Fix: 대피소, 로그인 api 수정 및 스웨거 헤더 추가 (#31)

* Feat: CI/CD 환경 구축 (#4) * chore: set git ignore - add application.yml - add application.properties * chore: set git ignore - add application.yml - add application.properties * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): spring security 의존성 추가 * Feat(#2): spring security 기본 설정 추가 및 default login page disable * Chore(#2): 배포 브랜치 범위 변경 - main 브랜치에 대해서만 배포함 * Feat: 예외는 한 곳에서 처리한다. (#7) * Chore(#5): spring-validation 의존성 추가 * Feat(#5): 커스텀 예외 NumberOneException 구현 * Feat(#5): CustomExceptionContext 구현 * Feat(#5): ErrorResponse 구현 - 예외처리 시 반환할 base response dto * Feat(#5): NotFoundException 구현 * Feat(#5): BadRequestException 구현 * Feat(#5): 전역 예외 처리 핸들러 구현 * Feat: Swagger, QueryDSL, JPA 셋업 / 대피소 DB 구축 (#11) * Chore(#8): swagger, querydsl set up * docs(#8): swagger config * Feat(#9): base time entity 구현 * Feat(#9): p6spy 셋업 * Feat(#9): 대피소 엔티티 구현 * Feat(#9): 대피소 엔티티 구현 * Chore(#9): docker-compose.yml to EC2 server * Chore(#9): docker-compose.yml to EC2 server * Chore(#9): remove job docker-compose.yml to EC2 server * Feat: 내 주변 대피소 위치 반환 API 구현 (#15) * Feat(#14): hello controller for health-check - 불필요한 api 제거 * Feat(#14): 모든 url 허용 - 테스트 용이며 추후 반드시 바꿔줘야함. * Feat(#14): 대피소 검색 API 구현 * Feat: 소셜로그인 구현 (#16) * Feat(#10): RestTemplate 이용한 카카오 계정 정보 받아오기 로직 작성 * Feat(#10): 카카오 계정 이메일 추출 * Feat(#10): 네이버 카카오 인가코드 이용해 사용자 정보 추출 * Feat(#10): jwt 인증 구현 * Feat(#10): Redis 이용한 리프레쉬 토큰 구현 * Chore(#10): docker-compose.yml에 redis 추가 * Feat(#10): swagger 내용 작성 * Feat(#10): 토큰 갱신 api 구현 * Refactor(#10): 코드 리팩토링 * Fix(#10): inner class protected 삭제 * Fix(#10): gitignore 오타 수정 * Feat: shelters api 인가 처리 disable (#20) * docs: readme 수정 * Chore: 이슈 템플릿 추가 * Feat: CI/CD 환경 구축 (#4) * chore: set git ignore - add application.yml - add application.properties * chore: set git ignore - add application.yml - add application.properties * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): spring security 의존성 추가 * Feat(#2): spring security 기본 설정 추가 및 default login page disable * Chore(#2): 배포 브랜치 범위 변경 - main 브랜치에 대해서만 배포함 * Feat: 예외는 한 곳에서 처리한다. (#7) * Chore(#5): spring-validation 의존성 추가 * Feat(#5): 커스텀 예외 NumberOneException 구현 * Feat(#5): CustomExceptionContext 구현 * Feat(#5): ErrorResponse 구현 - 예외처리 시 반환할 base response dto * Feat(#5): NotFoundException 구현 * Feat(#5): BadRequestException 구현 * Feat(#5): 전역 예외 처리 핸들러 구현 * Feat: Swagger, QueryDSL, JPA 셋업 / 대피소 DB 구축 (#11) * Chore(#8): swagger, querydsl set up * docs(#8): swagger config * Feat(#9): base time entity 구현 * Feat(#9): p6spy 셋업 * Feat(#9): 대피소 엔티티 구현 * Feat(#9): 대피소 엔티티 구현 * Chore(#9): docker-compose.yml to EC2 server * Chore(#9): docker-compose.yml to EC2 server * Chore(#9): remove job docker-compose.yml to EC2 server * Chore(#13): add job docker-compose.yml to EC2 server * Chore(#13): add job docker-compose.yml to EC2 server * Chore(#13): add job docker-compose.yml to EC2 server * Chore(#13): cicd target branch set up * Feat(#14): hello controller for health-check - 불필요한 api 제거 * Feat(#14): 모든 url 허용 - 테스트 용이며 추후 반드시 바꿔줘야함. * Feat(#14): 대피소 검색 API 구현 * Feat(#14): 대피소 API 권한 해제 - 추후 다시 인가 처리 적용할 예정 * Fix(#14): url path 오타 수정 --------- Co-authored-by: nohy6630 <[email protected]> * Fix: application.yml base64 인코딩 (#22) * fix(#19): application.yml 출력 * Fix(#19): fix 브랜치에서도 cicd 작동되도록 수정 * Fix(#19): ls 테스트 * Fix(#19): base 인코딩 추가 * Fix: 서비스계층 특정 메서드 readonly 해제 (#25) * Fix(#24): jsonignore 어노테이션 추가 * Fix(#24): db에 쓰기 작업하는 service 메서드에 transactional 추가 * Feat: swagger 에서 jwt 토큰 인증 가능하도록 변경 (#27) * Fix(#21): shelters api 에 대한 인증 설정 * Fix(#21): swagger 에서 jwt 토큰 인증을 수행할 수 있도록 변경 * Docs(#21): swagger 문구 추가 * Feat: 토큰 발급 api 응답형식 수정 및 여러 커스텀 예외 추가 (#29) * Feat(#26): 토큰 발급 api 응답형식 수정 및 여러 커스텀 예외 추가 * Fix(#26): 액세스 토큰 주기 수정 * Fix(#26): 액세스 토큰 에러를 만료와 형식 오류로 나눠서 응답 * Chore(#26): 임시 cicd 배포 * Fix(#26): 리프레쉬 토큰 에러 응답 http status 수정 및 valid 추가 * Feat: shelter 엔드포인트 변경 (#30) * docs: readme 수정 * Chore: 이슈 템플릿 추가 * Feat: CI/CD 환경 구축 (#4) * chore: set git ignore - add application.yml - add application.properties * chore: set git ignore - add application.yml - add application.properties * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): ci-cd setting * Chore(#2): spring security 의존성 추가 * Feat(#2): spring security 기본 설정 추가 및 default login page disable * Chore(#2): 배포 브랜치 범위 변경 - main 브랜치에 대해서만 배포함 * Feat: 예외는 한 곳에서 처리한다. (#7) * Chore(#5): spring-validation 의존성 추가 * Feat(#5): 커스텀 예외 NumberOneException 구현 * Feat(#5): CustomExceptionContext 구현 * Feat(#5): ErrorResponse 구현 - 예외처리 시 반환할 base response dto * Feat(#5): NotFoundException 구현 * Feat(#5): BadRequestException 구현 * Feat(#5): 전역 예외 처리 핸들러 구현 * Feat: Swagger, QueryDSL, JPA 셋업 / 대피소 DB 구축 (#11) * Chore(#8): swagger, querydsl set up * docs(#8): swagger config * Feat(#9): base time entity 구현 * Feat(#9): p6spy 셋업 * Feat(#9): 대피소 엔티티 구현 * Feat(#9): 대피소 엔티티 구현 * Chore(#9): docker-compose.yml to EC2 server * Chore(#9): docker-compose.yml to EC2 server * Chore(#9): remove job docker-compose.yml to EC2 server * Chore(#13): add job docker-compose.yml to EC2 server * Chore(#13): add job docker-compose.yml to EC2 server * Chore(#13): add job docker-compose.yml to EC2 server * Chore(#13): cicd target branch set up * Feat(#14): hello controller for health-check - 불필요한 api 제거 * Feat(#14): 모든 url 허용 - 테스트 용이며 추후 반드시 바꿔줘야함. * Feat(#14): 대피소 검색 API 구현 * Feat(#14): 대피소 API 권한 해제 - 추후 다시 인가 처리 적용할 예정 * Fix(#14): url path 오타 수정 * Feat(#21): Shelter EP 변경 --------- Co-authored-by: nohy6630 <[email protected]> --------- Co-authored-by: JaeHyeon Lee <[email protected]> Co-authored-by: versatile0010 <[email protected]>
Team-NumberOne · Oct 17, 2023 · 980ab7f · 980ab7f
1 parent 75571c7
commit 980ab7f
Show file tree

