Merge pull request #6 from NET-ZERO-FitFit/develop

[CICD] main <- develop (securityConfig 내 api.fitfit.site API 호출 허용)

Author: simhyunmin

src/main/java/fitfit/domain/member/repository/MemberRepository.java

@@ -8,5 +8,5 @@
 public interface MemberRepository extends JpaRepository<Member, Long> {
     Optional<Member> findByProviderId(String sub);
 
-    boolean existsByName(String name);
+    boolean existsByNickname(String nickname);
 }

src/main/java/fitfit/domain/member/service/MemberCommandService.java

@@ -194,7 +194,7 @@ private boolean validateAdditionalInfo(MemberRequestDTO.MemberSignupRequest requ
     @Override
     @Transactional(readOnly = true)
     public void checkNickname(String nickname) {
-        if (memberRepository.existsByName(nickname)) {
+        if (memberRepository.existsByNickname(nickname)) {
             throw new MemberHandler(ErrorStatus.NICKNAME_ALREADY_EXISTS);
         }
     }

src/main/java/fitfit/domain/token/filter/JwtAuthenticationFilter.java

@@ -28,10 +28,8 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
             "/swagger-ui/**",
             "/v3/api-docs/**",
             "/swagger-resources/**",
-            "/webjars/**",
-            "/auth/**",
             "/api/members/auth/kko",
-            "/auth/refresh"
+            "/api/members/auth/refresh"
     );
 
     private final JwtProvider jwtProvider;

src/main/java/fitfit/global/security/config/SecurityConfig.java

@@ -55,7 +55,7 @@ public SecurityFilterChain filterChain (HttpSecurity http) throws Exception {
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration config = new CorsConfiguration();
-        config.setAllowedOrigins(List.of("http://localhost:3000", "https://fitfit.site"));
+        config.setAllowedOrigins(List.of("http://localhost:3000", "https://fitfit.site", "https://api.fitfit.site"));
         config.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"));
         config.setAllowedHeaders(List.of("*"));
         config.setAllowCredentials(true);