From cc0dccbc08848dc4e2adc8a248fcb93435a3497a Mon Sep 17 00:00:00 2001
From: seungyeonchoi <48347010+seungyeonchoi@users.noreply.github.com>
Date: Wed, 27 Jan 2021 21:18:30 +0900
Subject: [PATCH 1/2] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 2ff8ab1..186b883 100644
--- a/README.md
+++ b/README.md
@@ -250,7 +250,7 @@
 </details>
 
 <details markdown="1">
-<summary>day3: 2020-12-26(토)</summary>
+<summary>day4: 2020-12-26(토)</summary>
 <ul>
     <li>진행 사항</><br>
     1. 학습 내용 (<a href="https://github.com/enan501/springStudy/wiki/Season-2-Day-4-(2020.12.26)">자세히</a>)

From 69835a7cf6dca66b87ce0910197aaa7427da6b59 Mon Sep 17 00:00:00 2001
From: wook9 <wook961206@naver.com>
Date: Thu, 28 Jan 2021 22:48:26 +0900
Subject: [PATCH 2/2] init

---
 build.gradle                                  | 14 ++++
 .../happy/wblserver/SecurityApplication.java  | 20 +++++
 .../wblserver/app/common/model/CommonVO.java  | 34 ++++++++
 .../wblserver/app/home/HomeController.java    | 23 ++++++
 .../app/user/controller/UserController.java   | 71 +++++++++++++++++
 .../app/user/model/UserDetailsVO.java         | 53 +++++++++++++
 .../wblserver/app/user/model/UserVO.java      | 36 +++++++++
 .../app/user/repository/UserRepository.java   | 16 ++++
 .../user/service/UserDetailsServiceImpl.java  | 23 ++++++
 .../app/user/service/UserService.java         | 14 ++++
 .../app/user/service/UserServiceImpl.java     | 31 ++++++++
 .../wblserver/config/filter/HeaderFilter.java | 27 +++++++
 .../security/CustomAuthenticationFilter.java  | 29 +++++++
 .../CustomAuthenticationProvider.java         | 48 ++++++++++++
 .../config/security/WebSecurityConfig.java    | 78 +++++++++++++++++++
 .../wblserver/config/web/WebMvcConfig.java    | 28 +++++++
 .../happy/wblserver/enums/role/UserRole.java  | 15 ++++
 .../exception/UserNotFoundException.java      |  9 +++
 .../handler/CustomLoginSuccessHandler.java    | 20 +++++
 src/main/resources/application.properties     | 14 ++++
 20 files changed, 603 insertions(+)
 create mode 100644 src/main/java/com/backdev/happy/wblserver/SecurityApplication.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/common/model/CommonVO.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/home/HomeController.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/controller/UserController.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/model/UserDetailsVO.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/model/UserVO.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/repository/UserRepository.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/service/UserDetailsServiceImpl.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/service/UserService.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/app/user/service/UserServiceImpl.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/config/filter/HeaderFilter.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationFilter.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationProvider.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/config/security/WebSecurityConfig.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/config/web/WebMvcConfig.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/enums/role/UserRole.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/exception/UserNotFoundException.java
 create mode 100644 src/main/java/com/backdev/happy/wblserver/handler/CustomLoginSuccessHandler.java

diff --git a/build.gradle b/build.gradle
index 602dd89..de26d72 100644
--- a/build.gradle
+++ b/build.gradle
@@ -15,6 +15,20 @@ repositories {
 dependencies {
 	implementation 'org.springframework.boot:spring-boot-starter-web'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
+	implementation 'org.mariadb.jdbc:mariadb-java-client'
+	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+
+	implementation 'org.springframework.boot:spring-boot-starter-web'
+
+	compileOnly 'org.projectlombok:lombok'
+	annotationProcessor 'org.projectlombok:lombok'
+
+	testImplementation('org.springframework.boot:spring-boot-starter-test') {
+		exclude group: 'org.junit.vintage', module: 'junit-vintage-engine'
+	}
+	testImplementation 'org.springframework.security:spring-security-test'
 }
 
 test {
diff --git a/src/main/java/com/backdev/happy/wblserver/SecurityApplication.java b/src/main/java/com/backdev/happy/wblserver/SecurityApplication.java
new file mode 100644
index 0000000..999ace1
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/SecurityApplication.java
@@ -0,0 +1,20 @@
+package com.backdev.happy.wblserver;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.builder.SpringApplicationBuilder;
+import org.springframework.boot.web.servlet.support.SpringBootServletInitializer;
+
+@SpringBootApplication
+public class SecurityApplication extends SpringBootServletInitializer {
+
+    @Override
