fix: 리프레시 토큰 만료 시 리프레시 토큰 담은 쿠키 Expire

Collusic · Mar 19, 2024 · 4418a44 · 4418a44
1 parent ed8a4f7
commit 4418a44
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/...ollusic-be/src/main/java/com/collusic/collusicbe/global/auth/JWTAuthenticationFilter.java b/...ollusic-be/src/main/java/com/collusic/collusicbe/global/auth/JWTAuthenticationFilter.java
@@ -80,6 +80,7 @@ private void authenticateWithRefreshToken(HttpServletRequest request, HttpServle
             chain.doFilter(request, response);
         } catch (ExpiredTokenException | EntityNotFoundException | AbnormalAccessException e) {
             tokenService.deleteRefreshToken(refreshToken);
+            CookieUtils.expireCookie(response, "refreshToken");
             throw e;
         }
     }

diff --git a/server/collusic-be/src/main/java/com/collusic/collusicbe/global/util/JWTUtil.java b/server/collusic-be/src/main/java/com/collusic/collusicbe/global/util/JWTUtil.java
@@ -22,8 +22,8 @@ public class JWTUtil {
     //    public static final int REFRESH_TIME = 60 * 60 * 24 * 7;
     public static final int REFRESH_TIME = 15;
     public static final String KEY = "collusic-new";
-//    private static final int ACCESS_TIME = 60 * 60;
-private static final int ACCESS_TIME = 15;
+    //    private static final int ACCESS_TIME = 60 * 60;
+    private static final int ACCESS_TIME = 15;
 
     public static String createAccessToken(String email, String role) {
         return Jwts.builder()