Auth.php 32 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975
  1. <?php
  2. namespace App\Controllers;
  3. require_once __DIR__ . '/../Libraries/autoload.php';
  4. use App\Models\UserListModel;
  5. use CodeIgniter\RESTful\ResourceController;
  6. use Google\Client;
  7. use Google\Service\Oauth2;
  8. use App\Libraries\JwtLib\JWT;
  9. use App\Libraries\JwtLib\Key;
  10. class Auth extends ResourceController
  11. {
  12. private const FRONTEND_BASE_URL = "http://localhost:3000";
  13. //private const FRONTEND_BASE_URL = 'https://shopdeli.mycafe24.com';
  14. protected $userModel;
  15. public function __construct()
  16. {
  17. $this->userModel = new UserListModel();
  18. }
  19. //구글 로그인 콜백(인증)
  20. public function callback()
  21. {
  22. if (isset($_GET['code'])) {
  23. $code = $_GET['code'];
  24. // Google 클라이언트 설정
  25. $client = new Client();
  26. $client->setClientId('373780605211-diojebh7mug45urv9rnqdil6n0b1ogge.apps.googleusercontent.com');
  27. $client->setClientSecret('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');
  28. $client->setRedirectUri('https://shopdeli.mycafe24.com/auth/callback');
  29. $client->setAccessType('offline'); // 인증 요청 전에 지정!
  30. $client->authenticate($code);
  31. $googleAccessToken = $client->getAccessToken();
  32. // 별도의 변수로 분리
  33. $googleOAuthAccessToken = $googleAccessToken['access_token'] ?? null;
  34. $googleOAuthRefreshToken = $googleAccessToken['refresh_token'] ?? null;
  35. // 업데이트: setAccessToken에는 전체 배열을 넣을 수 있지만
  36. // accessToken 만 넣으려면 아래처럼 쓸 수 있습니다.
  37. if ($googleOAuthAccessToken) {
  38. $client->setAccessToken($googleOAuthAccessToken);
  39. }
  40. // 사용자 정보 가져오기
  41. $oauth2 = new Oauth2($client);
  42. $userInfo = $oauth2->userinfo->get();
  43. // 사용자 정보 변수 지정
  44. $id = $userInfo->id;
  45. $authenticatedEmail = $userInfo->email;
  46. $name = $userInfo->name;
  47. // DB Connection (CodeIgniter 4)
  48. $db = \Config\Database::connect();
  49. // 1. USER_LIST에서 이메일로 조회
  50. $builder = $db->table('USER_LIST');
  51. $user = $builder->where('EMAIL', $authenticatedEmail)->get()->getRowArray();
  52. if ($user) {
  53. $jwtSecret = env('JWT_SECRET');
  54. $kid = env('JWT_KID');
  55. if (empty($jwtSecret) || empty($kid)) {
  56. return $this->failServerError('환경변수가 누락되었습니다. 관리자에게 문의하세요.');
  57. }
  58. if (!class_exists('\App\Libraries\JwtLib\JWT')) {
  59. return $this->failServerError('JWT 라이브러리를 찾을 수 없습니다.');
  60. }
  61. $issuedAt = time();
  62. $accessExpire = $issuedAt + 60 * 15; // 15분
  63. $refreshExpire = $issuedAt + 60 * 60 * 24 * 14; // 14일
  64. $accessPayload = [
  65. 'iat' => $issuedAt,
  66. 'exp' => $accessExpire,
  67. 'sub' => $id,
  68. 'name' => $name ?? '',
  69. ];
  70. $refreshPayload = [
  71. 'iat' => $issuedAt,
  72. 'exp' => $refreshExpire,
  73. 'sub' => $id,
  74. ];
  75. try {
  76. $accessToken = JWT::encode($accessPayload, $jwtSecret, 'HS256', $kid);
  77. $refreshToken = JWT::encode($refreshPayload, $jwtSecret, 'HS256', $kid);
  78. // (선택) DB의 리프레시 토큰 값 업데이트
  79. $db = \Config\Database::connect();
  80. $builder = $db->table('USER_LIST');
  81. $builder->where('ID', $id)->update(['REFRESH_TOKEN' => $refreshToken]);
