From dbc602907528d7030ad93b1ef4872522e35980c4 Mon Sep 17 00:00:00 2001
From: joowojr <joowojr@gmail.com>
Date: Thu, 13 Feb 2025 16:30:17 +0900
Subject: [PATCH 1/6] =?UTF-8?q?CLAP-425=20Fix:=20=EB=B9=84=EB=B0=80?=
 =?UTF-8?q?=EB=B2=88=ED=98=B8=20=EC=9E=AC=EC=84=A4=EC=A0=95=20=EA=B2=BD?=
 =?UTF-8?q?=EB=A1=9C=EC=97=90=EB=8F=84=20=EC=9E=A0=EA=B8=88=20=EA=B3=84?=
 =?UTF-8?q?=EC=A0=95=20=EC=97=AC=EB=B6=80=EB=A5=BC=20=ED=99=95=EC=9D=B8?=
 =?UTF-8?q?=ED=95=98=EB=8F=84=EB=A1=9D=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<footer>
- #554
---
 .../server/adapter/inbound/security/WebSecurityUrl.java   | 1 +
 .../inbound/security/filter/JwtAuthenticationFilter.java  | 2 --
 .../inbound/security/filter/LoginAttemptFilter.java       | 8 +++++---
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/src/main/java/clap/server/adapter/inbound/security/WebSecurityUrl.java b/src/main/java/clap/server/adapter/inbound/security/WebSecurityUrl.java
index 398db74d..cbfeb2d8 100644
--- a/src/main/java/clap/server/adapter/inbound/security/WebSecurityUrl.java
+++ b/src/main/java/clap/server/adapter/inbound/security/WebSecurityUrl.java
@@ -15,4 +15,5 @@ private WebSecurityUrl() {
     public static final String REISSUANCE_ENDPOINT = "/api/auths/reissuance";
     public static final String PASSWORD_EMAIL_ENDPOINT = "/api/new-password";
     public static final String TEMPORARY_TOKEN_ALLOWED_ENDPOINT = "/api/members/initial-password";
+    public static final String[] ANONYMOUS_ENDPOINTS = {LOGIN_ENDPOINT, PASSWORD_EMAIL_ENDPOINT};
 }
diff --git a/src/main/java/clap/server/adapter/inbound/security/filter/JwtAuthenticationFilter.java b/src/main/java/clap/server/adapter/inbound/security/filter/JwtAuthenticationFilter.java
index bc4cae49..3f454db6 100644
--- a/src/main/java/clap/server/adapter/inbound/security/filter/JwtAuthenticationFilter.java
+++ b/src/main/java/clap/server/adapter/inbound/security/filter/JwtAuthenticationFilter.java
@@ -49,8 +49,6 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
             SWAGGER_ENDPOINTS
     ).flatMap(Arrays::stream).toArray(String[]::new);
 
-    public static final String[] ANONYMOUS_ENDPOINTS = {LOGIN_ENDPOINT, PASSWORD_EMAIL_ENDPOINT};
-
     @Override
     protected void doFilterInternal(
             @NotNull HttpServletRequest request,
diff --git a/src/main/java/clap/server/adapter/inbound/security/filter/LoginAttemptFilter.java b/src/main/java/clap/server/adapter/inbound/security/filter/LoginAttemptFilter.java
index 7d5110f8..f16e927b 100644
--- a/src/main/java/clap/server/adapter/inbound/security/filter/LoginAttemptFilter.java
+++ b/src/main/java/clap/server/adapter/inbound/security/filter/LoginAttemptFilter.java
@@ -12,14 +12,16 @@
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
+import org.springframework.util.AntPathMatcher;
 import org.springframework.web.filter.OncePerRequestFilter;
 import org.springframework.web.util.ContentCachingRequestWrapper;
 
 import java.io.IOException;
 import java.nio.charset.StandardCharsets;
 import java.util.ArrayList;
+import java.util.Arrays;
 
-import static clap.server.adapter.inbound.security.WebSecurityUrl.LOGIN_ENDPOINT;
+import static clap.server.adapter.inbound.security.WebSecurityUrl.ANONYMOUS_ENDPOINTS;
 import static clap.server.common.utils.ClientIpParseUtil.getClientIp;
 