+    protected SpringApplicationBuilder configure(SpringApplicationBuilder builder){
+        return builder.sources(SecurityApplication.class);
+    }
+
+    public static void main(String[] args) {
+        SpringApplication.run(SecurityApplication.class, args);
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/common/model/CommonVO.java b/src/main/java/com/backdev/happy/wblserver/app/common/model/CommonVO.java
new file mode 100644
index 0000000..c1db8ec
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/common/model/CommonVO.java
@@ -0,0 +1,34 @@
+package com.backdev.happy.wblserver.app.common.model;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+import org.hibernate.annotations.CreationTimestamp;
+import org.hibernate.annotations.UpdateTimestamp;
+
+import javax.persistence.*;
+import java.io.Serializable;
+import java.time.LocalDateTime;
+
+@MappedSuperclass
+@Getter
+@NoArgsConstructor
+public abstract class CommonVO implements Serializable {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    @Column(name = "id", nullable = false)
+    private Long id;                                        // 고유번호
+
+    @CreationTimestamp
+    @Column(nullable = false, length = 20, updatable = false)
+    private LocalDateTime createdAt;                        // 등록 일자
+
+    @UpdateTimestamp
+    @Column(length = 20)
+    private LocalDateTime updatedAt;                        // 수정 일자
+
+    @Setter
+    @Column(nullable = false, columnDefinition = "BOOLEAN DEFAULT true")
+    private Boolean isEnable = true;                        // 사용 여부
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/home/HomeController.java b/src/main/java/com/backdev/happy/wblserver/app/home/HomeController.java
new file mode 100644
index 0000000..1b8fb2d
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/home/HomeController.java
@@ -0,0 +1,23 @@
+package com.backdev.happy.wblserver.app.home;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+
+@Controller
+public class HomeController {
+
+    @GetMapping(value = "/index")
+    public String index(){
+        return "home/index";
+    }
+
+    @GetMapping(value = "/about")
+    public String about(){
+        return "home/about";
+    }
+
+    @GetMapping(value = "/admin")
+    public String admin(){
+        return "home/admin";
+    }
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/controller/UserController.java b/src/main/java/com/backdev/happy/wblserver/app/user/controller/UserController.java
new file mode 100644
index 0000000..1c3d22f
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/controller/UserController.java
@@ -0,0 +1,71 @@
+package com.backdev.happy.wblserver.app.user.controller;
+
+import com.backdev.happy.wblserver.app.user.model.UserVO;
+import com.backdev.happy.wblserver.app.user.service.UserService;
+import com.backdev.happy.wblserver.enums.role.UserRole;
+import lombok.NonNull;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.log4j.Log4j2;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import javax.annotation.Resource;
+import javax.servlet.http.HttpServletRequest;
+
+@RequiredArgsConstructor
+@Controller
+@RequestMapping(value = "/user")
+@Log4j2
+public class UserController {
+
+    @Resource(name = "userService")
+    private UserService userService;
+
+    @NonNull
+    private BCryptPasswordEncoder passwordEncoder;
+
+    @GetMapping(value = "/loginView")
+    public String loginView(){
+        return "user/login";
+    }
+
+
+    @PostMapping(value = "/login")
+    public String login(HttpServletRequest request, RedirectAttributes redirectAttributes, @ModelAttribute UserVO userVO){
+        log.error("@@@");
+        log.info("ㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋ");
+        log.info(userVO.getUserEmail());
+        log.info(userVO.getUserPw());
+        String userPw = userVO.getUserPw();
+        userVO = userService.findUserByUserEmail(userVO.getUserEmail());
+        if(userVO == null || !passwordEncoder.matches(userPw, userVO.getUserPw())){
+            redirectAttributes.addFlashAttribute("rsMsg", "아이디 또는 비밀번호가 잘못되었습니다.");
+            return "redirect:/user/loginView";
+        }
+
+        request.getSession().setAttribute("userVO", userVO);
+        return "redirect:/index";
+    }
+
+
+    @GetMapping(value = "/init")
+    public String createAdmin(@ModelAttribute UserVO userVO){
+        userVO.setUserEmail("user@naver.com");
+        userVO.setUserPw(passwordEncoder.encode("test"));
+        userVO.setRole(UserRole.USER);
+        if(userService.createUser(userVO) == null){
+            log.error("Create Admin Error");
+        }
+
+        userVO.setUserEmail("admin@naver.com");
+        userVO.setUserPw(passwordEncoder.encode("test"));
+        userVO.setRole(UserRole.ADMIN);
+        if(userService.createUser(userVO) == null){
