@Data
@NoArgsConstructor
@AllArgsConstructor
@Builder
@Entity
public class Member {
    private int id;
    private String userName;
    private String password;
    private String email;
}

public interface MemberRepository extends JpaRepository<Member, Integer>{

}

/**
 * JPA specific extension of {@link org.springframework.data.repository.Repository}.
 *
 * @author Oliver Gierke
 * @author Christoph Strobl
 * @author Mark Paluch
 * @author Sander Krabbenborg
 * @author Jesse Wouters
 * @author Greg Turnquist
 * @author Jens Schauder
 */
@NoRepositoryBean
public interface JpaRepository<T, ID> extends ListCrudRepository<T, ID>, ListPagingAndSortingRepository<T, ID>, QueryByExampleExecutor<T> {

	/**
	 * Flushes all pending changes to the database.
	 */
	void flush();

	/**
	 * Saves an entity and flushes changes instantly.
	 *
	 * @param entity entity to be saved. Must not be {@literal null}.
	 * @return the saved entity
	 */
	<S extends T> S saveAndFlush(S entity);

	/**
	 * Saves all entities and flushes changes instantly.
	 *
	 * @param entities entities to be saved. Must not be {@literal null}.
	 * @return the saved entities
	 * @since 2.5
	 */
	<S extends T> List<S> saveAllAndFlush(Iterable<S> entities);

	/**
	 * Deletes the given entities in a batch which means it will create a single query. This kind of operation leaves JPAs
	 * first level cache and the database out of sync. Consider flushing the {@link EntityManager} before calling this
	 * method.
	 *
	 * @param entities entities to be deleted. Must not be {@literal null}.
	 * @deprecated Use {@link #deleteAllInBatch(Iterable)} instead.
	 */
	@Deprecated
	default void deleteInBatch(Iterable<T> entities) {
		deleteAllInBatch(entities);
	}

	/**
	 * Deletes the given entities in a batch which means it will create a single query. This kind of operation leaves JPAs
	 * first level cache and the database out of sync. Consider flushing the {@link EntityManager} before calling this
	 * method.
	 *
	 * @param entities entities to be deleted. Must not be {@literal null}.
	 * @since 2.5
	 */
	void deleteAllInBatch(Iterable<T> entities);

	/**
	 * Deletes the entities identified by the given ids using a single query. This kind of operation leaves JPAs first
	 * level cache and the database out of sync. Consider flushing the {@link EntityManager} before calling this method.
	 *
	 * @param ids the ids of the entities to be deleted. Must not be {@literal null}.
	 * @since 2.5
	 */
	void deleteAllByIdInBatch(Iterable<ID> ids);

	/**
	 * Deletes all entities in a batch call.
	 */
	void deleteAllInBatch();

	/**
	 * Returns a reference to the entity with the given identifier. Depending on how the JPA persistence provider is
	 * implemented this is very likely to always return an instance and throw an
	 * {@link jakarta.persistence.EntityNotFoundException} on first access. Some of them will reject invalid identifiers
	 * immediately.
	 *
	 * @param id must not be {@literal null}.
	 * @return a reference to the entity with the given identifier.
	 * @see EntityManager#getReference(Class, Object) for details on when an exception is thrown.
	 * @deprecated use {@link JpaRepository#getReferenceById(ID)} instead.
	 */
	@Deprecated
	T getOne(ID id);

	/**
	 * Returns a reference to the entity with the given identifier. Depending on how the JPA persistence provider is
	 * implemented this is very likely to always return an instance and throw an
	 * {@link jakarta.persistence.EntityNotFoundException} on first access. Some of them will reject invalid identifiers
	 * immediately.
	 *
	 * @param id must not be {@literal null}.
	 * @return a reference to the entity with the given identifier.
	 * @see EntityManager#getReference(Class, Object) for details on when an exception is thrown.
	 * @deprecated use {@link JpaRepository#getReferenceById(ID)} instead.
	 * @since 2.5
	 */
	@Deprecated
	T getById(ID id);

