fix(admin): 운영 서버 관리자 로그인 실패 대응 (#181)

관리자 비밀번호 비교 시 앞뒤 공백을 제거하고, 로그인 실패 기본 메시지에 HTTP 상태 코드를 표시하도록 수정

Author: 1Seob

.github/workflows/deploy-to-dev-ec2.yml

@@ -147,7 +147,7 @@ jobs:
             ANTHROPIC_API_KEY="${{ secrets.ANTHROPIC_API_KEY }}" \
             GOOGLE_GENAI_API_KEY="${{ secrets.GOOGLE_GENAI_API_KEY }}" \
             FIREBASE_ADMIN_KEY="${{ secrets.FIREBASE_ADMIN_KEY }}" \
-            ADMIN_PAGE_PASSWORD="${{ secrets.ADMIN_PAGE_PASSWORD }}" \
+            ADMIN_PAGE_PASSWORD='${{ secrets.ADMIN_PAGE_PASSWORD }}' \
             DEV_TEST_ACCOUNT_PASSWORD="${{ secrets.DEV_TEST_ACCOUNT_PASSWORD }}" \
             nohup java -jar "$JAR_PATH" \
               --spring.profiles.active=dev > app.log 2>&1 &

.github/workflows/deploy-to-prod-ec2.yml

@@ -144,7 +144,7 @@ jobs:
             ANTHROPIC_API_KEY="${{ secrets.ANTHROPIC_API_KEY }}" \
             GOOGLE_GENAI_API_KEY="${{ secrets.GOOGLE_GENAI_API_KEY }}" \
             FIREBASE_ADMIN_KEY="${{ secrets.FIREBASE_ADMIN_KEY }}" \
-            ADMIN_PAGE_PASSWORD="${{ secrets.ADMIN_PAGE_PASSWORD }}" \
+            ADMIN_PAGE_PASSWORD='${{ secrets.ADMIN_PAGE_PASSWORD }}' \
             nohup java -jar "$JAR_PATH" \
               --spring.profiles.active=prod > app-prod.log 2>&1 &
 

src/main/java/com/devkor/ifive/nadab/domain/admin/application/AdminPageAuthCommandService.java

@@ -16,8 +16,8 @@ public class AdminPageAuthCommandService {
     private final AdminPageProperties adminPageProperties;
 
     public void validatePassword(String rawPassword) {
-        byte[] input = rawPassword.getBytes(StandardCharsets.UTF_8);
-        byte[] expected = adminPageProperties.getPassword().getBytes(StandardCharsets.UTF_8);
+        byte[] input = rawPassword.strip().getBytes(StandardCharsets.UTF_8);
+        byte[] expected = adminPageProperties.getPassword().strip().getBytes(StandardCharsets.UTF_8);
 
         if (!MessageDigest.isEqual(input, expected)) {
             throw new UnauthorizedException(ErrorCode.ADMIN_PAGE_INVALID_PASSWORD);

src/main/resources/templates/admin/login.html

@@ -133,7 +133,7 @@ <h1 class="title">관리자 로그인</h1>
             return;
         }
 
-        let message = '로그인에 실패했습니다.';
+        let message = `로그인에 실패했습니다. (HTTP ${response.status})`;
         try {
             const errorBody = await response.json();
             if (errorBody && errorBody.message) {