Hide file tree

Showing 27 changed files with 321 additions and 132 deletions.
diff --git a/src/main/java/com/numberone/backend/LoginTestController.java b/src/main/java/com/numberone/backend/LoginTestController.java
@@ -1,14 +1,25 @@
 package com.numberone.backend;
 
+import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import org.springframework.security.core.Authentication;
+import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
+@Tag(name = "login_test", description = "토큰 인증 테스트 관련 API")
 @RestController
 public class LoginTestController {
-    @RequestMapping("/logintest")
-    public String test(Authentication authentication){
-        return "Hello "+authentication.getName();
+    @Operation(summary = "토큰 인증 테스트하기", description =
+            """
+                    서버에서 발급받은 액세스 토큰을 "Bearer [발급받은 액세스토큰]" 형태로 http 헤더의 Authorization에 넣어서 요청해주세요.
+                                
+                    유효한 토큰이라면 사용자의 이메일을 반환합니다.
+                                
+                    앞으로 서버에 api 요청을 날릴때 이렇게 Authorization 헤더에 발급받은 액세스 토큰을 담아 전달해주세요.
+                    """)
+    @GetMapping("/api/logintest")
+    public String test(Authentication authentication) {
+        return "Hello " + authentication.getName();
     }
 }
diff --git a/src/main/java/com/numberone/backend/config/SecurityConfig.java b/src/main/java/com/numberone/backend/config/SecurityConfig.java
@@ -1,37 +1,22 @@
 package com.numberone.backend.config;
 
-import com.numberone.backend.config.auth.JwtFilter;
-import com.numberone.backend.properties.JwtProperties;
-import lombok.RequiredArgsConstructor;
 import com.numberone.backend.config.auth.JwtFilter;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.Customizer;
-import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
-import org.springframework.security.config.annotation.web.configurers.HttpBasicConfigurer;
 import org.springframework.security.config.http.SessionCreationPolicy;
-import org.springframework.security.oauth2.jwt.JwtDecoder;
-import org.springframework.security.oauth2.jwt.JwtEncoder;
-import org.springframework.security.oauth2.jwt.NimbusJwtDecoder;
-import org.springframework.security.oauth2.jwt.NimbusJwtEncoder;
 import org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint;
 import org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler;
 import org.springframework.security.web.SecurityFilterChain;
-import org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher;
-import org.springframework.web.servlet.handler.HandlerMappingIntrospector;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher;
 import org.springframework.web.servlet.handler.HandlerMappingIntrospector;
 
-import javax.crypto.SecretKey;
-import javax.crypto.spec.SecretKeySpec;
-import java.nio.charset.StandardCharsets;
-
 @Slf4j
 @Configuration
 @EnableWebSecurity
@@ -67,8 +52,7 @@ public WebSecurityCustomizer webSecurityCustomizer() {
                         "/swagger-ui/**",
                         "/swagger-resources/**",
                         "/v3/api-docs/**",
-                        "/token/**",
-                        "/shelters/**");
+                        "/token/**");
         //.requestMatchers("/**"); // 인증 처리 하지 않을 케이스
     }
 }
diff --git a/src/main/java/com/numberone/backend/config/SwaggerConfig.java b/src/main/java/com/numberone/backend/config/SwaggerConfig.java
@@ -4,7 +4,12 @@
 import io.swagger.v3.oas.annotations.info.Contact;
 import io.swagger.v3.oas.annotations.info.Info;
 import io.swagger.v3.oas.annotations.servers.Server;
+import io.swagger.v3.oas.models.Components;
+import io.swagger.v3.oas.models.OpenAPI;
+import io.swagger.v3.oas.models.security.SecurityScheme;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpHeaders;
 