  82. } catch (\Throwable $e) {
  83. return $this->failServerError('JWT 생성 오류: ' . $e->getMessage());
  84. }
  85. unset($user['PASSWORD']); // 혹시 비번이 있다면 노출 방지
  86. $query = http_build_query([
  87. "accessToken" => $accessToken,
  88. "refreshToken" => $refreshToken,
  89. "user" => urlencode(json_encode($user)),
  90. ]);
  91. //return redirect()->to(base_url("auth/popupClose?$query"));
  92. // 개발진행중 풀 URL
  93. return redirect()->to(self::FRONTEND_BASE_URL."/auth/popupClose?$query");
  94. } else {
  95. // 회원이 없으면 회원가입
  96. $type = 1;
  97. // ID는 auto_increment라면 생략
  98. $authData = [
  99. 'ID' => $id,
  100. 'NAME' => $name,
  101. 'EMAIL' => $authenticatedEmail,
  102. 'TYPE' => $type,
  103. 'JOIN' => '1',
  104. 'GOOGLE_REFRESH_TOKEN' => $googleOAuthRefreshToken ?? null
  105. ];
  106. $query = http_build_query([
  107. "user" => urlencode(json_encode($authData)),
  108. ]);
  109. //return redirect()->to(base_url("auth/popupClose?$query"));
  110. // 개발진행중 풀 URL
  111. return redirect()->to(self::FRONTEND_BASE_URL."/auth/popupClose?$query");
  112. }
  113. } else {
  114. echo "인증코드가 없습니다.";
  115. }
  116. }
  117. public function join()
  118. {
  119. $postData = $this->request->getJSON(true);
  120. // 필수값 추출
  121. $id = $postData['ID'] ?? null;
  122. $password = $postData['PASSWORD'] ?? null;
  123. $name = $postData['NAME'] ?? null;
  124. $nick_name = $postData['NICK_NAME'] ?? null;
  125. $phone = $postData['PHONE'] ?? null;
  126. $email = $postData['EMAIL'] ?? null;
  127. $sns_type = $postData['SNS_TYPE'] ?? null;
  128. $sns_link_id = $postData['SNS_LINK_ID'] ?? null;
  129. $add_info1 = $postData['ADD_INFO1'] ?? null;
  130. $google_refresh_token = $postData['GOOGLE_REFRESH_TOKEN'] ?? null;
  131. $type = $postData['TYPE'] ?? null;
  132. // 필수값 검증
  133. if (empty($name) || empty($email)) {
  134. return redirect()->back()->with('error', '필수 정보를 입력해 주세요.');
  135. }
  136. // insert용 데이터 준비
  137. $insertData = [
  138. 'ID' => $id,
  139. 'PASSWORD' => $password,
  140. 'NAME' => $name,
  141. 'NICK_NAME' => $nick_name,
  142. 'PHONE' => $phone,
  143. 'EMAIL' => $email,
  144. 'SNS_TYPE' => $sns_type,
  145. 'SNS_LINK_ID' => $sns_link_id,
  146. 'ADD_INFO1' => $add_info1,
  147. 'GOOGLE_REFRESH_TOKEN' => $google_refresh_token,
  148. 'TYPE' => $type,
  149. ];
  150. if (!empty($password)) {
  151. $insertData['PASSWORD'] = password_hash($password, PASSWORD_DEFAULT);
  152. }
  153. // DB 연결 및 INSERT
  154. try {
  155. $db = \Config\Database::connect();
  156. $builder = $db->table('USER_LIST');
  157. $result = $builder->insert($insertData);
  158. if (!$result) {
  159. $error = $db->error();
  160. return $this->response->setJSON([
  161. 'status' => 'fail',
  162. 'message' => 'DB Error: '.$error['message']
  163. ])->setStatusCode(500);
  164. }
  165. } catch (\Throwable $e) {
  166. return $this->response->setJSON([
  167. 'status' => 'fail',
  168. 'message' => 'Exception: ' . $e->getMessage()
  169. ])->setStatusCode(500);
  170. }
  171. // 회원가입 성공 시, JSON 응답으로 결과 반환 (200 OK)
  172. return $this->response->setJSON([
  173. 'status' => 'success',
  174. 'message' => '회원가입이 완료되었습니다.'
