fix: 토큰 재발급은 refreshToken으로만 가능하도록 함

Team-J9 · Jul 25, 2024 · c9246fc · c9246fc
1 parent 1104b7e
commit c9246fc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/main/java/com/j9/bestmoments/service/TokenService.java b/src/main/java/com/j9/bestmoments/service/TokenService.java
@@ -66,6 +66,9 @@ public Token findByToken(String token) {
     @Transactional
     public String refresh(String refreshToken) {
         Token foundToken = this.findByToken(refreshToken);
+        if (!foundToken.getTokenType().equals(TokenType.REFRESH_TOKEN)) {
+            throw new AccessDeniedException("만료되거나 발급되지 않은 토큰입니다.");
+        }
         Member member = memberService.findById(foundToken.getMemberId());
         String newAccessToken = createAccessToken(member);
         return newAccessToken;