 @OpenAPIDefinition(
         servers = @Server(url = "/", description = "${host.url}"),
@@ -22,4 +27,18 @@
 )
 @Configuration
 public class SwaggerConfig {
+    @Bean
+    public OpenAPI customOpenAPI() {
+        return new OpenAPI()
+                .components(new Components().addSecuritySchemes("JWT", bearerAuth()));
+    }
+
+    public SecurityScheme bearerAuth() {
+        return new SecurityScheme()
+                .type(SecurityScheme.Type.HTTP)
+                .scheme("bearer")
+                .bearerFormat("JWT")
+                .in(SecurityScheme.In.HEADER)
+                .name(HttpHeaders.AUTHORIZATION);
+    }
 }
diff --git a/src/main/java/com/numberone/backend/config/auth/JwtFilter.java b/src/main/java/com/numberone/backend/config/auth/JwtFilter.java
@@ -1,14 +1,19 @@
 package com.numberone.backend.config.auth;
 
+import com.fasterxml.jackson.databind.ObjectMapper;
 import com.numberone.backend.domain.member.entity.Member;
 import com.numberone.backend.domain.member.service.MemberService;
 import com.numberone.backend.domain.token.util.JwtUtil;
+import com.numberone.backend.exception.context.ExceptionContext;
+import com.numberone.backend.exception.dto.ErrorResponse;
+import com.numberone.backend.exception.notfound.NotFoundMemberException;
 import jakarta.servlet.FilterChain;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpStatus;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
@@ -18,37 +23,66 @@
 import java.io.IOException;
 import java.util.Collections;
 
+import static com.numberone.backend.exception.context.CustomExceptionContext.*;
+
 @RequiredArgsConstructor
 @Component
 public class JwtFilter extends OncePerRequestFilter {
     private final JwtUtil jwtUtil;
     private final MemberService memberService;
 
-    //토큰이 유효하지 않다면 setAuthentication이 진행되지 않아 UsernamePasswordAuthenticationFilter에서 인증이 되지 않음
+    @Override
+    protected boolean shouldNotFilter(HttpServletRequest request) throws ServletException {
+        String path = request.getRequestURI();
+        return !path.startsWith("/api/");
+        // /api로 시작하는 경로에 대해서만 jwt 인증을 진행합니다. 이렇게 안하면 security에서 무시한 경로라도 모든 경로에 대해서 이 필터를 거치네요..
+        // jwt인증이 필요한 api에 대해서는 /api/apple 처럼 /api로 시작하게 만들어야 될것같아요!
+    }
+
     @Override
     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
         String authorizationHeader = request.getHeader(HttpHeaders.AUTHORIZATION);
         if (authorizationHeader == null || !authorizationHeader.startsWith("Bearer ")) {
-            filterChain.doFilter(request, response);
+            setErrorResponse(response, WRONG_ACCESS_TOKEN);
             return;
         }
-
         String token = authorizationHeader.split(" ")[1];
+        if (!jwtUtil.isValid(token)) {
+            setErrorResponse(response, WRONG_ACCESS_TOKEN);
+            return;
+        }
         if (jwtUtil.isExpired(token)) {
-            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
-            response.getWriter().write("Token has expired");
-            filterChain.doFilter(request, response);
+            setErrorResponse(response, EXPIRED_ACCESS_TOKEN);
             return;
         }
 
         String email = jwtUtil.getEmail(token);
-        Member member = memberService.findByEmail(email);
+        try {
+            Member member = memberService.findByEmail(email);
+            UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(
+                    member.getEmail(), null, Collections.emptyList());
+            authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
 
-        UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(
-                member.getEmail(), null, Collections.emptyList());
-        authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
+            SecurityContextHolder.getContext().setAuthentication(authenticationToken);
+            filterChain.doFilter(request, response);
+        } catch (NotFoundMemberException e) {
+            setErrorResponse(response, NOT_FOUND_MEMBER);
+            return;
+        }
+    }
 