 
@@ -33,10 +35,10 @@ public class LoginAttemptFilter extends OncePerRequestFilter {
     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
             throws ServletException, IOException {
         try {
-            if (request.getRequestURI().equals(LOGIN_ENDPOINT)) {
+            if (Arrays.stream(ANONYMOUS_ENDPOINTS)
+                    .anyMatch(endpoint -> new AntPathMatcher().match(endpoint, request.getRequestURI()))) {
                 String nickname = request.getParameter("nickname");
                 checkAccountLockStatusUseCase.checkAccountIsLocked(nickname);
-
             }
         } catch (AuthException e) {
             log.warn("Authentication failed for IP: {}. Error: {}", getClientIp(request), e.getMessage());

From 7730d675baef86c169165bec83dcae2a55cebaca Mon Sep 17 00:00:00 2001
From: joowojr <joowojr@gmail.com>
Date: Thu, 13 Feb 2025 16:42:51 +0900
Subject: [PATCH 2/6] =?UTF-8?q?CLAP-425=20Fix:=20=EB=B9=84=EB=B0=80?=
 =?UTF-8?q?=EB=B2=88=ED=98=B8=20=EC=9E=AC=EC=84=A4=EC=A0=95=20=EC=9D=B4?=
 =?UTF-8?q?=EB=A9=94=EC=9D=BC=20=EC=A0=84=EC=86=A1=20API=EC=97=90=20nickna?=
 =?UTF-8?q?me=20=ED=8C=8C=EB=9D=BC=EB=AF=B8=ED=84=B0=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<footer>
- #554
---
 .../inbound/web/member/ResetPasswordController.java  | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/src/main/java/clap/server/adapter/inbound/web/member/ResetPasswordController.java b/src/main/java/clap/server/adapter/inbound/web/member/ResetPasswordController.java
index 95b68994..448f9c5e 100644
--- a/src/main/java/clap/server/adapter/inbound/web/member/ResetPasswordController.java
+++ b/src/main/java/clap/server/adapter/inbound/web/member/ResetPasswordController.java
@@ -13,6 +13,7 @@
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
+import jakarta.validation.constraints.NotBlank;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.core.annotation.AuthenticationPrincipal;
 import org.springframework.web.bind.annotation.*;
@@ -30,14 +31,14 @@ public class ResetPasswordController {
     @Operation(summary = "초기 로그인 후 비밀번호 재설정 API")
     @PatchMapping("/members/initial-password")
     public void resetPasswordAndActivateMember(@AuthenticationPrincipal SecurityUserDetails userInfo,
-                                               @RequestBody  @Valid UpdateInitialPasswordRequest request) {
-        resetInitialPasswordUsecase.resetPasswordAndActivateMember(userInfo.getUserId(),request.password());
+                                               @RequestBody @Valid UpdateInitialPasswordRequest request) {
+        resetInitialPasswordUsecase.resetPasswordAndActivateMember(userInfo.getUserId(), request.password());
     }
 
     @Operation(summary = "비밀번호 재설정 API")
     @PatchMapping("/members/password")
     public void resetPassword(@AuthenticationPrincipal SecurityUserDetails userInfo,
-                                               @RequestBody @Valid UpdatePasswordRequest request) {
+                              @RequestBody @Valid UpdatePasswordRequest request) {
         resetPasswordUsecase.resetPassword(userInfo.getUserId(), request.password());
     }
 
@@ -45,13 +46,14 @@ public void resetPassword(@AuthenticationPrincipal SecurityUserDetails userInfo,
     @Operation(summary = "비밀번호 검증 API")
     @PostMapping("/members/password")
     public void verifyPassword(@AuthenticationPrincipal SecurityUserDetails userInfo,
-                              @RequestBody @Valid VerifyPasswordRequest request) {
+                               @RequestBody @Valid VerifyPasswordRequest request) {
         verifyPasswordUseCase.verifyPassword(userInfo.getUserId(), request.password());
     }
 
     @Operation(summary = "비밀번호 재설정 이메일 전송 API")
     @PostMapping("/new-password")
-    public void sendNewPasswordEmail(@RequestBody @Valid SendInitialPasswordRequest request) {
+    public void sendNewPasswordEmail(@RequestParam @NotBlank String nickname,
+                                     @RequestBody @Valid SendInitialPasswordRequest request) {
         sendNewPasswordUsecase.sendInitialPassword(request);
     }
 }

