package jakarta.servlet;

import java.io.IOException;

public interface Filter {
  default void init(FilterConfig filterConfig) throws ServletException {
  }

  void doFilter(ServletRequest var1, ServletResponse var2, FilterChain var3) throws IOException, ServletException;

  default void destroy() {
  }
}

@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
    .authorizeHttpRequests(authz -> {
      authz.requestMatchers(RegexRequestMatcher.regexMatcher(".*/(us|uk|ca)+/(en|fr).*")).authenticated();
      authz.anyRequest().hasRole("SUPER");
    })
    .httpBasic(Customizer.withDefaults());  // BasicAuthenticationFilter 추가
return http.build();
}

import jakarta.servlet.*;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;

import java.io.IOException;

public class RequestValidationFilter implements Filter {
  /**
   * 필터의 논리 작성
   * <p>
   * 헤더에 Request-id 가 있는지 확인 후 있으면 doFilter() 를 호출하여 체인의 다음 필터로 요청 전달
   * 없으면 다음 필터로 요청을 전달하지 않고 HTTP 400 반환
   */
  @Override
  public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
    HttpServletRequest httpRequest = (HttpServletRequest) servletRequest;
    HttpServletResponse httpResponse = (HttpServletResponse) servletResponse;

    String requestId = httpRequest.getHeader("Request-id");

    if (requestId == null || requestId.isBlank()) {
      httpResponse.setStatus(HttpServletResponse.SC_BAD_REQUEST); // 400 response
      return; // 요청이 다음 필터로 전달되지 않음
    }

    filterChain.doFilter(servletRequest, servletResponse);
  }
}

import com.assu.study.chap0901.filter.RequestValidationFilter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.www.BasicAuthenticationFilter;

@Configuration
public class ProjectConfig {
  @Bean
  public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {

    http
        .addFilterBefore(new RequestValidationFilter(), BasicAuthenticationFilter.class)  // 인증 필터 앞에 맞춤형 필터 추가
        .authorizeHttpRequests(authz -> authz.anyRequest().permitAll()) // 인증없이 모든 요청 접근 가능
        .httpBasic(Customizer.withDefaults());
    return http.build();
  }
}

import jakarta.servlet.FilterChain;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import org.springframework.web.filter.OncePerRequestFilter;

import java.io.IOException;
import java.util.logging.Logger;

// request 당 한번만 실행하기 위해 Filter 가 아닌 OncePerRequestFilter 구현
public class AuthenticationLoggingFilter extends OncePerRequestFilter {

  private final Logger logger = Logger.getLogger(AuthenticationLoggingFilter.class.getName());

  @Override
  protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
    String requestId = request.getHeader("Request-id");

    logger.info("logging request-id: " + requestId);

    // 요청을 필터 체인의 다음 필터에 전달
    filterChain.doFilter(request, response);
  }
}

@Configuration
public class ProjectConfig {
  @Bean
  public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    http
        .addFilterBefore(new RequestValidationFilter(), BasicAuthenticationFilter.class)  // 인증 필터 앞에 맞춤형 필터 추가
        .addFilterAfter(new AuthenticationLoggingFilter(), BasicAuthenticationFilter.class) // 인증 필터 뒤에 맞춤형 필터 추가
        .authorizeHttpRequests(authz -> authz.anyRequest().permitAll()) // 인증없이 모든 요청 접근 가능
        .httpBasic(Customizer.withDefaults());
    return http.build();
  }
}

import jakarta.servlet.FilterChain;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;
import org.springframework.web.filter.OncePerRequestFilter;

import java.io.IOException;

@Component  // 속성 파일에서 값을 주입할 수 있도록 스프링 컨텍스트에 클래스 인스턴스 추가
public class StaticKeyAuthenticationFilter extends OncePerRequestFilter {

  @Value("${authorization.key}")
  private String AUTHORIZATION_KEY;

  @Override
  protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
    String staticKey = request.getHeader("Authorization");

    if (AUTHORIZATION_KEY.equals(staticKey)) {
      filterChain.doFilter(request, response);
    } else {
      // 다음 필터로 요청을 전달하지 않고 401 응답
      response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401
    }
  }
}

import com.assu.study.chap0902.filter.StaticKeyAuthenticationFilter;
import lombok.RequiredArgsConstructor;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.www.BasicAuthenticationFilter;

@Configuration
@RequiredArgsConstructor
public class ProjectConfig {

  private final StaticKeyAuthenticationFilter filter;

  @Bean
  public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    http
        .addFilterAt(filter, BasicAuthenticationFilter.class)
        .authorizeHttpRequests(authz -> authz.anyRequest().permitAll()); // 인증없이 모든 요청 접근 가능
    //.httpBasic(Customizer.withDefaults());  // HTTP Basic 인증 대신 정적키 필터를 사용하므로 호출하지 않음
    return http.build();
  }
}

@SpringBootApplication(exclude = {UserDetailsServiceAutoConfiguration.class})

// Filter
doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)

// OncePerRequestFilter
doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)