Phase 2-1: PostgreSQL DB 생성 - 211.208.115.83:5432에 kcgaidb 데이터베이스 생성 - kcg-app 사용자 + kcg 스키마 생성 Phase 2-2: Spring Boot 3.5.7 + Java 21 프로젝트 - gc.mda.kcg.KcgAiApplication 메인 클래스 - 의존성: web, security, data-jpa, validation, postgresql, flyway, actuator, cache, lombok, caffeine, jjwt(0.12.6) - Maven Wrapper 포함, .sdkmanrc로 Java 21 고정 Phase 2-3: application.yml - DataSource: 211.208.115.83/kcgaidb (kcg-app) - JPA: ddl-auto=validate, default_schema=kcg - Flyway: classpath:db/migration, schema=kcg - Caffeine 캐시 (permissions, users) - prediction/iran-backend/cors/jwt 커스텀 설정 - application-local.yml (로컬 디버깅용) Phase 2-4: Flyway 마이그레이션 V001~V005 - V001 auth_init: auth_org, auth_user, auth_role, auth_user_role, auth_login_hist (pgcrypto 확장 포함) - V002 perm_tree: auth_perm_tree, auth_perm, auth_setting (wing 패턴의 트리 기반 RBAC) - V003 perm_seed: 5개 역할(ADMIN/OPERATOR/ANALYST/VIEWER/FIELD) + 13개 Level 0 탭 + 36개 Level 1 패널 (총 49개 리소스) + 역할별 권한 매트릭스 일괄 INSERT - V004 access_logs: auth_audit_log, auth_access_log - V005 parent_workflow: gear_group_parent_resolution, review_log, candidate_exclusions, label_sessions (iran 012/014의 백엔드 쓰기 부분만 이관) Phase 2-5: 빌드 + 기동 검증 완료 - ./mvnw clean compile 성공 - spring-boot:run으로 기동 → Flyway가 V001~V005 자동 적용 - /actuator/health UP 확인 - 14개 테이블 + flyway_schema_history 생성 확인 - ADMIN 245건, OPERATOR 22건, 다른 역할 13건 권한 시드 확인 Phase 2 임시 SecurityConfig: 모든 요청 permitAll (Phase 3에서 JWT 필터 + 트리 기반 권한 체크로 전환 예정) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
190 lines
8.1 KiB
Batchfile
190 lines
8.1 KiB
Batchfile
<# : batch portion
|
|
@REM ----------------------------------------------------------------------------
|
|
@REM Licensed to the Apache Software Foundation (ASF) under one
|
|
@REM or more contributor license agreements. See the NOTICE file
|
|
@REM distributed with this work for additional information
|
|
@REM regarding copyright ownership. The ASF licenses this file
|
|
@REM to you under the Apache License, Version 2.0 (the
|
|
@REM "License"); you may not use this file except in compliance
|
|
@REM with the License. You may obtain a copy of the License at
|
|
@REM
|
|
@REM http://www.apache.org/licenses/LICENSE-2.0
|
|
@REM
|
|
@REM Unless required by applicable law or agreed to in writing,
|
|
@REM software distributed under the License is distributed on an
|
|
@REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
@REM KIND, either express or implied. See the License for the
|
|
@REM specific language governing permissions and limitations
|
|
@REM under the License.
|
|
@REM ----------------------------------------------------------------------------
|
|
|
|
@REM ----------------------------------------------------------------------------
|
|
@REM Apache Maven Wrapper startup batch script, version 3.3.4
|
|
@REM
|
|
@REM Optional ENV vars
|
|
@REM MVNW_REPOURL - repo url base for downloading maven distribution
|
|
@REM MVNW_USERNAME/MVNW_PASSWORD - user and password for downloading maven
|
|
@REM MVNW_VERBOSE - true: enable verbose log; others: silence the output
|
|
@REM ----------------------------------------------------------------------------
|
|
|
|
