[fix] Websocket 프론트에서 접근시 403 에러 해결

* fix: securityconfig ws endpoint 추가

* feat: websocket interpretor 설정

Author: kimeunkyoungg

backend/src/main/java/com/back/global/config/SecurityConfig.java

@@ -50,6 +50,7 @@ SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
 				.requestMatchers("/api/v1/auth/signup").permitAll()
 				.requestMatchers("/api/v1/auth/login").permitAll()
 				.requestMatchers("/api/v1/admin/auth/**").permitAll()
+				.requestMatchers("/ws/**").permitAll()  // WebSocket 핸드셰이크 허용
 				.requestMatchers("/api/v1/admin/**").hasRole("ADMIN")
 				.requestMatchers("/actuator/**").permitAll()    // 모니터링/Actuator 관련
 				// .requestMatchers("/api/v1/**").authenticated() // TODO: 개발 후 인증 활성화

backend/src/main/java/com/back/global/config/WebSocketConfig.java

@@ -1,15 +1,25 @@
 package com.back.global.config;
 
 import org.springframework.context.annotation.Configuration;
+import org.springframework.messaging.simp.config.ChannelRegistration;
 import org.springframework.messaging.simp.config.MessageBrokerRegistry;
 import org.springframework.web.socket.config.annotation.EnableWebSocketMessageBroker;
 import org.springframework.web.socket.config.annotation.StompEndpointRegistry;
 import org.springframework.web.socket.config.annotation.WebSocketMessageBrokerConfigurer;
 
+import com.back.global.properties.SiteProperties;
+import com.back.global.websocket.auth.WebSocketAuthInterceptor;
+
+import lombok.RequiredArgsConstructor;
+
 @Configuration
 @EnableWebSocketMessageBroker
+@RequiredArgsConstructor
 public class WebSocketConfig implements WebSocketMessageBrokerConfigurer {
 
+	private final WebSocketAuthInterceptor webSocketAuthInterceptor;
+	private final SiteProperties siteProperties;
+
 	@Override
 	public void configureMessageBroker(MessageBrokerRegistry registry) {
 
@@ -18,6 +28,9 @@ public void configureMessageBroker(MessageBrokerRegistry registry) {
 
 		//클라이언트 발행 경로
 		registry.setApplicationDestinationPrefixes("/app");
+
+		// 특정 유저에게 메시지 보낼 때 사용할 prefix
+		registry.setUserDestinationPrefix("/user");
 	}
 
 	@Override
@@ -26,6 +39,13 @@ public void registerStompEndpoints(StompEndpointRegistry registry) {
 		//Websocket/stomp 연결 endpoint
 		registry.addEndpoint("/ws")
 			.setAllowedOriginPatterns("*")
+			// .setAllowedOrigins(siteProperties.getFrontUrl()) 프론트 배포 후 변경
 			.withSockJS();
 	}
+
+	@Override
+	public void configureClientInboundChannel(ChannelRegistration registration) {
+		registration.interceptors(webSocketAuthInterceptor);
+	}
+
 }