  175. ])->setStatusCode(200);
  176. }
  177. public function joinVendor()
  178. {
  179. $postData = $this->request->getJSON(true);
  180. // 필수값 추출
  181. $id = $postData['ID'] ?? null;
  182. $password = $postData['PASSWORD'] ?? null;
  183. $name = $postData['NAME'] ?? null;
  184. $company_name = $postData['COMPANY_NAME'] ?? null;
  185. $company_number = $postData['COMPANY_NUMBER'] ?? null;
  186. $hp = $postData['HP'] ?? null;
  187. $email = $postData['EMAIL'] ?? null;
  188. // 필수값 검증
  189. if (empty($name) || empty($email)) {
  190. return redirect()->back()->with('error', '필수 정보를 입력해 주세요.');
  191. }
  192. // insert용 데이터 준비
  193. $insertData = [
  194. 'ID' => $id,
  195. 'PASSWORD' => $password,
  196. 'NAME' => $name,
  197. 'COMPANY_NAME' => $company_name,
  198. 'HP' => $hp,
  199. 'EMAIL' => $email,
  200. 'COMPANY_NUMBER' => $company_number
  201. ];
  202. if (!empty($password)) {
  203. $insertData['PASSWORD'] = password_hash($password, PASSWORD_DEFAULT);
  204. }
  205. // DB 연결 및 INSERT
  206. try {
  207. $db = \Config\Database::connect();
  208. $builder = $db->table('VENDOR_LIST');
  209. $result = $builder->insert($insertData);
  210. if (!$result) {
  211. $error = $db->error();
  212. return $this->response->setJSON([
  213. 'status' => 'fail',
  214. 'message' => 'DB Error: '.$error['message']
  215. ])->setStatusCode(500);
  216. }
  217. } catch (\Throwable $e) {
  218. return $this->response->setJSON([
  219. 'status' => 'fail',
  220. 'message' => 'Exception: ' . $e->getMessage()
  221. ])->setStatusCode(500);
  222. }
  223. // 회원가입 성공 시, JSON 응답으로 결과 반환 (200 OK)
  224. return $this->response->setJSON([
  225. 'status' => 'success',
  226. 'message' => '회원가입이 완료되었습니다.'
  227. ])->setStatusCode(200);
  228. }
  229. public function joinBrand()
  230. {
  231. $postData = $this->request->getJSON(true);
  232. // 필수값 추출
  233. $id = $postData['ID'] ?? null;
  234. $password = $postData['PASSWORD'] ?? null;
  235. $name = $postData['NAME'] ?? null;
  236. $company_name = $postData['COMPANY_NAME'] ?? null;
  237. $company_number = $postData['COMPANY_NUMBER'] ?? null;
  238. $hp = $postData['HP'] ?? null;
  239. $email = $postData['EMAIL'] ?? null;
  240. // 필수값 검증
  241. if (empty($name) || empty($email)) {
  242. return redirect()->back()->with('error', '필수 정보를 입력해 주세요.');
  243. }
  244. // insert용 데이터 준비
  245. $insertData = [
  246. 'ID' => $id,
  247. 'PASSWORD' => $password,
  248. 'NAME' => $name,
  249. 'COMPANY_NAME' => $company_name,
  250. 'HP' => $hp,
  251. 'EMAIL' => $email,
  252. 'COMPANY_NUMBER' => $company_number
  253. ];
  254. if (!empty($password)) {
  255. $insertData['PASSWORD'] = password_hash($password, PASSWORD_DEFAULT);
  256. }
  257. // DB 연결 및 INSERT
  258. try {
  259. $db = \Config\Database::connect();
  260. $builder = $db->table('BRAND_LIST');
  261. $result = $builder->insert($insertData);
  262. if (!$result) {
  263. $error = $db->error();
  264. return $this->response->setJSON([
  265. 'status' => 'fail',
  266. 'message' => 'DB Error: '.$error['message']
  267. ])->setStatusCode(500);
  268. }
  269. } catch (\Throwable $e) {
  270. return $this->response->setJSON([
  271. 'status' => 'fail',
  272. 'message' => 'Exception: ' . $e->getMessage()
  273. ])->setStatusCode(500);
  274. }
  275. // 회원가입 성공 시, JSON 응답으로 결과 반환 (200 OK)
  276. return $this->response->setJSON([
  277. 'status' => 'success',
  278. 'message' => '회원가입이 완료되었습니다.'
