Merge pull request #115 from EFUB4-Jukebox/feat/auth

[Fix] 쿠키 관련 SameSite 속성 설정
EFUB4-Jukebox · Jul 29, 2024 · 898a5a9 · 898a5a9
2 parents 2a8b979 + 390eb7c
commit 898a5a9
Showing 1 changed file with 16 additions and 12 deletions.
diff --git a/src/main/java/sws/songpin/global/auth/CookieUtil.java b/src/main/java/sws/songpin/global/auth/CookieUtil.java
@@ -24,21 +24,25 @@ public String getCookieValue(HttpServletRequest request, String name){
     }
 
     public void addCookie(HttpServletResponse response, String name, String value, int maxAge){
-        Cookie refreshTokenCookie = new Cookie(name, value);
-        refreshTokenCookie.setHttpOnly(true);
-        refreshTokenCookie.setSecure(true);
-        refreshTokenCookie.setPath("/");
-        refreshTokenCookie.setMaxAge(maxAge);
 
-        response.addCookie(refreshTokenCookie);
+        StringBuilder cookieHeader = new StringBuilder();
+        cookieHeader.append(name).append("=").append(value).append(";");
+        cookieHeader.append("Max-Age=").append(maxAge).append(";");
+        cookieHeader.append("Expires=").append(new java.util.Date(System.currentTimeMillis() + maxAge * 1000L)).append(";");
+        cookieHeader.append("Path=/;");
+        cookieHeader.append("HttpOnly;");
+        cookieHeader.append("Secure;");
+        cookieHeader.append("SameSite=None;");
+
+        response.addHeader("Set-Cookie", cookieHeader.toString());
+
     }
 
     public void deleteCookie(HttpServletResponse response, String name){
-        Cookie refreshTokenCookie = new Cookie(name,null);
-        refreshTokenCookie.setHttpOnly(true);
-        refreshTokenCookie.setPath("/");
-        refreshTokenCookie.setMaxAge(0);
+        Cookie cookie = new Cookie(name,null);
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+        cookie.setMaxAge(0);
 
-        response.addCookie(refreshTokenCookie);
-    }
+        response.addCookie(cookie);}
 }