From 788052b6df25223c6c6981cc71e889a7036820e5 Mon Sep 17 00:00:00 2001
From: joowojr <joowojr@gmail.com>
Date: Thu, 13 Feb 2025 16:54:29 +0900
Subject: [PATCH 3/6] =?UTF-8?q?CLAP-425=20Fix:=20=EB=A1=9C=EA=B7=B8?=
 =?UTF-8?q?=EC=9D=B8=EC=97=90=EC=84=9C=20=EB=8B=89=EB=84=A4=EC=9E=84?=
 =?UTF-8?q?=EC=9C=BC=EB=A1=9C=20=EC=82=AC=EC=9A=A9=EC=9E=90=20=EC=A1=B0?=
 =?UTF-8?q?=ED=9A=8C=20=EC=8B=9C=20=20active=ED=95=9C=20=ED=9A=8C=EC=9B=90?=
 =?UTF-8?q?=EB=93=A4=EC=97=90=20=EB=8C=80=ED=95=B4=EC=84=9C=EB=A7=8C=20?=
 =?UTF-8?q?=EC=A1=B0=ED=9A=8C=EB=90=98=EB=8F=84=EB=A1=9D=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<footer>
- #554
---
 .../outbound/persistense/MemberPersistenceAdapter.java       | 4 ++--
 .../persistense/repository/member/MemberRepository.java      | 3 ++-
 .../application/port/outbound/member/LoadMemberPort.java     | 5 ++---
 .../clap/server/application/service/auth/AuthService.java    | 2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/src/main/java/clap/server/adapter/outbound/persistense/MemberPersistenceAdapter.java b/src/main/java/clap/server/adapter/outbound/persistense/MemberPersistenceAdapter.java
index 021210ca..5e670883 100644
--- a/src/main/java/clap/server/adapter/outbound/persistense/MemberPersistenceAdapter.java
+++ b/src/main/java/clap/server/adapter/outbound/persistense/MemberPersistenceAdapter.java
@@ -38,8 +38,8 @@ public Optional<Member> findActiveMemberById(final Long id) {
     }
 
     @Override
-    public Optional<Member> findByNickname(final String nickname) {
-        Optional<MemberEntity> memberEntity = memberRepository.findByNickname(nickname);
+    public Optional<Member> findActiveMemberByNickname(final String nickname) {
+        Optional<MemberEntity> memberEntity = memberRepository.findActiveMemberByNickname(nickname);
         return memberEntity.map(memberPersistenceMapper::toDomain);
     }
 
diff --git a/src/main/java/clap/server/adapter/outbound/persistense/repository/member/MemberRepository.java b/src/main/java/clap/server/adapter/outbound/persistense/repository/member/MemberRepository.java
index a65dfdae..813521a0 100644
--- a/src/main/java/clap/server/adapter/outbound/persistense/repository/member/MemberRepository.java
+++ b/src/main/java/clap/server/adapter/outbound/persistense/repository/member/MemberRepository.java
@@ -18,7 +18,8 @@ public interface MemberRepository extends JpaRepository<MemberEntity, Long>,  Me
 
     Optional<MemberEntity> findByStatusAndMemberId(MemberStatus memberStatus, Long memberId);
 
-    Optional<MemberEntity> findByNickname(String nickname);
+    @Query("SELECT m FROM MemberEntity m WHERE m.nickname = :nickname AND m.status = 'ACTIVE'")
+    Optional<MemberEntity> findActiveMemberByNickname(@Param("nickname") String nickname);
 
     List<MemberEntity> findByIsReviewerTrue();
 
diff --git a/src/main/java/clap/server/application/port/outbound/member/LoadMemberPort.java b/src/main/java/clap/server/application/port/outbound/member/LoadMemberPort.java
index a377bdc6..d79baf83 100644
--- a/src/main/java/clap/server/application/port/outbound/member/LoadMemberPort.java
+++ b/src/main/java/clap/server/application/port/outbound/member/LoadMemberPort.java
@@ -2,8 +2,7 @@
 
 import clap.server.adapter.inbound.web.dto.admin.request.FindMemberRequest;
 import clap.server.domain.model.member.Member;
-import clap.server.domain.model.task.Task;  // Task 클래스 임포트 확인
-import clap.server.adapter.outbound.persistense.entity.task.constant.TaskStatus; // TaskStatus 임포트
+
 import java.util.List;
 // Task 클래스 임포트 확인
 // TaskStatus 임포트
@@ -22,7 +21,7 @@ public interface LoadMemberPort {
 
     Optional<Member> findReviewerById(Long id);
 
-    Optional<Member> findByNickname(String nickname);
+    Optional<Member> findActiveMemberByNickname(String nickname);
 