  279. ])->setStatusCode(200);
  280. }
  281. //구글 로그인 환경 회원 탈퇴
  282. public function withdrawal()
  283. {
  284. // 1. 요청에서 사용자 SEQ 추출 (예: POST or GET)
  285. $postData = $this->request->getJSON(true);
  286. $seq = $postData['SEQ'];
  287. $googleAccessToken = $postData['GOOGLE_REFRESH_TOKEN'];
  288. // 2. 사용자 정보 조회 (구글 토큰 포함)
  289. $user = $this->userModel->find($seq);
  290. if (!$user) {
  291. return $this->response->setJSON(['error' => 'User not found'])->setStatusCode(404);
  292. }
  293. // 3. 구글 인증 연결 해제(access_token 필요)
  294. if ($googleAccessToken) {
  295. $this->revokeGoogleAccess($googleAccessToken);
  296. }
  297. // 4. USER_LIST에서 사용자 삭제
  298. $this->userModel->delete($seq);
  299. // 5. 응답 반환
  300. return $this->response->setJSON([
  301. 'result' => 'User account deleted and Google link revoked'
  302. ])->setStatusCode(200);
  303. }
  304. /***********************************
  305. * 카카오 간편로그인 / 가입
  306. **********************************/
  307. //카카오 인증
  308. public function kakaoLogin()
  309. {
  310. $clientId = '1f8376b18a02a00f2e4e5594f9ace6d4'; // 카카오 REST API 키로 변경
  311. $redirectUri = urlencode('https://shopdeli.mycafe24.com/auth/kakao'); // 콜백 URL (ex: https://도메인/auth/kakaoCallback)
  312. $url = "https://kauth.kakao.com/oauth/authorize?client_id={$clientId}&redirect_uri={$redirectUri}&response_type=code";
  313. return redirect()->to($url);
  314. }
  315. //카카오 인증후 진행
  316. public function kakao()
  317. {
  318. $code = $this->request->getGet('code');
  319. $clientId = '1f8376b18a02a00f2e4e5594f9ace6d4'; // 카카오 REST API 키
  320. $redirectUri = 'https://shopdeli.mycafe24.com/auth/kakao'; // 콜백 URL
  321. $tokenUrl = "https://kauth.kakao.com/oauth/token";
  322. // 토큰 요청
  323. $tokenData = [
  324. 'grant_type' => 'authorization_code',
  325. 'scopes' => 'offline_access',
  326. 'client_id' => $clientId,
  327. 'redirect_uri' => $redirectUri,
  328. 'code' => $code,
  329. ];
  330. $client = \Config\Services::curlrequest();
  331. $tokenResponse = $client->post($tokenUrl, [
  332. 'form_params' => $tokenData
  333. ]);
  334. $tokenResult = json_decode($tokenResponse->getBody(), true);
  335. $accessTokenKakao = $tokenResult['access_token'];
  336. $refreshTokenKakao = $tokenResult['refresh_token'];
  337. // 사용자 정보 요청
  338. $userUrl = "https://kapi.kakao.com/v2/user/me";
  339. $userResponse = $client->get($userUrl, [
  340. 'headers' => [
  341. 'Authorization' => 'Bearer ' . $accessTokenKakao,
  342. ]
  343. ]);
  344. $userInfo = json_decode($userResponse->getBody(), true);
  345. $userInfo['access_token'] = $accessTokenKakao;
  346. $userInfo['refresh_token'] = $refreshTokenKakao; //회원탈퇴시 이용 로그인시 마다 신규 리프래시 토큰 발급 받게 됨
  347. // 여기에 회원가입/로그인 처리를 구현하세요
  348. // 예: $userInfo['kakao_account']['email'], $userInfo['properties']['nickname']
  349. //DB 커넥션
  350. $db = \Config\Database::connect();
  351. // 1. USER_LIST에서 이메일로 조회
  352. $id = $userInfo['id'];
  353. $email = $userInfo['kakao_account']['email'];
  354. $builder = $db->table('USER_LIST');
  355. $user = $builder->where('EMAIL', $email)->get()->getRowArray();
  356. if($user){
  357. $jwtSecret = env('JWT_SECRET');
  358. $kid = env('JWT_KID');
  359. if (empty($jwtSecret) || empty($kid)) {
  360. return $this->failServerError('환경변수가 누락되었습니다. 관리자에게 문의하세요.');
  361. }
  362. if (!class_exists('\App\Libraries\JwtLib\JWT')) {
  363. return $this->failServerError('JWT 라이브러리를 찾을 수 없습니다.');
  364. }
  365. $issuedAt = time();
  366. $accessExpire = $issuedAt + 60 * 15; // 15분
  367. $refreshExpire = $issuedAt + 60 * 60 * 24 * 14; // 14일
  368. $accessPayload = [
  369. 'iat' => $issuedAt,
  370. 'exp' => $accessExpire,