-        SecurityContextHolder.getContext().setAuthentication(authenticationToken);
-        filterChain.doFilter(request, response);
+    private void setErrorResponse(
+            HttpServletResponse response,
+            ExceptionContext context
+    ) {
+        ObjectMapper objectMapper = new ObjectMapper();
+        response.setStatus(HttpStatus.FORBIDDEN.value());
+        response.setContentType("application/json;charset=UTF-8");
+        ErrorResponse errorResponse = new ErrorResponse(context.getCode(), context.getMessage());
+        try {
+            response.getWriter().write(objectMapper.writeValueAsString(errorResponse));
+        } catch (IOException e) {
+            e.printStackTrace();
+        }
     }
 }
diff --git a/src/main/java/com/numberone/backend/domain/member/service/MemberService.java b/src/main/java/com/numberone/backend/domain/member/service/MemberService.java
@@ -18,6 +18,7 @@ public Member findByEmail(String email) {
                 .orElseThrow(NotFoundMemberException::new);
     }
 
+    @Transactional
     public void create(String email) {
         memberRepository.save(Member.of(email));
     }

diff --git a/src/main/java/com/numberone/backend/domain/shelter/controller/ShelterController.java b/src/main/java/com/numberone/backend/domain/shelter/controller/ShelterController.java
@@ -18,7 +18,7 @@
 @Tag(name = "shelters", description = "대피소 관련 API")
 @Slf4j
 @RequiredArgsConstructor
-@RequestMapping("/shelters")
+@RequestMapping("/api/shelters")
 @RestController
 public class ShelterController {
     private final ShelterService shelterService;
@@ -32,6 +32,8 @@ public class ShelterController {
             distance 는 미터(m) 단위이며 1500 m 이내 대피소만 검색합니다.
             
             검색 결과가 0 개인 경우, NotFound 예외를 터뜨립니다.
+            
+            access token 을 헤더에 담아서 요청해주세요.
                     
             """)
     @PostMapping
@@ -54,6 +56,7 @@ public ResponseEntity<NearestShelterResponse> getNearestShelter(
             
             검색 결과가 0 개인 경우, NotFound 예외를 터뜨립니다.
                     
+            access token 을 헤더에 담아서 요청해주세요.
             """)
     @PostMapping("/list")
     public ResponseEntity<NearbyShelterListResponse> getNearbyShelterList(

diff --git a/src/main/java/com/numberone/backend/domain/token/controller/TokenController.java b/src/main/java/com/numberone/backend/domain/token/controller/TokenController.java
@@ -1,10 +1,13 @@
 package com.numberone.backend.domain.token.controller;
 
-import com.numberone.backend.domain.token.dto.request.TokenRequest;
-import com.numberone.backend.domain.token.dto.response.TokenResponse;
+import com.numberone.backend.domain.token.dto.request.GetTokenRequest;
+import com.numberone.backend.domain.token.dto.request.RefreshTokenRequest;
+import com.numberone.backend.domain.token.dto.response.GetTokenResponse;
+import com.numberone.backend.domain.token.dto.response.RefreshTokenResponse;
 import com.numberone.backend.domain.token.service.TokenService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
@@ -27,7 +30,7 @@ public class TokenController {
             이후 서버에 API 요청시 이 JWT 토큰을 같이 담아서 요청해야 정상적으로 API가 호출 됩니다.  
             """)
     @PostMapping("/kakao")
-    public TokenResponse loginKakao(@RequestBody TokenRequest tokenRequest) {
+    public GetTokenResponse loginKakao(@RequestBody @Valid GetTokenRequest tokenRequest) {
         return tokenService.loginKakao(tokenRequest);
     }
 
@@ -40,7 +43,7 @@ public TokenResponse loginKakao(@RequestBody TokenRequest tokenRequest) {
             이후 서버에 API 요청시 이 JWT 토큰을 같이 담아서 요청해야 정상적으로 API가 호출 됩니다.  
             """)
     @PostMapping("/naver")
-    public TokenResponse loginNaver(@RequestBody TokenRequest tokenRequest) {
+    public GetTokenResponse loginNaver(@RequestBody @Valid GetTokenRequest tokenRequest) {
         return tokenService.loginNaver(tokenRequest);
     }
 
