refactor: 라벨 제거,헬스체크 단축 외에 원복

lSNOTNULL · lSNOTNULL · commit a2c2bcbbd337 · 2025-08-15T05:27:03.000+09:00
diff --git a/src/main/java/store/lastdance/config/SecurityConfig.java b/src/main/java/store/lastdance/config/SecurityConfig.java
@@ -1,7 +1,5 @@
 package store.lastdance.config;
 
-import lombok.extern.slf4j.Slf4j;
-
 
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Bean;
@@ -21,7 +19,6 @@
 import store.lastdance.security.oauth.OAuth2LoginSuccessHandler;
 import store.lastdance.util.CookieUtils;
 
-@Slf4j
 @Configuration
 @RequiredArgsConstructor
 public class SecurityConfig {
@@ -57,7 +54,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                         // Actuator 경로 허용 (필요시)
                         .requestMatchers("/actuator/**").permitAll()
                         // 기타 공개 경로들
-                        .requestMatchers("/error").permitAll()
+                        .requestMatchers("/error", "/favicon.ico").permitAll()
+                        .requestMatchers("/api/v1/notifications/stream").permitAll()
                         // /api/v1/expenses/analyze 요청은 인증이 필요함 AOP 프록시
                         .requestMatchers("/api/v1/expenses/analyze").authenticated()
                         // 나머지 요청은 인증 필요
@@ -70,23 +68,10 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 // API 요청에 대해서는 401 응답 (로그인 페이지로 리다이렉트 안함)
                 .exceptionHandling(exceptions -> exceptions
                         .authenticationEntryPoint((request, response, authException) -> {
-                            if (response.isCommitted()) {
-                                log.debug("Response already committed, cannot send 401 Unauthorized for AuthenticationException.");
-                                return;
-                            }
                             response.setStatus(HttpStatus.UNAUTHORIZED.value());
                             response.setContentType("application/json;charset=UTF-8");
                             response.getWriter().write("{\"error\":\"Unauthorized\",\"message\":\"인증이 필요합니다.\"}");
                         })
-                        .accessDeniedHandler((request, response, accessDeniedException) -> {
-                            if (response.isCommitted()) {
-                                log.debug("Response already committed, cannot send 403 Forbidden for AccessDeniedException.");
-                                return;
-                            }
-                            response.setStatus(HttpStatus.FORBIDDEN.value());
-                            response.setContentType("application/json;charset=UTF-8");
-                            response.getWriter().write("{\"error\":\"Forbidden\",\"message\":\"접근 권한이 없습니다.\"}");
-                        })
                 )
                 .addFilterBefore(new JwtAuthenticationFilter(cookieUtils, authenticationProcessor),
                         UsernamePasswordAuthenticationFilter.class);
diff --git a/src/main/java/store/lastdance/controller/notification/SSEController.java b/src/main/java/store/lastdance/controller/notification/SSEController.java
@@ -1,7 +1,5 @@
 package store.lastdance.controller.notification;
 
-import jakarta.servlet.http.HttpServletResponse;
-
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.responses.ApiResponse;
 import io.swagger.v3.oas.annotations.tags.Tag;
@@ -29,8 +27,8 @@ public class SSEController {
     @Operation(summary = "실시간 알림 스트림 연결", description = "SSE를 통한 실시간 알림 수신 연결을 생성합니다.")
     @ApiResponse(responseCode = "200", description = "스트림 연결 성공")
     @GetMapping(value = "/stream", produces = MediaType.TEXT_EVENT_STREAM_VALUE)
-    public ResponseEntity<SseEmitter> streamNotifications(@AuthenticationPrincipal CustomOAuth2User user, HttpServletResponse response) {
-        SseEmitter emitter = sseService.createConnection(user.getUserId(), response);
+    public ResponseEntity<SseEmitter> streamNotifications(@AuthenticationPrincipal CustomOAuth2User user) {
+        SseEmitter emitter = sseService.createConnection(user.getUserId());
         
         return ResponseEntity.ok()
                 .header("Cache-Control", "no-cache")
diff --git a/src/main/java/store/lastdance/exception/GlobalExceptionHandler.java b/src/main/java/store/lastdance/exception/GlobalExceptionHandler.java
@@ -100,9 +100,6 @@ public ResponseEntity<ErrorResponseDTO> handleMethodArgumentNotValidException(
 