  371. 'sub' => $id,
  372. //'name' => $name ?? '',
  373. ];
  374. $refreshPayload = [
  375. 'iat' => $issuedAt,
  376. 'exp' => $refreshExpire,
  377. 'sub' => $id,
  378. ];
  379. try {
  380. $accessToken = JWT::encode($accessPayload, $jwtSecret, 'HS256', $kid);
  381. $refreshToken = JWT::encode($refreshPayload, $jwtSecret, 'HS256', $kid);
  382. // (선택) DB의 리프레시 토큰 값 업데이트
  383. $db = \Config\Database::connect();
  384. $builder = $db->table('USER_LIST');
  385. $builder->where('ID', $id)->update([
  386. 'REFRESH_TOKEN' => $refreshToken,
  387. 'KAKAO_REFRESH_TOKEN' => $userInfo['refresh_token']
  388. ]);
  389. } catch (\Throwable $e) {
  390. return $this->failServerError('JWT 생성 오류: ' . $e->getMessage());
  391. }
  392. unset($user['PASSWORD']); // 혹시 비번이 있다면 노출 방지
  393. $query = http_build_query([
  394. "accessToken" => $accessToken,
  395. "refreshToken" => $refreshToken,
  396. "user" => urlencode(json_encode($user)),
  397. ]);
  398. //return redirect()->to(base_url("auth/popupClose?$query"));
  399. // 개발진행중 풀 URL
  400. return redirect()->to(self::FRONTEND_BASE_URL."/auth/popupClose?$query");
  401. }else{
  402. // 회원이 없으면 회원가입
  403. $type = 1;
  404. // ID는 auto_increment라면 생략
  405. $authData = [
  406. 'ID' => $id,
  407. //'NAME' => $name,
  408. 'EMAIL' => $email,
  409. 'TYPE' => $type,
  410. 'JOIN' => '1',
  411. 'KAKAO_REFRESH_TOKEN' => $userInfo['refresh_token'] ?? null
  412. ];
  413. $query = http_build_query([
  414. "user" => urlencode(json_encode($authData)),
  415. ]);
  416. //return redirect()->to(base_url("auth/popupClose?$query"));
  417. // 개발진행중 풀 URL
  418. return redirect()->to(self::FRONTEND_BASE_URL."/auth/popupClose?$query");
  419. }
  420. }
  421. //카카오 회원탈퇴
  422. public function kakaoWithdrawal(){
  423. // 1. 요청에서 사용자 SEQ 추출 (예: POST or GET)
  424. $postData = $this->request->getJSON(true);
  425. $seq = $postData['SEQ'];
  426. $refreshTokenKaKao = $postData['KAKAO_REFRESH_TOKEN'];
  427. // 2. 사용자 정보 조회 (구글 토큰 포함)
  428. $user = $this->userModel->find($seq);
  429. if (!$user) {
  430. return $this->response->setJSON(['error' => 'User not found'])->setStatusCode(404);
  431. }
  432. // 3. 카카오 언링크 처리
  433. $tokenUrl = "https://kauth.kakao.com/oauth/token";
  434. $tokenData = [
  435. 'grant_type' => 'refresh_token',
  436. 'client_id' => '1f8376b18a02a00f2e4e5594f9ace6d4',
  437. 'refresh_token' => $refreshTokenKaKao, // DB에서 불러온 값
  438. ];
  439. $client = \Config\Services::curlrequest();
  440. $tokenResponse = $client->post($tokenUrl, [
  441. 'form_params' => $tokenData
  442. ]);
  443. $tokenResult = json_decode($tokenResponse->getBody(), true);
  444. $accessTokenKakao = $tokenResult['access_token'];
  445. // (2) 발급받은 access_token으로 연결 끊기 요청
  446. $userUnlinkUrl = "https://kapi.kakao.com/v1/user/unlink";
  447. $response = $client->post($userUnlinkUrl, [
  448. 'headers' => [
  449. 'Authorization' => 'Bearer ' . $accessTokenKakao,
  450. ]
  451. ]);
  452. // 4. USER_LIST에서 사용자 삭제
  453. $this->userModel->delete($seq);
  454. // 5. 응답 반환
  455. return $this->response->setJSON([
  456. 'result' => 'User account deleted and Google link revoked'
  457. ])->setStatusCode(200);
  458. }
  459. /***********************************
  460. * 내아버 간편로그인 / 가입
  461. **********************************/
  462. //네이버 인증
  463. public function naverLogin()
  464. {
  465. $client_id = 'tPw7dRu1r7yY89O5gN7n';
  466. $redirect_uri = urlencode('https://shopdeli.mycafe24.com/auth/naver'); // ex) https://your.site/naver-callback
  467. $state = bin2hex(random_bytes(8));
  468. session()->set('naver_state', $state);
  469. $naver_auth_url = "https://nid.naver.com/oauth2.0/authorize?"
