6.관리자 로그인

1.login-from.mustache

<div class="login-container">
    <!-- 로고 자리 -->
    <img src="/img/logo.png" alt="관리자 로고" class="logo">

    <!-- 로그인 폼 -->
    <h4 class="text-center mb-4">관리자 로그인</h4>
    <form action="/admin/login" method="post"enctype="application/x-www-form-urlencoded">
        <div class="form-group mb-3">
            <label for="email">아이디</label>
            <input type="text" class="form-control" id="username" name="username" placeholder="아이디를 입력하세요" value="admin" required>
        </div>
        <div class="form-group mb-3">
            <label for="password">비밀번호</label>
            <input type="password" class="form-control" id="password" name="password" placeholder="비밀번호를 입력하세요" value="1234" required>
        </div>
        <button type="submit" class="btn btn-login w-100">로그인</button>
    </form>
</div>

2.controller에서 받기

@PostMapping("/admin/login")
    public String adminLogin(AdminRequest.LoginDTO loginDTO){
        
        Admin sessionAdmin = adminService.로그인(loginDTO);
        session.setAttribute("sessionAdmin", sessionAdmin);
        return "admin/dashboard";
    }

2.1 인터셉터

public class AdminInterceptor implements HandlerInterceptor {

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        HttpSession session = request.getSession();
        Admin sessionAdmin = (Admin) session.getAttribute("sessionAdmin");

        if (sessionAdmin == null) {
            throw new Exception401("인증되지 않았어요");
        }

        return true;
    }


}

2.2

@Configuration // Ioc에 저장됨 메모리에 띄운다.
public class WebConfig implements WebMvcConfigurer {

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new LoginInterceptor())
                .addPathPatterns("/api/**");

        registry.addInterceptor(new AdminInterceptor())
                .addPathPatterns("/admin/**")
                .excludePathPatterns("/admin")  // 관리자 로그인 페이지 예외 처리
                .excludePathPatterns("/admin/login");  // 관리자 로그인 처리 POST 요청 예외 처리

    }
}

3. Service

    @RequiredArgsConstructor
    @Service
    @Transactional(readOnly = true)
    public class AdminService {
        private final AdminRepository adminRepository;
        private final AdminQueryRepository adminQueryRepository;

        public Admin 로그인(AdminRequest.LoginDTO loginDTO) {
            Admin admin  = adminRepository.mFindByOneUsernameAndPassword(loginDTO.getUsername(),loginDTO.getPassword())
                    .orElseThrow(() -> new Exception401("인증되지 않았습니다"));

            return admin;
        }
    }

4.repository 및 테스트

public interface AdminRepository extends JpaRepository<Admin, Long> {

    @Query("select a from Admin a where a.username=:username and a.password=:password")
    Optional<Admin> mFindByOneUsernameAndPassword(@Param("username") String username, @Param("password") String password);
}

  @Test
    public void mFindByOneUsernameAndPassword_test(){
       Admin admin = adminRepository.mFindByOneUsernameAndPassword("ssar","1234").get();
        System.out.println(admin.getUsername());
        System.out.println(admin.getName());
    }