hotfix: 토큰 검증 로직 변경

from google verifier sdk to 직접 토큰 컨텐츠를 검증하는 함수
Donut-DONationUTile · Nov 27, 2024 · 3c82639 · 3c82639
1 parent 7da74c6
commit 3c82639
Showing 1 changed file with 18 additions and 17 deletions.
diff --git a/src/main/java/zero/eight/donut/service/AuthService.java b/src/main/java/zero/eight/donut/service/AuthService.java
@@ -164,30 +164,31 @@ private GoogleIdToken verifyEmail(String googleToken) {
         }
         */
 
-        GoogleIdTokenVerifier verifier = new GoogleIdTokenVerifier.Builder(new NetHttpTransport(), new JacksonFactory())
-                // Specify the CLIENT_ID of the app that accesses the backend:
-                .setAudience(Collections.singletonList(CLIENT_ID))
-                // Or, if multiple clients access the backend:
-                //.setAudience(Arrays.asList(CLIENT_ID_1, CLIENT_ID_2, CLIENT_ID_3))
-                .build();
-        log.info("verifier 생성 -> {}", String.valueOf(verifier));
-
-        try {
-            idToken = verifier.verify(googleToken);
-        } catch (GeneralSecurityException | IOException e) {
-            throw new RuntimeException(e);
-        }
+//        GoogleIdTokenVerifier verifier = new GoogleIdTokenVerifier.Builder(new NetHttpTransport(), new JacksonFactory())
+//                // Specify the CLIENT_ID of the app that accesses the backend:
+//                .setAudience(Collections.singletonList(CLIENT_ID))
+//                // Or, if multiple clients access the backend:
+//                //.setAudience(Arrays.asList(CLIENT_ID_1, CLIENT_ID_2, CLIENT_ID_3))
+//                .build();
+//        log.info("verifier 생성 -> {}", String.valueOf(verifier));
+//
+//        try {
+//
+//            idToken = verifier.verify(googleToken);
+//        } catch (GeneralSecurityException | IOException e) {
+//            throw new RuntimeException(e);
+//        }
 
 
         if (idToken != null) {
 
             log.info("idToken is not null");
             GoogleIdToken.Payload payload = idToken.getPayload();
 
-//            if (!tokenVerifier(payload)) {
-//                log.info("token 검증 결과 유효하지 않음");
-//                return null;
-//            }
+            if (!tokenVerifier(payload)) {
+                log.info("token 검증 결과 유효하지 않음");
+                return null;
+            }
 
             // Print user identifier
             String googleId = payload.getSubject();