  470. . "response_type=code"
  471. . "&client_id={$client_id}"
  472. . "&client_icon=https://ndevthumb-phinf.pstatic.net/20250708_43/1751954347202gc3db_JPEG/x49C3CDfcWcI20250708145907.jpeg"
  473. . "&redirect_uri={$redirect_uri}"
  474. . "&state={$state}";
  475. // 네이버 인증/동의화면으로 리디렉트
  476. return redirect()->to($naver_auth_url);
  477. }
  478. public function naver(){
  479. $client_id = 'tPw7dRu1r7yY89O5gN7n';
  480. $client_secret = 'Pgan4lv9l9';
  481. $state = $this->request->getGet('state');
  482. $code = $this->request->getGet('code');
  483. if ($state !== session()->get('naver_state')) {
  484. exit('CSRF 실패');
  485. }
  486. // 토큰 발급
  487. $token_url = "https://nid.naver.com/oauth2.0/token"
  488. . "?grant_type=authorization_code"
  489. . "&client_id={$client_id}"
  490. . "&client_secret={$client_secret}"
  491. . "&code={$code}"
  492. . "&state={$state}";
  493. // cURL로 토큰 요청
  494. $ch = curl_init();
  495. curl_setopt($ch, CURLOPT_URL, $token_url);
  496. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  497. $token_response = curl_exec($ch);
  498. curl_close($ch);
  499. // JSON 파싱
  500. $token_data = json_decode($token_response, true);
  501. $access_token = $token_data['access_token'] ?? null;
  502. // 회원 정보 요청
  503. if ($access_token) {
  504. $headers = [
  505. "Authorization: Bearer {$access_token}"
  506. ];
  507. $ch = curl_init();
  508. curl_setopt($ch, CURLOPT_URL, "https://openapi.naver.com/v1/nid/me");
  509. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  510. curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
  511. $user_info = curl_exec($ch);
  512. curl_close($ch);
  513. $user_info_arr = json_decode($user_info, true);
  514. $user_info_arr['refresh_token'] = $token_data['refresh_token'];
  515. $user_info_arr['access_token'] = $token_data['access_token'];
  516. //DB 커넥션
  517. $db = \Config\Database::connect();
  518. // 1. USER_LIST에서 이메일로 조회
  519. $id = $user_info_arr['response']['id'];
  520. $email = $user_info_arr['response']['email'];
  521. $name = $user_info_arr['response']['name'];
  522. $phone = $user_info_arr['response']['mobile'];
  523. $builder = $db->table('USER_LIST');
  524. $user = $builder->where('EMAIL', $email)->get()->getRowArray();
  525. if($user){
  526. $jwtSecret = env('JWT_SECRET');
  527. $kid = env('JWT_KID');
  528. if (empty($jwtSecret) || empty($kid)) {
  529. return $this->failServerError('환경변수가 누락되었습니다. 관리자에게 문의하세요.');
  530. }
  531. if (!class_exists('\App\Libraries\JwtLib\JWT')) {
  532. return $this->failServerError('JWT 라이브러리를 찾을 수 없습니다.');
  533. }
  534. $issuedAt = time();
  535. $accessExpire = $issuedAt + 60 * 15; // 15분
  536. $refreshExpire = $issuedAt + 60 * 60 * 24 * 14; // 14일
  537. $accessPayload = [
  538. 'iat' => $issuedAt,
  539. 'exp' => $accessExpire,
  540. 'sub' => $id,
  541. 'name' => $name ?? '',
  542. ];
  543. $refreshPayload = [
  544. 'iat' => $issuedAt,
  545. 'exp' => $refreshExpire,
  546. 'sub' => $id,
  547. ];
  548. try {
  549. $accessToken = JWT::encode($accessPayload, $jwtSecret, 'HS256', $kid);
  550. $refreshToken = JWT::encode($refreshPayload, $jwtSecret, 'HS256', $kid);
  551. // (선택) DB의 리프레시 토큰 값 업데이트
  552. $db = \Config\Database::connect();
  553. $builder = $db->table('USER_LIST');
  554. $builder->where('ID', $id)->update([
  555. 'REFRESH_TOKEN' => $refreshToken,
  556. 'NAVER_REFRESH_TOKEN' => $user_info_arr['refresh_token']
  557. ]);
  558. } catch (\Throwable $e) {
  559. return $this->failServerError('JWT 생성 오류: ' . $e->getMessage());
  560. }
  561. unset($user['PASSWORD']); // 혹시 비번이 있다면 노출 방지
  562. $query = http_build_query([
  563. "accessToken" => $accessToken,
