
+
+  @IsString()
+  nickname: string;
+}

BE/src/auth/guard/jwt-auth.guard.ts

@@ -0,0 +1,5 @@
+import { AuthGuard } from '@nestjs/passport';
+import { Injectable } from '@nestjs/common';
+
+@Injectable()
+export class JwtAuthGuard extends AuthGuard('jwt') {}

BE/src/auth/guard/jwt.strategy.ts

@@ -0,0 +1,24 @@
+import { ExtractJwt, Strategy } from 'passport-jwt';
+import { PassportStrategy } from '@nestjs/passport';
+import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { AuthService } from '../auth.service';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy) {
+  constructor(private authService: AuthService) {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: process.env.JWT_SECRET || 'SECRET_KEY'
+    });
+  }
+
+  async validate(payload: any) {
+    console.log(`TEST VALIDATE ${payload}`);
+    const user = await this.authService.validateUserInJwt(payload.sub, payload.username);
+    if (!user) {
+      throw new UnauthorizedException('잘못된 토큰입니다.');
+    }
+    return user;
+  }
+}

BE/src/auth/guard/local-auth.guard.ts

@@ -0,0 +1,5 @@
+import { Injectable } from '@nestjs/common';
+import { AuthGuard } from '@nestjs/passport';
+
+@Injectable()
+export class LocalAuthGuard extends AuthGuard('local') {}

BE/src/auth/guard/local.strategy.ts

@@ -0,0 +1,19 @@
+import { Strategy } from 'passport-local';
+import { PassportStrategy } from '@nestjs/passport';
+import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { AuthService } from '../auth.service';
+
+@Injectable()
+export class LocalStrategy extends PassportStrategy(Strategy) {
+  constructor(private authService: AuthService) {
+    super({ usernameField: 'email', passwordField: 'password' });
+  }
+
+  async validate(email: string, password: string): Promise<any> {
+    const user = await this.authService.validateUserInLocal(email, password);
+    if (!user) {
+      throw new UnauthorizedException('이메일 혹은 비밀번호를 확인해주세요.');
+    }
+    return user;
+  }
+}

BE/src/user/user.module.ts

@@ -1,13 +1,11 @@
 import { Module } from '@nestjs/common';
 import { UserService } from './user.service';
-import { UserController } from './user.controller';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { UserModel } from './entities/user.entity';
 import { UserQuizArchiveModel } from './entities/user-quiz-archive.entity';
 
 @Module({
   imports: [TypeOrmModule.forFeature([UserModel, UserQuizArchiveModel])],
-  controllers: [UserController],
   providers: [UserService],
   exports: [UserService]
 })

BE/src/user/user.service.ts

@@ -1,26 +1,36 @@
 import { Injectable } from '@nestjs/common';
-import { CreateUserDto } from './dto/create-user.dto';
-import { UpdateUserDto } from './dto/update-user.dto';
+import { Repository } from 'typeorm';
+import { InjectRepository } from '@nestjs/typeorm';
+import { UserModel } from './entities/user.entity';
+import * as bcrypt from 'bcrypt';
+import { SignupDto } from '../auth/dto/signup.dto';
 
 @Injectable()
 export class UserService {
-  create(createUserDto: CreateUserDto) {
-    return 'This action adds a new user';
-  }
-
-  findAll() {
-    return `This action returns all user`;
-  }
-
-  findOne(id: number) {
-    return `This action returns a #${id} user`;
-  }
+  constructor(
+    @InjectRepository(UserModel)
+    private readonly userRepository: Repository<UserModel>
+  ) {}
 
-  update(id: number, updateUserDto: UpdateUserDto) {
-    return `This action updates a #${id} user`;
+  async create(signupDto: SignupDto) {
+    const salt = await bcrypt.genSalt();
+    const hashedPassword = await bcrypt.hash(signupDto.password, salt);
+    const newUser = this.userRepository.create({
+      email: signupDto.email,
+      password: hashedPassword,
+      nickname: signupDto.nickname,
+      status: '?'
+    });
+    return this.userRepository.save(newUser);
   }
 
-  remove(id: number) {
-    return `This action removes a #${id} user`;
+  async findOne(email: string) {
+    const user = await this.userRepository.findOne({
+      where: { email }
+    });
+    if (!user) {
+      return null;
+    }
+    return user;
   }
 }