	/**
	 * Returns a reference to the entity with the given identifier. Depending on how the JPA persistence provider is
	 * implemented this is very likely to always return an instance and throw an
	 * {@link jakarta.persistence.EntityNotFoundException} on first access. Some of them will reject invalid identifiers
	 * immediately.
	 *
	 * @param id must not be {@literal null}.
	 * @return a reference to the entity with the given identifier.
	 * @see EntityManager#getReference(Class, Object) for details on when an exception is thrown.
	 * @since 2.7
	 */
	T getReferenceById(ID id);

	/*
	 * (non-Javadoc)
	 * @see org.springframework.data.repository.query.QueryByExampleExecutor#findAll(org.springframework.data.domain.Example)
	 */
	@Override
	<S extends T> List<S> findAll(Example<S> example);

	@Override
	<S extends T> List<S> findAll(Example<S> example, Sort sort);
}

@Service
public class DefaultMemberService implements MemberService {

    @Autowired
    private MemberRepository repository;


    @Override
    public boolean isValid(String userName, String password) {
        Optional<Member> member = repository.findById(1);

        if(!member.isEmpty())
            System.out.println(member.toString());
    
        return false;
    }
    
}

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.jpa.repository.JpaRepository;
import org.springframework.data.jpa.repository.Query;

import kr.co.rland.rlandapiboot3.entity.Member;

public interface MemberRepository extends JpaRepository<Member, Integer>{

    // JPQL : 초기 Mybatis와 같은 형식!이다. 복잡한 쿼리에서 사용한다. 지저분해진다.
    @Query("from member where username = :username")
    Member findByUserName(String string);
}

logging.level.org.hibernat.SQL=DEBUG
spring.jpa.properties.hibernate.format_sql=true

@Configuration
public class RlandSecurityConfig {
    
    // 인증 '필터' 추가하기!!(수문장)
    // 1. 내가 원하는 URL만 보안 설정하자! 
    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception{

        // 2. 역할자에 따라서 권한을 부여해라!
        // 1) .csrf().disable() : cors 설정도 풀어줘야 한다    .
        http
        .csrf().disable()
        .authorizeHttpRequests(authorize->authorize
                .requestMatchers("/admin/**").hasAnyRole("ADMIN")
                .requestMatchers("/member/**").hasAnyRole("ADMIN","MEMBER")
                .anyRequest().permitAll());
        
        return http.build();
    }

    // 위에 설정까지만 하면 회원이 있는지 설정해줘야 한다!
    // 이렇게 여기서 설정해주거나 RlandUserDetailService에서 @Service로 설정해준다.
    // @Bean
    // public UserDetailsService userDetailsService(){

    //     return new RlandUserDetailService();
    // }
}

// Entity인 데이터를 담는 그릇 느낌이다. **

@AllArgsConstructor
@NoArgsConstructor
@ToString
@Builder
public class RlandUserDetails implements UserDetails {
    private int id;
    private String username;
    private String password;
    private String email;
    private List<GrantedAuthority> authorities;
    
    public void setId(int id) {
        this.id = id;
    }

    public void setUsername(String username) {
        this.username = username;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    public void setEmail(String email) {
        this.email = email;
    }

    public void setAuthorities(List<GrantedAuthority> authorities) {
        this.authorities = authorities;
    }

    @Override
    public String getPassword() {
        return password;
    }

    @Override
    public String getUsername() {
        return username;
    }

    public int getId() {
        return id;
    }

    public String getEmail() {
        return email;
    }

    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        return authorities;
    }

    @Override
    public boolean isAccountNonExpired() {
        return true;
    }

    @Override
    public boolean isAccountNonLocked() {
        return true;
    }

    @Override
    public boolean isCredentialsNonExpired() {
        return true;
    }