  564. "refreshToken" => $refreshToken,
  565. "user" => urlencode(json_encode($user)),
  566. ]);
  567. //return redirect()->to(base_url("auth/popupClose?$query"));
  568. // 개발진행중 풀 URL
  569. return redirect()->to(self::FRONTEND_BASE_URL."/auth/popupClose?$query");
  570. }else{
  571. // 회원이 없으면 회원가입
  572. $type = 1;
  573. // ID는 auto_increment라면 생략
  574. $authData = [
  575. 'ID' => $id,
  576. 'NAME' => $name,
  577. 'PHONE' => $phone,
  578. 'EMAIL' => $email,
  579. 'TYPE' => $type,
  580. 'JOIN' => '1',
  581. 'NAVER_REFRESH_TOKEN' => $user_info_arr['refresh_token'] ?? null
  582. ];
  583. $query = http_build_query([
  584. "user" => urlencode(json_encode($authData)),
  585. ]);
  586. //return redirect()->to(base_url("auth/popupClose?$query"));
  587. // 개발진행중 풀 URL
  588. return redirect()->to(self::FRONTEND_BASE_URL."/auth/popupClose?$query");
  589. }
  590. } else {
  591. // 오류 처리
  592. }
  593. }
  594. public function naverWithdrawal($refreshToken)
  595. {
  596. // 1. 요청에서 사용자 SEQ 추출 (예: POST or GET)
  597. $postData = $this->request->getJSON(true);
  598. $seq = $postData['SEQ'];
  599. $refreshTokenNaver = $postData['NAVER_REFRESH_TOKEN'];
  600. // 2. 사용자 정보 조회 (구글 토큰 포함)
  601. $user = $this->userModel->find($seq);
  602. if (!$user) {
  603. return $this->response->setJSON(['error' => 'User not found'])->setStatusCode(404);
  604. }
  605. $clientId = 'tPw7dRu1r7yY89O5gN7n';
  606. $clientSecret = 'Pgan4lv9l9';
  607. // 1. 리프레시 토큰으로 엑세스 토큰 재발급 요청
  608. $tokenUrl = "https://nid.naver.com/oauth2.0/token";
  609. $tokenParams = [
  610. 'grant_type' => 'refresh_token',
  611. 'client_id' => $clientId,
  612. 'client_secret' => $clientSecret,
  613. 'refresh_token' => $refreshTokenNaver
  614. ];
  615. $ch = curl_init();
  616. curl_setopt($ch, CURLOPT_URL, $tokenUrl);
  617. curl_setopt($ch, CURLOPT_POST, true);
  618. curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($tokenParams));
  619. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  620. $tokenResponse = curl_exec($ch);
  621. $tokenError = curl_error($ch);
  622. curl_close($ch);
  623. if ($tokenError) {
  624. return [
  625. 'success' => false,
  626. 'message' => "토큰 재발급 오류: " . $tokenError,
  627. ];
  628. }
  629. $tokenData = json_decode($tokenResponse, true);
  630. if (empty($tokenData['access_token'])) {
  631. return [
  632. 'success' => false,
  633. 'message' => '엑세스 토큰 재발급 실패: ' . ($tokenData['error_description'] ?? '알 수 없는 오류'),
  634. ];
  635. }
  636. $accessToken = $tokenData['access_token'];
  637. // 2. 엑세스 토큰으로 연결끊기
  638. $withdrawUrl = "https://nid.naver.com/oauth2.0/token";
  639. $withdrawParams = [
  640. 'grant_type' => 'delete',
  641. 'client_id' => $clientId,
  642. 'client_secret' => $clientSecret,
  643. 'access_token' => $accessToken,
  644. 'service_provider' => 'NAVER',
  645. ];
  646. $ch2 = curl_init();
  647. curl_setopt($ch2, CURLOPT_URL, $withdrawUrl);
  648. curl_setopt($ch2, CURLOPT_POST, true);
  649. curl_setopt($ch2, CURLOPT_POSTFIELDS, http_build_query($withdrawParams));
  650. curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true);
  651. $withdrawResponse = curl_exec($ch2);
  652. $withdrawError = curl_error($ch2);
  653. curl_close($ch2);
  654. if ($withdrawError) {
  655. return [
  656. 'success' => false,
  657. 'message' => "연결해제 요청 오류: " . $withdrawError,
  658. ];
  659. }
  660. $withdrawData = json_decode($withdrawResponse, true);
  661. if (isset($withdrawData['result']) && $withdrawData['result'] === 'success') {
  662. return [
  663. 'success' => true,
  664. 'message' => '네이버 연동 해제 완료',
  665. ];
  666. // 4. USER_LIST에서 사용자 삭제