@@ -51,7 +54,7 @@ public TokenResponse loginNaver(@RequestBody TokenRequest tokenRequest) {
             새로 사용할 수 있는 JWT 토큰이 발급됩니다.
             """)
     @PostMapping("/refresh")
-    public TokenResponse refresh(@RequestBody TokenRequest tokenRequest) {
+    public RefreshTokenResponse refresh(@RequestBody @Valid RefreshTokenRequest tokenRequest) {
         return tokenService.refresh(tokenRequest);
     }
 }
diff --git a/src/main/java/com/numberone/backend/domain/token/dto/request/GetTokenRequest.java b/src/main/java/com/numberone/backend/domain/token/dto/request/GetTokenRequest.java
@@ -0,0 +1,14 @@
+package com.numberone.backend.domain.token.dto.request;
+
+import jakarta.validation.constraints.NotNull;
+import lombok.*;
+import org.hibernate.annotations.Comment;
+
+@ToString
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class GetTokenRequest {
+    @NotNull(message = "토큰이 NULL 입니다.")
+    @Comment("카카오 또는 네이버에서 발급된 Access 토큰")
+    private String token;
+}
diff --git a/src/main/java/com/numberone/backend/domain/token/dto/request/RefreshTokenRequest.java b/src/main/java/com/numberone/backend/domain/token/dto/request/RefreshTokenRequest.java
@@ -0,0 +1,15 @@
+package com.numberone.backend.domain.token.dto.request;
+
+import jakarta.validation.constraints.NotNull;
+import lombok.AccessLevel;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import org.hibernate.annotations.Comment;
+
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class RefreshTokenRequest {
+    @NotNull(message = "토큰이 NULL 입니다.")
+    @Comment("서버에서 발급받은 Refresh 토큰")
+    private String token;
+}
diff --git a/src/main/java/com/numberone/backend/domain/token/dto/request/TokenRequest.java b/src/main/java/com/numberone/backend/domain/token/dto/request/TokenRequest.java
diff --git a/src/main/java/com/numberone/backend/domain/token/dto/response/GetTokenResponse.java b/src/main/java/com/numberone/backend/domain/token/dto/response/GetTokenResponse.java
@@ -0,0 +1,26 @@
+package com.numberone.backend.domain.token.dto.response;
+
+import lombok.AccessLevel;
+import lombok.Builder;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class GetTokenResponse {
+    private String accessToken;
+    private String refreshToken;
+
+    @Builder
+    public GetTokenResponse(String accessToken, String refreshToken) {
+        this.accessToken = accessToken;
+        this.refreshToken = refreshToken;
+    }
+
+    public static GetTokenResponse of(String accessToken, String refreshToken) {
+        return GetTokenResponse.builder()
+                .accessToken(accessToken)
+                .refreshToken(refreshToken)
+                .build();
+    }
+}
diff --git a/src/main/java/com/numberone/backend/domain/token/dto/response/KakaoInfoResponse.java b/src/main/java/com/numberone/backend/domain/token/dto/response/KakaoInfoResponse.java
@@ -1,5 +1,6 @@
 package com.numberone.backend.domain.token.dto.response;
 
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
 import lombok.AccessLevel;
 import lombok.Getter;
 import lombok.NoArgsConstructor;
@@ -8,6 +9,7 @@
 @ToString
 @Getter
 @NoArgsConstructor(access = AccessLevel.PROTECTED)
+@JsonIgnoreProperties(ignoreUnknown = true)
 public class KakaoInfoResponse {
     private Long id;
     private String connected_at;
@@ -17,6 +19,7 @@ public class KakaoInfoResponse {
     @ToString
     @Getter
     @NoArgsConstructor
+    @JsonIgnoreProperties(ignoreUnknown = true)
     public class Properties {
         private String nickname;
         private String profile_image;
@@ -26,6 +29,7 @@ public class Properties {
     @ToString
     @Getter
     @NoArgsConstructor
+    @JsonIgnoreProperties(ignoreUnknown = true)
     public class KakaoAccount {
         static class profile {
             private String nickname;