     List<Member> findReviewers();
 
diff --git a/src/main/java/clap/server/application/service/auth/AuthService.java b/src/main/java/clap/server/application/service/auth/AuthService.java
index 75b4667c..53002230 100644
--- a/src/main/java/clap/server/application/service/auth/AuthService.java
+++ b/src/main/java/clap/server/application/service/auth/AuthService.java
@@ -69,7 +69,7 @@ private void deleteAccessToken(Long memberId, String accessToken) {
     }
 
     private Member getMember(String inputNickname, String clientIp) {
-        return loadMemberPort.findByNickname(inputNickname).orElseThrow(() ->
+        return loadMemberPort.findActiveMemberByNickname(inputNickname).orElseThrow(() ->
         {
             loginAttemptService.recordFailedAttempt(inputNickname, clientIp);
             return new AuthException(AuthErrorCode.LOGIN_REQUEST_FAILED);

From a8485f90ca36dfcb1512ca511ecb346dc95e0956 Mon Sep 17 00:00:00 2001
From: joowojr <joowojr@gmail.com>
Date: Thu, 13 Feb 2025 16:54:40 +0900
Subject: [PATCH 4/6] =?UTF-8?q?CLAP-425=20Fix:=20active=ED=95=9C=20?=
 =?UTF-8?q?=ED=9A=8C=EC=9B=90=EB=93=A4=EC=97=90=20=EB=8C=80=ED=95=B4?=
 =?UTF-8?q?=EC=84=9C=EB=A7=8C=20=EC=A1=B0=ED=9A=8C=EB=90=98=EB=8F=84?=
 =?UTF-8?q?=EB=A1=9D=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<footer>
- #554
---
 .../server/application/service/task/ApprovalTaskService.java    | 2 +-
 .../clap/server/application/service/task/UpdateTaskService.java | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/main/java/clap/server/application/service/task/ApprovalTaskService.java b/src/main/java/clap/server/application/service/task/ApprovalTaskService.java
index 2fb3e305..179bb257 100644
--- a/src/main/java/clap/server/application/service/task/ApprovalTaskService.java
+++ b/src/main/java/clap/server/application/service/task/ApprovalTaskService.java
@@ -44,7 +44,7 @@ public class ApprovalTaskService implements ApprovalTaskUsecase {
     public ApprovalTaskResponse approvalTaskByReviewer(Long reviewerId, Long taskId, ApprovalTaskRequest approvalTaskRequest) {
         Member reviewer = memberService.findReviewer(reviewerId);
         Task task = taskService.findById(taskId);
-        Member processor = memberService.findById(approvalTaskRequest.processorId());
+        Member processor = memberService.findActiveMember(approvalTaskRequest.processorId());
         Category category = categoryService.findById(approvalTaskRequest.categoryId());
         Label label = null;
         if (approvalTaskRequest.labelId() != null) {
diff --git a/src/main/java/clap/server/application/service/task/UpdateTaskService.java b/src/main/java/clap/server/application/service/task/UpdateTaskService.java
index 9f3a4a92..b7eace8a 100644
--- a/src/main/java/clap/server/application/service/task/UpdateTaskService.java
+++ b/src/main/java/clap/server/application/service/task/UpdateTaskService.java
@@ -105,7 +105,7 @@ public void updateTaskProcessor(Long taskId, Long memberId, UpdateTaskProcessorR
         memberService.findActiveMember(memberId);
 
         Task task = taskService.findById(taskId);
-        Member processor = memberService.findById(request.processorId());
+        Member processor = memberService.findActiveMember(request.processorId());
 
         task.updateProcessor(processor);
         Task updateTask = taskService.upsert(task);

From e9d4cdb3eaa8bf7364a60e19383ef146c3b73507 Mon Sep 17 00:00:00 2001
From: joowojr <joowojr@gmail.com>
Date: Thu, 13 Feb 2025 17:04:49 +0900
Subject: [PATCH 5/6] =?UTF-8?q?CLAP-425=20Fix:=20testcode=EC=97=90=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95=EC=82=AC=ED=95=AD=20=EB=B0=98=EC=98=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<footer>
- #554
---
 .../service/admin/RegisterMemberCSVServiceTest.java         | 4 +---
 .../server/application/service/auth/AuthServiceTest.java    | 6 +++---
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/src/test/java/clap/server/application/service/admin/RegisterMemberCSVServiceTest.java b/src/test/java/clap/server/application/service/admin/RegisterMemberCSVServiceTest.java
index 623a9384..474ad2d7 100644
--- a/src/test/java/clap/server/application/service/admin/RegisterMemberCSVServiceTest.java
+++ b/src/test/java/clap/server/application/service/admin/RegisterMemberCSVServiceTest.java
@@ -3,8 +3,6 @@
 import clap.server.application.port.inbound.domain.MemberService;
 import clap.server.application.port.outbound.member.CommandMemberPort;
 import clap.server.application.port.outbound.member.LoadMemberPort;
-import clap.server.application.service.admin.CsvParseService;
-import clap.server.application.service.admin.RegisterMemberCSVService;
 import clap.server.domain.model.member.Department;
 import clap.server.domain.model.member.Member;
 import clap.server.domain.model.member.MemberInfo;
@@ -88,7 +86,7 @@ void testRegisterMembersFromCsv_success() throws Exception {
         List<Member> csvMembers = Arrays.asList(csvMember1, csvMember2);
         when(csvParser.parseDataAndMapToMember(file)).thenReturn(csvMembers);
 
