Socket: 🔧 Migrating the Socket Module from Java to Kotlin

build.gradle

@@ -1,6 +1,7 @@
 buildscript {
     repositories {
         mavenCentral()
+        gradlePluginPortal()
     }
 }
 
@@ -30,6 +31,7 @@ subprojects {
 
     repositories {
         mavenCentral()
+        gradlePluginPortal()
     }
 
     configurations {

pennyway-socket/build.gradle

@@ -1,5 +1,9 @@
+import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
+
 plugins {
     id 'java'
+    id 'org.jetbrains.kotlin.jvm' version '1.8.21'
+    id 'org.jetbrains.kotlin.plugin.spring' version '1.8.21'
 }
 
 bootJar { enabled = true }
@@ -32,4 +36,12 @@ dependencies {
     implementation group: 'org.openapitools', name: 'jackson-databind-nullable', version: '0.2.6'
 
     implementation 'org.springframework.boot:spring-boot-starter-validation:3.2.3'
+}
+
+tasks.withType(KotlinCompile) {
+    kotlinOptions {
+        freeCompilerArgs = ['-Xjsr305=strict']
+        javaParameters = true
+        jvmTarget = '17'
+    }
 }

pennyway-socket/src/main/java/kr/co/pennyway/PennywaySocketApplication.kt

@@ -0,0 +1,18 @@
+package kr.co.pennyway;
+
+import jakarta.annotation.PostConstruct
+import org.springframework.boot.autoconfigure.SpringBootApplication
+import org.springframework.boot.runApplication
+import java.util.*
+
+@SpringBootApplication
+class PennywaySocketApplication {
+    @PostConstruct
+    fun setDefaultTimeZone() {
+        TimeZone.setDefault(TimeZone.getTimeZone("Asia/Seoul"))
+    }
+}
+
+fun main(args: Array<String>) {
+    runApplication<PennywaySocketApplication>(*args)
+}

pennyway-socket/src/main/java/kr/co/pennyway/socket/common/aop/PreAuthorizeAspect.kt

@@ -0,0 +1,90 @@
+package kr.co.pennyway.socket.common.aop;
+
+import kr.co.pennyway.socket.common.annotation.PreAuthorize
+import kr.co.pennyway.socket.common.exception.PreAuthorizeErrorCode
+import kr.co.pennyway.socket.common.exception.PreAuthorizeErrorException
+import kr.co.pennyway.socket.common.util.PreAuthorizeSpELParser
+import kr.co.pennyway.socket.common.util.logger
+import org.aspectj.lang.ProceedingJoinPoint
+import org.aspectj.lang.annotation.Around
+import org.aspectj.lang.annotation.Aspect
+import org.aspectj.lang.reflect.MethodSignature
+import org.springframework.context.ApplicationContext
+import org.springframework.stereotype.Component
+import java.lang.reflect.Method
+import java.security.Principal
+
+@Aspect
+@Component
+class PreAuthorizeAspect(private val applicationContext: ApplicationContext) {
+    private val log = logger()
+
+    /**
+     * {@link PreAuthorize} 어노테이션이 붙은 메서드를 가로채고 인증/인가를 수행합니다.
+     *
+     * @param joinPoint 가로챈 메서드의 실행 지점
+     * @return 인증/인가가 성공하면 원래 메서드의 실행 결과, 실패하면 UnauthorizedResponse
+     * @throws Throwable 메서드 실행 중 발생한 예외
+     */
+    @Around("@annotation(kr.co.pennyway.socket.common.annotation.PreAuthorize)")
+    fun execute(joinPoint: ProceedingJoinPoint): Any = with(joinPoint) {
+        (signature as? MethodSignature)
+            ?.method
+            ?.let { method -> validateAccess(method, this) }
+            ?: throw IllegalStateException("PreAuthorize는 메서드에만 적용할 수 있습니다")
+    }
+
+    private fun validateAccess(method: Method, joinPoint: ProceedingJoinPoint): Any {
+        val preAuthorize = method.requireAnnotation<PreAuthorize>()
+        val principal = joinPoint.args.findPrincipal()
+
+        evaluateAccess(
+            principal = principal,
+            preAuthorize = preAuthorize,
+            method = method,
+            args = joinPoint.args
+        )
+
+        return joinPoint.proceed()
+    }
+
+    private fun evaluateAccess(
+        principal: Principal?,
+        preAuthorize: PreAuthorize,
+        method: Method,
+        args: Array<Any>
+    ) = PreAuthorizeSpELParser
+        .evaluate(
+            expression = preAuthorize.value,
+            method = method,
+            args = args,
+            applicationContext = applicationContext
+        )
+        .also { result -> handleEvaluationResult(result, principal) }
+
+    private fun handleEvaluationResult(
+        result: PreAuthorizeSpELParser.EvaluationResult,
+        principal: Principal?
+    ) = when (result) {
+        is PreAuthorizeSpELParser.EvaluationResult.Permitted -> Unit
+        is PreAuthorizeSpELParser.EvaluationResult.Denied.Unauthenticated -> {
+            log.warn("인증 실패: {}", principal)
+            throw PreAuthorizeErrorException(PreAuthorizeErrorCode.UNAUTHENTICATED)
+        }
+
+        is PreAuthorizeSpELParser.EvaluationResult.Denied.Unauthorized -> {
+            log.warn("인가 실패: {}", principal)
+            throw PreAuthorizeErrorException(PreAuthorizeErrorCode.FORBIDDEN)
+        }
+    }
+
+    private companion object {
+        inline fun <reified T : Annotation> Method.requireAnnotation(): T =
+            getAnnotation(T::class.java)
+                ?: throw IllegalStateException("Required annotation ${T::class.simpleName} not found")
+
+        fun Array<Any>.findPrincipal(): Principal? = asSequence()
+            .filterIsInstance<Principal>()
+            .firstOrNull()
+    }
+}

pennyway-socket/src/main/java/kr/co/pennyway/socket/common/security/authenticate/UserPrincipal.kt

@@ -0,0 +1,48 @@
+package kr.co.pennyway.socket.common.security.authenticate;
+
+import kr.co.pennyway.domain.domains.user.domain.User
+import kr.co.pennyway.domain.domains.user.type.Role
+import java.security.Principal
+import java.time.LocalDateTime
+
+data class UserPrincipal(
+    val userId: Long,
+    private var _name: String,
+    var username: String,
+    var role: Role,
+    var isChatNotify: Boolean,
+    var expiresAt: LocalDateTime,
+    var deviceId: String,
+    var deviceName: String
+) : Principal {
+    fun isAuthenticated(): Boolean = !isExpired()
+
+    fun updateExpiresAt(newExpiresAt: LocalDateTime) {
+        this.expiresAt = newExpiresAt
+    }
+
+    override fun getName(): String = userId.toString()
+
+    fun getDefaultName(): String = _name
+
+    private fun isExpired(): Boolean = LocalDateTime.now().isAfter(expiresAt)
+
+    companion object {
+        @JvmStatic
+        fun of(
+            user: User,
+            expiresAt: LocalDateTime,
+            deviceId: String,
+            deviceName: String
+        ): UserPrincipal = UserPrincipal(
+            userId = user.id,
+            _name = user.name,
+            username = user.username,
+            role = user.role,
+            isChatNotify = user.notifySetting.isChatNotify,
+            expiresAt = expiresAt,
+            deviceId = deviceId,
+            deviceName = deviceName
+        )
+    }
+}