    @Override
    public boolean isEnabled() {
        return true;
    }


}

@Service
public class RlandUserDetailService implements UserDetailsService {

    @Autowired
    private MemberRepository repository;
    
    @Override
    public UserDetails loadUserByUsername(String username) {


        Member member = repository.findByUserName(username);
        List<GrantedAuthority> authorities = new ArrayList<>();
        authorities.add(new SimpleGrantedAuthority("ROLE_ADMIN"));

        // 스프링 시큐리티용 그릇을 인스턴스로 생성해서 기존 사용자가 만든 entity에 데이터 set 시키기 
        RlandUserDetails user = new RlandUserDetails();
        
        // 빌더 이용해보기!
        user.builder()
        .id(member.getId())
        .username(member.getUserName())
        .password(member.getPwd())
        .email(member.getEmail())
        .authorities(authorities)
        .build();

        return user;
    }
    
}

public interface MemberService {

    boolean isValid(String userName, String password);
    
}

@Service
public class DefaultMemberService implements MemberService{

    @Autowired
    private MemberRepository repository;

    @Override
    public boolean isValid(String userName, String password) {
        // Optional<Member> member= repository.findById(1);

        // 암호화시 인코더 필요! 암호화를 안하면, 평문으로 비밀번호가 DB에 insert
        // new BcryptPasswordEncoder().encode();

       Member member= repository.findByUserName(userName);
    //    System.out.println(member.toString());
        
        if(member == null)
           return false;
        else if(!BCrypt.checkpw(password, member.getPwd()))
            return false;
        
        
        return true;
    }
    
}     

@RestController
@RequestMapping("members") 
public class MemberController {

    @Autowired
    private MemberService service;

    @GetMapping("isvalid")
    public ResponseEntity<Map<String, Object>> isValid(String userName, String password){

        Map<String, Object> dto = new HashMap<>();

        dto.put("result",false);

        // ** DB 이용시 사용하기! **
        if(service.isValid(userName, password))
            dto.put("result", true);

        return new ResponseEntity<Map<String, Object>>(dto, HttpStatus.OK);
    }

}

@RestController
@RequestMapping("members") 
public class MemberController {

    @Autowired
    private MemberService service;

    @PostMapping("login")
    public ResponseEntity<Map<String, Object>> login(
        String username, 
        String password){

        System.out.println(username);
        Map<String, Object> dto = new HashMap<>();

        dto.put("result",null);

        // ** DB 이용시 사용하기! **
        if(service.isValid(username, password)){
            Member member = service.getUsername(username);
            dto.put("result", member);
        }

        return new ResponseEntity<Map<String, Object>>(dto, HttpStatus.OK);
    }
}

public interface MemberService {

    boolean isValid(String userName, String password);

    Member getUsername(String username);
    
}

@Service
public class DefaultMemberService implements MemberService{

    @Autowired
    private MemberRepository repository;

    @Override
    public boolean isValid(String userName, String password) {
        // Optional<Member> member= repository.findById(1);

        // 암호화시 인코더 필요! 암호화를 안하면, 평문으로 비밀번호가 DB에 insert
        // new BcryptPasswordEncoder().encode();

       Member member= repository.findByUserName(userName);
    //    System.out.println(member.toString());
        
        if(member == null)
           return false;
        else if(!BCrypt.checkpw(password, member.getPwd()))
            return false;
        
        
        return true;
    }

    @Override
    public Member getUsername(String username) {
        return repository.findByUserName(username);
    }
    
}

       

package kr.co.rland.rlandapiboot3.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration
public class CORSConfig {
    
    @Bean
    WebMvcConfigurer webMvcConfigurer(){
        WebMvcConfigurer configurer = new WebMvcConfigurer() {
            @Override
            public void addCorsMappings(CorsRegistry registry) {
                registry.addMapping("/**").allowedOrigins("*");
            }
        };
        return configurer;
    } 
}