  667. $this->userModel->delete($seq);
  668. // 5. 응답 반환
  669. return $this->response->setJSON([
  670. 'result' => 'User account deleted and Google link revoked'
  671. ])->setStatusCode(200);
  672. } else {
  673. return [
  674. 'success' => false,
  675. 'message' => $withdrawData['error'] ?? '연동 해제 실패',
  676. ];
  677. }
  678. }
  679. /***********************************
  680. * @param $refreshTokenGoogle
  681. * @return void
  682. **********************************/
  683. // 구글 연결 가입정보 연결 해제(회원가입중 페이지 빠져나올경우 리프래시 토큰이 사라짐 고객이 직접 계정에서 해제 필요)
  684. protected function revokeGoogleAccess($refreshTokenGoogle)
  685. {
  686. // 1. 리프레시 토큰으로 엑세스 토큰 발급
  687. $client_id = '373780605211-diojebh7mug45urv9rnqdil6n0b1ogge.apps.googleusercontent.com';
  688. $client_secret = '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';
  689. $refresh_token = $refreshTokenGoogle;
  690. $token_url = 'https://oauth2.googleapis.com/token';
  691. $params = [
  692. 'client_id' => $client_id,
  693. 'client_secret' => $client_secret,
  694. 'refresh_token' => $refresh_token,
  695. 'grant_type' => 'refresh_token',
  696. ];
  697. $ch = curl_init();
  698. curl_setopt($ch, CURLOPT_URL, $token_url);
  699. curl_setopt($ch, CURLOPT_POST, true);
  700. curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($params));
  701. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  702. $response = curl_exec($ch);
  703. curl_close($ch);
  704. $data = json_decode($response, true);
  705. // 2. 새 엑세스 토큰으로 연결 끊기
  706. if (!empty($data['access_token'])) {
  707. $accessToken = $data['access_token'];
  708. $revoke_url = 'https://accounts.google.com/o/oauth2/revoke?token=' . urlencode($accessToken);
  709. $ch = curl_init($revoke_url);
  710. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  711. curl_exec($ch);
  712. curl_close($ch);
  713. } else {
  714. // TODO : 엑세스 토큰 발급 실패 처리 필요
  715. }
  716. }
  717. /***********************************
  718. * 아이디 체크
  719. **********************************/
  720. public function checkId()
  721. {
  722. $postData = $this->request->getJSON(true);
  723. // 필수값 검증
  724. if (empty($id) || empty($type)) {
  725. return $this->response->setJSON([
  726. 'status' => 'fail',
  727. 'message' => '필수 정보가 누락되었습니다.'
  728. ])->setStatusCode(400);
  729. }
  730. $db = \Config\Database::connect();
  731. try {
  732. // type에 따라 다른 테이블에서 ID 중복 체크
  733. if ($type === 'vendor') {
  734. // 벤더 회원가입의 경우 VENDOR_LIST 테이블 체크
  735. $builder = $db->table('VENDOR_LIST');
  736. $existingUser = $builder->where('ID', $id)->get()->getRowArray();
  737. if ($existingUser) {
  738. return $this->response->setJSON([
  739. 'status' => 'fail',
  740. 'message' => '이미 사용 중인 아이디입니다.'
  741. ])->setStatusCode(200);
  742. }
  743. } elseif ($type === 'influencer') {
  744. // 인플루언서(일반회원가입)의 경우 USER_LIST 테이블 체크
  745. $builder2 = $db->table('USER_LIST');
  746. $existingUser = $builder2->where('ID', $id)->get()->getRowArray();
  747. if ($existingUser) {
  748. return $this->response->setJSON([
  749. 'status' => 'fail',
  750. 'message' => '이미 사용 중인 아이디입니다.'
  751. ])->setStatusCode(200);
  752. }
  753. } else {
  754. return $this->response->setJSON([
  755. 'status' => 'fail',
  756. 'message' => '유효하지 않은 회원 유형입니다.'
  757. ])->setStatusCode(400);
  758. }
  759. // ID가 사용 가능한 경우
  760. return $this->response->setJSON([
  761. 'status' => 'success',
  762. 'message' => '사용 가능한 아이디입니다.'
  763. ])->setStatusCode(200);
  764. } catch (\Throwable $e) {
  765. return $this->response->setJSON([
  766. 'status' => 'fail',
  767. 'message' => 'DB 오류: ' . $e->getMessage()
  768. ])->setStatusCode(500);
  769. }
  770. }
  771. }