@IF "%__MVNW_ARG0_NAME__%"=="" (SET __MVNW_ARG0_NAME__=%~nx0)
|
|
@SET __MVNW_CMD__=
|
|
@SET __MVNW_ERROR__=
|
|
@SET __MVNW_PSMODULEP_SAVE=%PSModulePath%
|
|
@SET PSModulePath=
|
|
@FOR /F "usebackq tokens=1* delims==" %%A IN (`powershell -noprofile "& {$scriptDir='%~dp0'; $script='%__MVNW_ARG0_NAME__%'; icm -ScriptBlock ([Scriptblock]::Create((Get-Content -Raw '%~f0'))) -NoNewScope}"`) DO @(
|
|
IF "%%A"=="MVN_CMD" (set __MVNW_CMD__=%%B) ELSE IF "%%B"=="" (echo %%A) ELSE (echo %%A=%%B)
|
|
)
|
|
@SET PSModulePath=%__MVNW_PSMODULEP_SAVE%
|
|
@SET __MVNW_PSMODULEP_SAVE=
|
|
@SET __MVNW_ARG0_NAME__=
|
|
@SET MVNW_USERNAME=
|
|
@SET MVNW_PASSWORD=
|
|
@IF NOT "%__MVNW_CMD__%"=="" ("%__MVNW_CMD__%" %*)
|
|
@echo Cannot start maven from wrapper >&2 && exit /b 1
|
|
@GOTO :EOF
|
|
: end batch / begin powershell #>
|
|
|
|
$ErrorActionPreference = "Stop"
|
|
if ($env:MVNW_VERBOSE -eq "true") {
|
|
$VerbosePreference = "Continue"
|
|
}
|
|
|
|
# calculate distributionUrl, requires .mvn/wrapper/maven-wrapper.properties
|
|
$distributionUrl = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionUrl
|
|
if (!$distributionUrl) {
|
|
Write-Error "cannot read distributionUrl property in $scriptDir/.mvn/wrapper/maven-wrapper.properties"
|
|
}
|
|
|
|
switch -wildcard -casesensitive ( $($distributionUrl -replace '^.*/','') ) {
|
|
"maven-mvnd-*" {
|
|
$USE_MVND = $true
|
|
$distributionUrl = $distributionUrl -replace '-bin\.[^.]*$',"-windows-amd64.zip"
|
|
$MVN_CMD = "mvnd.cmd"
|
|
break
|
|
}
|
|
default {
|
|
$USE_MVND = $false
|
|
$MVN_CMD = $script -replace '^mvnw','mvn'
|
|
break
|
|
}
|
|
}
|
|
|
|
# apply MVNW_REPOURL and calculate MAVEN_HOME
|
|
# maven home pattern: ~/.m2/wrapper/dists/{apache-maven-<version>,maven-mvnd-<version>-<platform>}/<hash>
|
|
if ($env:MVNW_REPOURL) {
|
|
$MVNW_REPO_PATTERN = if ($USE_MVND -eq $False) { "/org/apache/maven/" } else { "/maven/mvnd/" }
|
|
$distributionUrl = "$env:MVNW_REPOURL$MVNW_REPO_PATTERN$($distributionUrl -replace "^.*$MVNW_REPO_PATTERN",'')"
|
|
}
|
|
$distributionUrlName = $distributionUrl -replace '^.*/',''
|
|
$distributionUrlNameMain = $distributionUrlName -replace '\.[^.]*$','' -replace '-bin$',''
|
|
|
|
$MAVEN_M2_PATH = "$HOME/.m2"
|
|
if ($env:MAVEN_USER_HOME) {
|
|
$MAVEN_M2_PATH = "$env:MAVEN_USER_HOME"
|
|
}
|
|
|
|
if (-not (Test-Path -Path $MAVEN_M2_PATH)) {
|
|
New-Item -Path $MAVEN_M2_PATH -ItemType Directory | Out-Null
|
|
}
|
|
|
|
$MAVEN_WRAPPER_DISTS = $null
|
|
if ((Get-Item $MAVEN_M2_PATH).Target[0] -eq $null) {
|
|
$MAVEN_WRAPPER_DISTS = "$MAVEN_M2_PATH/wrapper/dists"
|
|
} else {
|
|
$MAVEN_WRAPPER_DISTS = (Get-Item $MAVEN_M2_PATH).Target[0] + "/wrapper/dists"
|
|
}
|
|
|
|
$MAVEN_HOME_PARENT = "$MAVEN_WRAPPER_DISTS/$distributionUrlNameMain"
|
|
$MAVEN_HOME_NAME = ([System.Security.Cryptography.SHA256]::Create().ComputeHash([byte[]][char[]]$distributionUrl) | ForEach-Object {$_.ToString("x2")}) -join ''
|
|
$MAVEN_HOME = "$MAVEN_HOME_PARENT/$MAVEN_HOME_NAME"
|
|
|
|
if (Test-Path -Path "$MAVEN_HOME" -PathType Container) {
|
|
Write-Verbose "found existing MAVEN_HOME at $MAVEN_HOME"
|
|
Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
|
|
exit $?