+            log.error("Create Admin Error");
+        }
+        return "redirect:/index";
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/model/UserDetailsVO.java b/src/main/java/com/backdev/happy/wblserver/app/user/model/UserDetailsVO.java
new file mode 100644
index 0000000..b143eb7
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/model/UserDetailsVO.java
@@ -0,0 +1,53 @@
+package com.backdev.happy.wblserver.app.user.model;
+
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+import lombok.experimental.Delegate;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+
+@AllArgsConstructor
+@Getter
+public class UserDetailsVO implements UserDetails {
+
+    @Delegate
+    private UserVO userVO;
+    private Collection<? extends GrantedAuthority> authorities;
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        return authorities;
+    }
+
+    @Override
+    public String getPassword() {
+        return userVO.getUserPw();
+    }
+
+    @Override
+    public String getUsername() {
+        return userVO.getUserEmail();
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return userVO.getIsEnable();
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return userVO.getIsEnable();
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return userVO.getIsEnable();
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return userVO.getIsEnable();
+    }
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/model/UserVO.java b/src/main/java/com/backdev/happy/wblserver/app/user/model/UserVO.java
new file mode 100644
index 0000000..0b5bb3b
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/model/UserVO.java
@@ -0,0 +1,36 @@
+package com.backdev.happy.wblserver.app.user.model;
+
+
+import com.backdev.happy.wblserver.app.common.model.CommonVO;
+import com.backdev.happy.wblserver.enums.role.UserRole;
+import lombok.*;
+
+import javax.persistence.*;
+import java.io.Serializable;
+
+@NoArgsConstructor
+@Entity
+@Table(name = "users")
+@Getter
+public class UserVO extends CommonVO implements Serializable {
+
+    @Setter
+    @Column(nullable = false, unique = true, length = 50)
+    private String userEmail;
+
+    @Setter
+    @Column(nullable = false)
+    private String userPw;
+
+    @Setter
+    @Column(nullable = false, length = 50)
+    @Enumerated(EnumType.STRING)
+    private UserRole role;
+
+    @Builder
+    public UserVO(String userEmail, String userPw){
+        this.userEmail = userEmail;
+        this.userPw = userPw;
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/repository/UserRepository.java b/src/main/java/com/backdev/happy/wblserver/app/user/repository/UserRepository.java
new file mode 100644
index 0000000..c7b886d
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/repository/UserRepository.java
@@ -0,0 +1,16 @@
+package com.backdev.happy.wblserver.app.user.repository;
+
+
+import com.backdev.happy.wblserver.app.user.model.UserVO;
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+
+import java.util.Optional;
+
+@Repository
+public interface UserRepository extends JpaRepository <UserVO, Long> {
+
+    UserVO findByUserEmailAndUserPw(String userId, String userPw);
+
+    Optional<UserVO> findByUserEmail(String userEmail);
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/service/UserDetailsServiceImpl.java b/src/main/java/com/backdev/happy/wblserver/app/user/service/UserDetailsServiceImpl.java
new file mode 100644
index 0000000..cacfba0
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/service/UserDetailsServiceImpl.java
@@ -0,0 +1,23 @@
+package com.backdev.happy.wblserver.app.user.service;
+
+import com.backdev.happy.wblserver.app.user.model.UserDetailsVO;
+import com.backdev.happy.wblserver.app.user.repository.UserRepository;
+import com.backdev.happy.wblserver.exception.UserNotFoundException;
+import lombok.AllArgsConstructor;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.stereotype.Service;
+
+import java.util.Collections;
+
+@AllArgsConstructor
+@Service("userDetailsService")
+public class UserDetailsServiceImpl implements UserDetailsService {
+
+    private UserRepository userRepository;
+
+    @Override
+    public UserDetailsVO loadUserByUsername(String userEmail) {
+        return userRepository.findByUserEmail(userEmail).map(u -> new UserDetailsVO(u, Collections.singleton(new SimpleGrantedAuthority(u.getRole().getValue())))).orElseThrow(() -> new UserNotFoundException(userEmail));
+    }
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/service/UserService.java b/src/main/java/com/backdev/happy/wblserver/app/user/service/UserService.java
new file mode 100644
index 0000000..043ebd1
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/service/UserService.java
@@ -0,0 +1,14 @@
+package com.backdev.happy.wblserver.app.user.service;
+
+
+import com.backdev.happy.wblserver.app.user.model.UserVO;
+
