feat(170): 민감정보 마스킹

core/build.gradle.kts

@@ -19,6 +19,7 @@ dependencies {
     implementation(libs.jwt)
     implementation(projects.infra)
     implementation(projects.exception)
+    implementation(libs.maskIt)
     implementation("org.springframework.boot:spring-boot-starter-security")
     compileOnly(libs.bundles.kotlinLogging)
     compileOnly(libs.bundles.kotlinxCoroutines)

core/src/main/kotlin/com/inner/circle/core/service/UserCardService.kt

@@ -2,7 +2,11 @@ package com.inner.circle.core.service
 
 import com.inner.circle.core.service.dto.UserCardDto
 import com.inner.circle.core.usecase.UserCardUseCase
+import com.inner.circle.exception.UserPaymentMethodException
 import com.inner.circle.infra.port.UserCardPort
+import net.gentledot.maskit.DataMasking
+import net.gentledot.maskit.applications.modules.MaskingModule
+import net.gentledot.maskit.models.DataTypes
 import org.springframework.stereotype.Service
 import com.inner.circle.infra.adaptor.dto.UserCardDto as InfraUserCardDto
 
@@ -26,20 +30,37 @@ internal class UserCardService(
     }
 
     override fun findByAccountId(accountId: Long): List<UserCardDto> {
+        val dataMasking = DataMasking.builder().build()
+        val cardMaskingModule = dataMasking.getModule(DataTypes.CREDIT_CARD)
+        val nameMaskingModule = dataMasking.getModule(DataTypes.NAME)
         val infraUserCardDtoList = userCardPort.findByAccountId(accountId)
+
         return infraUserCardDtoList
             .map { infraUserCardDto ->
+                val maskedCardNumber = maskingCardNumber(cardMaskingModule, infraUserCardDto)
                 UserCardDto(
                     id = infraUserCardDto.id,
                     accountId = infraUserCardDto.accountId,
                     isRepresentative = infraUserCardDto.isRepresentative,
-                    cardNumber = infraUserCardDto.cardNumber,
+                    cardNumber = maskedCardNumber,
                     expirationPeriod = infraUserCardDto.expirationPeriod,
-                    cvc = infraUserCardDto.cvc
+                    cvc = nameMaskingModule.mask(infraUserCardDto.cvc, 1, 2)
                 )
             }.toList()
     }
 
+    private fun maskingCardNumber(
+        cardMaskingModule: MaskingModule,
+        infraUserCardDto: com.inner.circle.infra.adaptor.dto.UserCardDto
+    ): String {
+        val cardNumber = infraUserCardDto.cardNumber
+        val split = cardNumber.split("-")
+        val masked = cardMaskingModule.mask(cardNumber)
+        if (split.size != 4) throw UserPaymentMethodException.InvalidCardNumberException(masked)
+        val firstNumberPart = split[0]
+        return """$firstNumberPart${masked.substring(4)}"""
+    }
+
     override fun findAll(): List<UserCardDto> {
         val infraUserCardDtoList = userCardPort.findAll()
         return infraUserCardDtoList

exception/src/main/kotlin/com/inner/circle/exception/UserPaymentMethodException.kt

@@ -0,0 +1,24 @@
+package com.inner.circle.exception
+
+sealed class UserPaymentMethodException(
+    status: HttpStatus,
+    override val message: String,
+    override val cause: Throwable? = null
+) : AppException(status, message, cause) {
+    data class InvalidCardNumberException(
+        val cardNumber: String,
+        override val message: String = "Invalid card number: $cardNumber",
+        override val cause: Throwable? = null
+    ) : UserPaymentMethodException(HttpStatus.BAD_REQUEST, message, cause)
+
+    data class InvalidCVCException(
+        override val message: String = "Invalid CVC value.",
+        override val cause: Throwable? = null
+    ) : UserPaymentMethodException(HttpStatus.BAD_REQUEST, message, cause)
+
+    data class InvalidExpirationDateException(
+        val expirationDate: String,
+        override val message: String = "Invalid expiration date: $expirationDate",
+        override val cause: Throwable? = null
+    ) : UserPaymentMethodException(HttpStatus.BAD_REQUEST, message, cause)
+}

gradle/libs.versions.toml

@@ -82,6 +82,8 @@ jwt = {module = "io.jsonwebtoken:jjwt", version = "0.12.6"}
 logbackDiscordAppender = { module = "com.github.napstr:logback-discord-appender", version = "1.0.0" }
 retrofit = { module = "com.squareup.retrofit2:retrofit", version = "2.9.0" }
 okhttp = { module = "com.squareup.okhttp3:okhttp", version = "3.14.9" }
+# maskit (beta)
+maskIt = {module ="com.github.GentleDot:maskIt", version = "0.1.1"}
 
 [bundles]
 boms = ["kotlinxSerializationBom", "kotlinxCoroutinesBom", "kotestBom"]