From 044d725654b84916eb830750261016d3e8714d97 Mon Sep 17 00:00:00 2001 From: Chanhae Lee Date: Wed, 8 Apr 2026 18:22:00 +0900 Subject: [PATCH] =?UTF-8?q?fix(auth):=20Google=20azp=20=EA=B2=80=EC=A6=9D?= =?UTF-8?q?=EC=9D=84=20Android=20=EC=A0=84=EC=9A=A9=EC=9C=BC=EB=A1=9C=20?= =?UTF-8?q?=EB=90=98=EB=8F=8C=EB=A6=BC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit iOS 지원 추가 시 변경된 azp 검증 로직으로 인해 Android 구글 로그인이 --- .../auth/infra/oauth/client/GoogleOAuth2Client.java | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/src/main/java/com/devkor/ifive/nadab/domain/auth/infra/oauth/client/GoogleOAuth2Client.java b/src/main/java/com/devkor/ifive/nadab/domain/auth/infra/oauth/client/GoogleOAuth2Client.java index 9003dcac..70fe8504 100644 --- a/src/main/java/com/devkor/ifive/nadab/domain/auth/infra/oauth/client/GoogleOAuth2Client.java +++ b/src/main/java/com/devkor/ifive/nadab/domain/auth/infra/oauth/client/GoogleOAuth2Client.java @@ -203,14 +203,10 @@ private void validateIdTokenInfo(GoogleIdTokenInfoResponse tokenInfo) { throw new OAuth2Exception(ErrorCode.AUTH_OAUTH2_USERINFO_FAILED); } - // azp (Authorized party) 검증 (azp가 있으면 Android 또는 iOS Client ID 중 하나와 일치하는지 확인) - if (tokenInfo.getAzp() != null) { - boolean isValidAzp = googleProperties.getAndroidClientId().equals(tokenInfo.getAzp()) || - googleProperties.getIosClientId().equals(tokenInfo.getAzp()); - if (!isValidAzp) { - log.warn("구글 ID Token 검증 실패: 유효하지 않은 authorized party - {}", tokenInfo.getAzp()); - throw new OAuth2Exception(ErrorCode.AUTH_OAUTH2_USERINFO_FAILED); - } + // azp (Authorized party) 검증 (azp가 있으면 우리 앱의 Android Client ID인지 확인) + if (tokenInfo.getAzp() != null && !googleProperties.getAndroidClientId().equals(tokenInfo.getAzp())) { + log.warn("구글 ID Token 검증 실패: 유효하지 않은 authorized party - {}", tokenInfo.getAzp()); + throw new OAuth2Exception(ErrorCode.AUTH_OAUTH2_USERINFO_FAILED); } // 만료 시간 검증