+public interface UserService {
+
+    UserVO login(UserVO userVO);
+
+    UserVO createUser(UserVO userVO);
+
+    UserVO findUserByUserEmail(String userEmail);
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/app/user/service/UserServiceImpl.java b/src/main/java/com/backdev/happy/wblserver/app/user/service/UserServiceImpl.java
new file mode 100644
index 0000000..9ccf42e
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/app/user/service/UserServiceImpl.java
@@ -0,0 +1,31 @@
+package com.backdev.happy.wblserver.app.user.service;
+
+
+import com.backdev.happy.wblserver.app.user.model.UserVO;
+import com.backdev.happy.wblserver.app.user.repository.UserRepository;
+import lombok.NonNull;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+
+@RequiredArgsConstructor
+@Service("userService")
+public class UserServiceImpl implements UserService {
+
+    @NonNull
+    private UserRepository userRepository;
+
+    @Override
+    public UserVO login(UserVO userVO) {
+        return userRepository.findByUserEmailAndUserPw(userVO.getUserEmail(), userVO.getUserPw());
+    }
+
+    @Override
+    public UserVO createUser(UserVO userVO) {
+        return userRepository.save(userVO);
+    }
+
+    @Override
+    public UserVO findUserByUserEmail(String userEmail) {
+        return userRepository.findByUserEmail(userEmail).get();
+    }
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/config/filter/HeaderFilter.java b/src/main/java/com/backdev/happy/wblserver/config/filter/HeaderFilter.java
new file mode 100644
index 0000000..32328be
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/config/filter/HeaderFilter.java
@@ -0,0 +1,27 @@
+package com.backdev.happy.wblserver.config.filter;
+
+import lombok.extern.log4j.Log4j2;
+
+import javax.servlet.*;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+@Log4j2
+public class HeaderFilter implements Filter {
+
+    @Override
+    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
+        HttpServletResponse res = (HttpServletResponse) response;
+        res.setHeader("Access-Control-Allow-Origin", "*");
+        res.setHeader("Access-Control-Allow-Methods", "GET, POST");
+        res.setHeader("Access-Control-Max-Age", "3600");
+        res.setHeader(
+                "Access-Control-Allow-Headers",
+                "X-Requested-With, Content-Type, Authorization, X-XSRF-token"
+        );
+        res.setHeader("Access-Control-Allow-Credentials", "false");
+
+        chain.doFilter(request, response);
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationFilter.java b/src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationFilter.java
new file mode 100644
index 0000000..f6933f6
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationFilter.java
@@ -0,0 +1,29 @@
+package com.backdev.happy.wblserver.config.security;
+
+import lombok.extern.log4j.Log4j2;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+@Log4j2
+public class CustomAuthenticationFilter extends UsernamePasswordAuthenticationFilter {
+
+    public CustomAuthenticationFilter(AuthenticationManager authenticationManager) {
+        super.setAuthenticationManager(authenticationManager);
+    }
+
+    @Override
+    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {
+        log.info("ㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋㅋ"+request.getParameter("userEmail"));
+        log.info(request.getParameter("userPw"));
+        UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(request.getParameter("userEmail"), request.getParameter("userPw"));
+        setDetails(request, authRequest);
+        return this.getAuthenticationManager().authenticate(authRequest);
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationProvider.java b/src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationProvider.java
new file mode 100644
index 0000000..132606e
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/config/security/CustomAuthenticationProvider.java
@@ -0,0 +1,48 @@
+package com.backdev.happy.wblserver.config.security;
+
+
+import com.backdev.happy.wblserver.app.user.model.UserDetailsVO;
+import lombok.NonNull;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.log4j.Log4j2;
+import org.springframework.security.authentication.AuthenticationProvider;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+
+import javax.annotation.Resource;
+
+@RequiredArgsConstructor
+@Log4j2
+public class CustomAuthenticationProvider implements AuthenticationProvider {
+
+    @Resource(name = "userDetailsService")
+    private UserDetailsService userDetailsService;
+    @NonNull
+    private BCryptPasswordEncoder passwordEncoder;
+
+    @Override
+    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
+        log.error("##############");
+        UsernamePasswordAuthenticationToken token = (UsernamePasswordAuthenticationToken) authentication;