     @ExceptionHandler(RuntimeException.class)
     public ResponseEntity<ErrorResponseDTO> handleRuntimeException(RuntimeException e, WebRequest request) {
-        if (e instanceof org.springframework.security.core.AuthenticationException || e instanceof org.springframework.security.access.AccessDeniedException) {
-            throw e; // Re-throw to let Spring Security handle it
-        }
         log.error("RuntimeException occurred: {}", e.getMessage(), e);
 
         ErrorResponseDTO errorResponseDTO = ErrorResponseDTO.builder()
@@ -116,10 +113,7 @@ public ResponseEntity<ErrorResponseDTO> handleRuntimeException(RuntimeException
     }
 
     @ExceptionHandler(Exception.class)
-    public ResponseEntity<ErrorResponseDTO> handleGeneralException(Exception e, WebRequest request) throws Exception {
-        if (e instanceof org.springframework.security.core.AuthenticationException || e instanceof org.springframework.security.access.AccessDeniedException) {
-            throw e;
-        }
+    public ResponseEntity<ErrorResponseDTO> handleGeneralException(Exception e, WebRequest request) {
         log.error("Unexpected exception occurred: {}", e.getMessage(), e);
 
         ErrorResponseDTO errorResponseDTO = ErrorResponseDTO.builder()
diff --git a/src/main/java/store/lastdance/service/notification/SSENotificationService.java b/src/main/java/store/lastdance/service/notification/SSENotificationService.java
@@ -6,7 +6,7 @@
 import java.util.UUID;
 
 public interface SSENotificationService {
-    SseEmitter createConnection(UUID userId, jakarta.servlet.http.HttpServletResponse response);
+    SseEmitter createConnection(UUID userId);
     void disconnectUser(UUID userId);
     boolean sendNotification(UUID userId, String title, String content, NotificationType type, String relatedId);
     boolean isUserOnline(UUID userId);
diff --git a/src/main/java/store/lastdance/service/notification/SSENotificationServiceImpl.java b/src/main/java/store/lastdance/service/notification/SSENotificationServiceImpl.java
@@ -51,7 +51,7 @@ private void init() {
     private final Map<UUID, ScheduledFuture<?>> heartbeatTasks = new ConcurrentHashMap<>();
 
     @Override
-    public SseEmitter createConnection(UUID userId, jakarta.servlet.http.HttpServletResponse response) {
+    public SseEmitter createConnection(UUID userId) {
         synchronized (userId.toString().intern()) {
             disconnectUser(userId);
 
@@ -61,12 +61,10 @@ public SseEmitter createConnection(UUID userId, jakarta.servlet.http.HttpServlet
             emitter.onCompletion(() -> disconnectUser(userId));
             emitter.onTimeout(() -> {
                 log.warn("SSE 연결 타임아웃: userId={}", userId);
-                log.debug("SSE Timeout: Response committed status: {}", response.isCommitted());
                 disconnectUser(userId);
             });
             emitter.onError(e -> {
                 log.warn("SSE 연결 오류: userId={}, error={}", userId, e.getMessage());
-                log.debug("SSE Error: Response committed status: {}", response.isCommitted());
                 disconnectUser(userId);
             });
 
diff --git a/src/main/resources/application-prod.yml b/src/main/resources/application-prod.yml
@@ -164,10 +164,6 @@ jwt:
 
 logging:
   level:
-    org.springframework.security: DEBUG
-    org.apache.catalina.connector.Response: DEBUG
-    org.apache.coyote.Response: DEBUG
-    org.apache.catalina.connector.CoyoteAdapter: DEBUG
     root: WARN
     store.lastdance: WARN
 