-        when(loadMemberPort.findByNickname(anyString())).thenReturn(Optional.empty());
+        when(loadMemberPort.findActiveMemberByNickname(anyString())).thenReturn(Optional.empty());
         when(loadMemberPort.findByEmail(anyString())).thenReturn(Optional.empty());
 
         Member adminMember = mock(Member.class);
diff --git a/src/test/java/clap/server/application/service/auth/AuthServiceTest.java b/src/test/java/clap/server/application/service/auth/AuthServiceTest.java
index ca836ba8..bc110b81 100644
--- a/src/test/java/clap/server/application/service/auth/AuthServiceTest.java
+++ b/src/test/java/clap/server/application/service/auth/AuthServiceTest.java
@@ -56,7 +56,7 @@ void loginSuccess() {
         Member member = user;
         CustomJwts jwtTokens = new CustomJwts("accessToken", "refreshToken");
 
-        when(loadMemberPort.findByNickname(nickname)).thenReturn(Optional.of(member));
+        when(loadMemberPort.findActiveMemberByNickname(nickname)).thenReturn(Optional.of(member));
         when(passwordEncoder.matches(inputPassword, member.getPassword())).thenReturn(true);
         when(manageTokenService.issueTokens(member)).thenReturn(jwtTokens);
 
@@ -80,7 +80,7 @@ void loginFailureWrongPassword() {
         String clientIp = "127.0.0.1";
         Member member = user;
 
-        when(loadMemberPort.findByNickname(nickname)).thenReturn(Optional.of(member));
+        when(loadMemberPort.findActiveMemberByNickname(nickname)).thenReturn(Optional.of(member));
         when(passwordEncoder.matches(inputPassword, member.getPassword())).thenReturn(false);
 
         // When & Then
@@ -100,7 +100,7 @@ void loginWithApprovalRequestStatus() {
         Member member = notApprovedUser;
         String temporaryToken = "temporaryToken";
 
-        when(loadMemberPort.findByNickname(nickname)).thenReturn(Optional.of(member));
+        when(loadMemberPort.findActiveMemberByNickname(nickname)).thenReturn(Optional.of(member));
         when(passwordEncoder.matches(inputPassword, member.getPassword())).thenReturn(true);
         when(manageTokenService.issueTemporaryToken(notApprovedUser.getMemberId())).thenReturn(temporaryToken);
 

From c80196299f5d9b052a3c588e30d16062e783273a Mon Sep 17 00:00:00 2001
From: joowojr <joowojr@gmail.com>
Date: Thu, 13 Feb 2025 22:12:01 +0900
Subject: [PATCH 6/6] =?UTF-8?q?CLAP-425=20Fix:=20testcode=EC=97=90=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95=EC=82=AC=ED=95=AD=20=EB=B0=98=EC=98=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<footer>
- #554
---
 .../application/service/task/ApprovalTaskServiceTest.java       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/test/java/clap/server/application/service/task/ApprovalTaskServiceTest.java b/src/test/java/clap/server/application/service/task/ApprovalTaskServiceTest.java
index aeb225cb..e42af787 100644
--- a/src/test/java/clap/server/application/service/task/ApprovalTaskServiceTest.java
+++ b/src/test/java/clap/server/application/service/task/ApprovalTaskServiceTest.java
@@ -81,7 +81,7 @@ void approvalTask() {
 
         when(memberService.findReviewer(reviewerId)).thenReturn(reviewer);
         when(taskService.findById(taskId)).thenReturn(task);
-        when(memberService.findById(approvalTaskRequest.processorId())).thenReturn(processor);
+        when(memberService.findActiveMember(approvalTaskRequest.processorId())).thenReturn(processor);
         when(categoryService.findById(approvalTaskRequest.categoryId())).thenReturn(category);
         when(taskService.upsert(task)).thenReturn(task);