+        // AuthenticaionFilter에서 생성된 토큰으로부터 아이디와 비밀번호를 조회함
+        String userEmail = token.getName();
+        String userPw = (String) token.getCredentials();
+        // UserDetailsService를 통해 DB에서 아이디로 사용자 조회
+        UserDetailsVO userDetailsVO = (UserDetailsVO) userDetailsService.loadUserByUsername(userEmail);
+        if (!passwordEncoder.matches(userPw, userDetailsVO.getPassword())) {
+            throw new BadCredentialsException(userDetailsVO.getUsername() + "Invalid password");
+        }
+
+        return new UsernamePasswordAuthenticationToken(userDetailsVO, userPw, userDetailsVO.getAuthorities());
+    }
+
+    @Override
+    public boolean supports(Class<?> authentication) {
+        return authentication.equals(UsernamePasswordAuthenticationToken.class);
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/config/security/WebSecurityConfig.java b/src/main/java/com/backdev/happy/wblserver/config/security/WebSecurityConfig.java
new file mode 100644
index 0000000..9543e3c
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/config/security/WebSecurityConfig.java
@@ -0,0 +1,78 @@
+package com.backdev.happy.wblserver.config.security;
+
+
+import com.backdev.happy.wblserver.handler.CustomLoginSuccessHandler;
+import org.springframework.boot.autoconfigure.security.servlet.PathRequest;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.builders.WebSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+@Configuration
+@EnableWebSecurity
+public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
+
+    // 정적 자원에 대해서는 Security 설정을 적용하지 않음.
+    @Override
+    public void configure(WebSecurity web) {
+        web.ignoring().requestMatchers(PathRequest.toStaticResources().atCommonLocations());
+    }
+
+    @Override
+    protected void configure(HttpSecurity http) throws Exception {
+        http.csrf().disable().authorizeRequests()
+                // /about 요청에 대해서는 로그인을 요구함
+                .antMatchers("/about").authenticated()
+                // /admin 요청에 대해서는 ROLE_ADMIN 역할을 가지고 있어야 함
+                .antMatchers("/admin").hasRole("ADMIN")
+                // 나머지 요청에 대해서는 로그인을 요구하지 않음
+                .anyRequest().permitAll()
+                .and()
+                // 로그인하는 경우에 대해 설정함
+            .formLogin()
+                // 로그인 페이지를 제공하는 URL을 설정함
+                .loginPage("/user/loginView")
+                // 로그인 성공 URL을 설정함
+                .successForwardUrl("/index")
+                // 로그인 실패 URL을 설정함
+                .failureForwardUrl("/index")
+                .permitAll()
+                .and()
+                .addFilterBefore(customAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
+    }
+
+    @Bean
+    public BCryptPasswordEncoder bCryptPasswordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    public CustomAuthenticationFilter customAuthenticationFilter() throws Exception {
+        CustomAuthenticationFilter customAuthenticationFilter = new CustomAuthenticationFilter(authenticationManager());
+        customAuthenticationFilter.setFilterProcessesUrl("/user/login");
+        customAuthenticationFilter.setAuthenticationSuccessHandler(customLoginSuccessHandler());
+        customAuthenticationFilter.afterPropertiesSet();
+        return customAuthenticationFilter;
+    }
+
+    @Bean
+    public CustomLoginSuccessHandler customLoginSuccessHandler() {
+        return new CustomLoginSuccessHandler();
+    }
+
+    @Bean
+    public CustomAuthenticationProvider customAuthenticationProvider() {
+        return new CustomAuthenticationProvider(bCryptPasswordEncoder());
+    }
+
+    @Override
+    public void configure(AuthenticationManagerBuilder authenticationManagerBuilder) {
+        authenticationManagerBuilder.authenticationProvider(customAuthenticationProvider());
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/config/web/WebMvcConfig.java b/src/main/java/com/backdev/happy/wblserver/config/web/WebMvcConfig.java
new file mode 100644
index 0000000..5f2689f
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/config/web/WebMvcConfig.java
@@ -0,0 +1,28 @@
+package com.backdev.happy.wblserver.config.web;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.core.Ordered;
+import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
+import org.springframework.web.servlet.config.annotation.ViewControllerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+public class WebMvcConfig implements WebMvcConfigurer {
+
+    private static final String[] CLASSPATH_RESOURCE_LOCATIONS = { "classpath:/static/", "classpath:/public/", "classpath:/",
+            "classpath:/resources/", "classpath:/META-INF/resources/", "classpath:/META-INF/resources/webjars/" };
+
+    @Override
+    public void addViewControllers(ViewControllerRegistry registry) {
+        // /에 해당하는 url mapping을 /common/test로 forward한다.
