Compare commits

..

17 커밋

작성자 SHA1 메시지 날짜
f96e082ae2 Merge pull request 'fix(auth): 로그아웃 시 프록시 캐시 쿠키 삭제 수정' (#28) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 18s
Reviewed-on: #28
2026-02-19 15:26:14 +09:00
72d77899ab Merge pull request 'fix(auth): 로그아웃 시 프록시 캐시 쿠키 삭제 속성 일치' (#27) from feature/proxy-auth into develop 2026-02-19 15:20:46 +09:00
299d8bd333 fix(auth): 로그아웃 시 프록시 캐시 쿠키 삭제 속성 일치
삭제 쿠키에 Secure, HttpOnly, SameSite 속성 추가하여
원본 쿠키와 매칭되도록 수정 (gc_proxy_auth, GC_SESSION)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-19 15:20:27 +09:00
990e69c7db Merge pull request 'fix(rules): SLF4J 로깅 지침 추가' (#26) from fix/logging-guideline into develop 2026-02-19 07:29:26 +09:00
8535d5e765 Merge pull request 'feat(auth): Nginx 프록시 서비스 인증/권한 체크 (PR #23 포함)' (#24) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 17s
Reviewed-on: #24
2026-02-18 12:56:48 +09:00
983de6a71a Merge pull request 'develop' (#22) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 14s
Reviewed-on: #22
2026-02-17 17:46:13 +09:00
f558e43810 Merge pull request 'feat(audit): API 접근 감사 로그 시스템' (#20) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 18s
Reviewed-on: #20
2026-02-17 17:33:21 +09:00
b39b0df6b9 Merge pull request 'develop → main: Wing 프록시 API + IP 추출 수정' (#18) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 14s
Reviewed-on: #18
2026-02-16 23:52:55 +09:00
f62751229e Merge pull request 'feat(settings): 관리자 설정 기반 신규 사용자 자동승인 + 기본 롤 부여' (#15) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 18s
Reviewed-on: #15
2026-02-16 23:36:32 +09:00
4c837b0ce4 Merge pull request 'fix(cors): wing.gc-si.dev CORS 허용 (application.yml + SecurityConfig)' (#13) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 13s
Reviewed-on: #13
2026-02-16 09:08:24 +09:00
a5f58970a9 Merge pull request 'fix(cors): wing.gc-si.dev CORS 허용 + wing 관련 기능' (#11) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 17s
Reviewed-on: #11
2026-02-16 09:02:38 +09:00
30f0b28460 Merge pull request 'fix(security): 인증 에러 401 응답 + permitAll 패턴 수정' (#9) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 17s
Reviewed-on: #9
2026-02-14 22:06:45 +09:00
c0e33e11d7 Merge pull request 'fix(security): 인증 에러 401 응답 + CORS 헤더 누락 수정' (#8) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 17s
Reviewed-on: #8
2026-02-14 21:55:11 +09:00
e92b0e15ef Merge pull request 'develop' (#7) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 17s
Reviewed-on: #7
2026-02-14 21:38:36 +09:00
57b11774eb Merge pull request 'develop' (#5) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 16s
Reviewed-on: #5
2026-02-14 21:15:16 +09:00
3e918baf74 Merge pull request 'fix: CI/CD 워크플로우 checkout 에러 수정' (#3) from develop into main
All checks were successful
Build and Deploy API / build-and-deploy (push) Successful in 21s
Reviewed-on: #3
2026-02-14 20:21:12 +09:00
acf18221ae Merge pull request 'feat: CI/CD 자동 배포 워크플로우 추가' (#2) from develop into main
Some checks failed
Build and Deploy API / build-and-deploy (push) Failing after 21s
Reviewed-on: #2
2026-02-14 20:15:38 +09:00

파일 보기

@ -227,9 +227,11 @@ public class AuthController {
private void clearSessionCookies(HttpServletResponse response) {
response.addHeader(HttpHeaders.SET_COOKIE,
ResponseCookie.from("GC_SESSION", "").path("/").maxAge(0).build().toString());
ResponseCookie.from("GC_SESSION", "")
.path("/").httpOnly(true).secure(true).sameSite("Lax").maxAge(0).build().toString());
response.addHeader(HttpHeaders.SET_COOKIE,
ResponseCookie.from("gc_proxy_auth", "").path("/").maxAge(0).build().toString());
ResponseCookie.from("gc_proxy_auth", "")
.path("/").httpOnly(true).secure(true).sameSite("Lax").maxAge(0).build().toString());
}
private String getCookieValue(HttpServletRequest request, String name) {