|
|
}
|
|
|
|
if (! $distributionUrlNameMain -or ($distributionUrlName -eq $distributionUrlNameMain)) {
|
|
Write-Error "distributionUrl is not valid, must end with *-bin.zip, but found $distributionUrl"
|
|
}
|
|
|
|
# prepare tmp dir
|
|
$TMP_DOWNLOAD_DIR_HOLDER = New-TemporaryFile
|
|
$TMP_DOWNLOAD_DIR = New-Item -Itemtype Directory -Path "$TMP_DOWNLOAD_DIR_HOLDER.dir"
|
|
$TMP_DOWNLOAD_DIR_HOLDER.Delete() | Out-Null
|
|
trap {
|
|
if ($TMP_DOWNLOAD_DIR.Exists) {
|
|
try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
|
|
catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
|
|
}
|
|
}
|
|
|
|
New-Item -Itemtype Directory -Path "$MAVEN_HOME_PARENT" -Force | Out-Null
|
|
|
|
# Download and Install Apache Maven
|
|
Write-Verbose "Couldn't find MAVEN_HOME, downloading and installing it ..."
|
|
Write-Verbose "Downloading from: $distributionUrl"
|
|
Write-Verbose "Downloading to: $TMP_DOWNLOAD_DIR/$distributionUrlName"
|
|
|
|
$webclient = New-Object System.Net.WebClient
|
|
if ($env:MVNW_USERNAME -and $env:MVNW_PASSWORD) {
|
|
$webclient.Credentials = New-Object System.Net.NetworkCredential($env:MVNW_USERNAME, $env:MVNW_PASSWORD)
|
|
}
|
|
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
|
|
$webclient.DownloadFile($distributionUrl, "$TMP_DOWNLOAD_DIR/$distributionUrlName") | Out-Null
|
|
|
|
# If specified, validate the SHA-256 sum of the Maven distribution zip file
|
|
$distributionSha256Sum = (Get-Content -Raw "$scriptDir/.mvn/wrapper/maven-wrapper.properties" | ConvertFrom-StringData).distributionSha256Sum
|
|
if ($distributionSha256Sum) {
|
|
if ($USE_MVND) {
|
|
Write-Error "Checksum validation is not supported for maven-mvnd. `nPlease disable validation by removing 'distributionSha256Sum' from your maven-wrapper.properties."
|
|
}
|
|
Import-Module $PSHOME\Modules\Microsoft.PowerShell.Utility -Function Get-FileHash
|
|
if ((Get-FileHash "$TMP_DOWNLOAD_DIR/$distributionUrlName" -Algorithm SHA256).Hash.ToLower() -ne $distributionSha256Sum) {
|
|
Write-Error "Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised. If you updated your Maven version, you need to update the specified distributionSha256Sum property."
|
|
}
|
|
}
|
|
|
|
# unzip and move
|
|
Expand-Archive "$TMP_DOWNLOAD_DIR/$distributionUrlName" -DestinationPath "$TMP_DOWNLOAD_DIR" | Out-Null
|
|
|
|
# Find the actual extracted directory name (handles snapshots where filename != directory name)
|
|
$actualDistributionDir = ""
|
|
|
|
# First try the expected directory name (for regular distributions)
|
|
$expectedPath = Join-Path "$TMP_DOWNLOAD_DIR" "$distributionUrlNameMain"
|
|
$expectedMvnPath = Join-Path "$expectedPath" "bin/$MVN_CMD"
|
|
if ((Test-Path -Path $expectedPath -PathType Container) -and (Test-Path -Path $expectedMvnPath -PathType Leaf)) {
|
|
$actualDistributionDir = $distributionUrlNameMain
|
|
}
|
|
|
|
# If not found, search for any directory with the Maven executable (for snapshots)
|
|
if (!$actualDistributionDir) {
|
|
Get-ChildItem -Path "$TMP_DOWNLOAD_DIR" -Directory | ForEach-Object {
|
|
$testPath = Join-Path $_.FullName "bin/$MVN_CMD"
|
|
if (Test-Path -Path $testPath -PathType Leaf) {
|
|
$actualDistributionDir = $_.Name
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$actualDistributionDir) {
|
|
Write-Error "Could not find Maven distribution directory in extracted archive"
|
|
}
|
|
|
|
Write-Verbose "Found extracted Maven distribution directory: $actualDistributionDir"
|
|
Rename-Item -Path "$TMP_DOWNLOAD_DIR/$actualDistributionDir" -NewName $MAVEN_HOME_NAME | Out-Null
|
|
try {
|
|
Move-Item -Path "$TMP_DOWNLOAD_DIR/$MAVEN_HOME_NAME" -Destination $MAVEN_HOME_PARENT | Out-Null
|
|
} catch {
|
|
if (! (Test-Path -Path "$MAVEN_HOME" -PathType Container)) {
|
|
Write-Error "fail to move MAVEN_HOME"
|
|
}
|
|
} finally {
|
|
try { Remove-Item $TMP_DOWNLOAD_DIR -Recurse -Force | Out-Null }
|
|
catch { Write-Warning "Cannot remove $TMP_DOWNLOAD_DIR" }
|
|
}
|
|
|
|
Write-Output "MVN_CMD=$MAVEN_HOME/bin/$MVN_CMD"
|