+        registry.addViewController( "/" ).setViewName( "forward:/index" );
+        // 우선순위를 가장 높게 잡는다.
+        registry.setOrder(Ordered.HIGHEST_PRECEDENCE);
+    }
+
+    @Override
+    public void addResourceHandlers(ResourceHandlerRegistry registry) {
+        registry.addResourceHandler("/**").addResourceLocations(CLASSPATH_RESOURCE_LOCATIONS);
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/enums/role/UserRole.java b/src/main/java/com/backdev/happy/wblserver/enums/role/UserRole.java
new file mode 100644
index 0000000..64553d6
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/enums/role/UserRole.java
@@ -0,0 +1,15 @@
+package com.backdev.happy.wblserver.enums.role;
+
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+
+@AllArgsConstructor
+@Getter
+public enum UserRole {
+
+    USER("ROLE_USER"),
+    ADMIN("ROLE_ADMIN");
+
+    private String value;
+
+}
\ No newline at end of file
diff --git a/src/main/java/com/backdev/happy/wblserver/exception/UserNotFoundException.java b/src/main/java/com/backdev/happy/wblserver/exception/UserNotFoundException.java
new file mode 100644
index 0000000..2ab2117
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/exception/UserNotFoundException.java
@@ -0,0 +1,9 @@
+package com.backdev.happy.wblserver.exception;
+
+public class UserNotFoundException extends RuntimeException {
+
+    public UserNotFoundException(String userEmail){
+        super(userEmail + " NotFoundException");
+    }
+
+}
diff --git a/src/main/java/com/backdev/happy/wblserver/handler/CustomLoginSuccessHandler.java b/src/main/java/com/backdev/happy/wblserver/handler/CustomLoginSuccessHandler.java
new file mode 100644
index 0000000..28fd006
--- /dev/null
+++ b/src/main/java/com/backdev/happy/wblserver/handler/CustomLoginSuccessHandler.java
@@ -0,0 +1,20 @@
+package com.backdev.happy.wblserver.handler;
+
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+public class CustomLoginSuccessHandler extends SavedRequestAwareAuthenticationSuccessHandler {
+
+    @Override
+    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
+                                        Authentication authentication) throws IOException {
+        SecurityContextHolder.getContext().setAuthentication(authentication);
+        response.sendRedirect("/about");
+    }
+
+}
\ No newline at end of file
diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
index 8b13789..e87b485 100644
--- a/src/main/resources/application.properties
+++ b/src/main/resources/application.properties
@@ -1 +1,15 @@
 
+server.port=8081
+server.address=localhost
+
+# JPA
+spring.jpa.hibernate.ddl-auto=update
+spring.jpa.generate-ddl=true
+spring.jpa.open-in-view=false
+spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.MySQL5InnoDBDialect
+
+# Datasource
+spring.datasource.driver-class-name=org.mariadb.jdbc.Driver
+spring.datasource.url=jdbc:mysql://localhost:3306/security?characterEncoding=utf-8
+spring.datasource.username=root
+spring.datasource.password=rmsdnr96@@