{"id":2658,"date":"2026-10-24T08:51:25","date_gmt":"2026-10-24T08:51:25","guid":{"rendered":"https:\/\/wayhope.kro.kr\/?p=2658"},"modified":"2026-10-24T08:51:32","modified_gmt":"2026-10-24T08:51:32","slug":"%ec%9d%b8%ec%a6%9d-%ea%b5%ac%ec%a1%b0authentication-architecture-%ec%84%b8%ec%85%98-%ed%86%a0%ed%81%b0-%ec%84%b8%ec%85%98-%ed%95%98%ec%9d%b4%ec%9e%ac%ed%82%b9-rbac","status":"publish","type":"post","link":"https:\/\/wayhope.kro.kr\/?p=2658","title":{"rendered":"\uc778\uc99d \uad6c\uc870(Authentication Architecture) #\uc138\uc158, \ud1a0\ud070, \uc138\uc158 \ud558\uc774\uc7ac\ud0b9, RBAC"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\uc6f9 \uc11c\ube44\uc2a4\uc640 \uac8c\uc784 \uc11c\ubc84\ub294 \uc0ac\uc6a9\uc790\uc758 \uc2e0\uc6d0\uc744 \ud655\uc778\ud558\uace0, \ud574\ub2f9 \uc0ac\uc6a9\uc790\uac00 \uc5b4\ub5a4 \ub9ac\uc18c\uc2a4\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub294\uc9c0 \ud310\ub2e8\ud574\uc57c \ud55c\ub2e4. \uc774\ub54c \ud544\uc694\ud55c \ud575\uc2ec \uac1c\ub150\uc774 \uc778\uc99d(Authentication)\uacfc \uc778\uac00(Authorization)\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d \uad6c\uc870\ub97c \uc124\uacc4\ud560 \ub54c\ub294 \ub2e8\uc21c\ud788 \ub85c\uadf8\uc778 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\ub294 \uac83\ub9cc\uc73c\ub85c\ub294 \ubd80\uc871\ud558\ub2e4. \ub85c\uadf8\uc778 \uc774\ud6c4 \uc0ac\uc6a9\uc790\uc758 \uc2e0\uc6d0\uc744 \uc5b4\ub5bb\uac8c \uc720\uc9c0\ud560 \uac83\uc778\uc9c0, \uc778\uc99d \uc815\ubcf4\ub97c \uc5b4\ub5bb\uac8c \ubcf4\ud638\ud560 \uac83\uc778\uc9c0, \ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \ub370\uc774\ud130\uc5d0 \uc811\uadfc\ud558\uc9c0 \ubabb\ud558\ub3c4\ub85d \uc5b4\ub5bb\uac8c \ud1b5\uc81c\ud560 \uac83\uc778\uc9c0\uae4c\uc9c0 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uae00\uc5d0\uc11c\ub294 \ub2e4\uc74c \uac1c\ub150\uc744 \uc911\uc2ec\uc73c\ub85c \uc778\uc99d \uad6c\uc870\ub97c \uc0b4\ud3b4\ubcf8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\uc778\uc99d(Authentication)\uacfc \uc778\uac00(Authorization)<\/li>\n\n\n\n<li>\uc138\uc158 \uae30\ubc18 \uc778\uc99d\uacfc \ud1a0\ud070 \uae30\ubc18 \uc778\uc99d<\/li>\n\n\n\n<li>\uc138\uc158 ID\uc640 \uc138\uc158 \ud558\uc774\uc7ac\ud0b9(Session Hijacking)<\/li>\n\n\n\n<li>RBAC(Role-Based Access Control)<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\uc778\uc99d(Authentication)\uacfc \uc778\uac00(Authorization)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d\uacfc \uc778\uac00\ub294 \uc11c\ub85c \ub2e4\ub978 \ubaa9\uc801\uc744 \uac00\uc9c4 \ubcf4\uc548 \uc808\ucc28\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc778\uc99d\uc740 \uc0ac\uc6a9\uc790\uac00 \ub204\uad6c\uc778\uc9c0 \ud655\uc778\ud558\ub294 \uacfc\uc815\uc774\uace0, \uc778\uac00\ub294 \uc778\uc99d\ub41c \uc0ac\uc6a9\uc790\uac00 \ud2b9\uc815 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uad8c\ud55c\uc774 \uc788\ub294\uc9c0 \ud655\uc778\ud558\ub294 \uacfc\uc815\uc774\ub2e4.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \uac8c\uc784 \uc11c\ubc84\uc5d0\uc11c \uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc778\uc5d0 \uc131\uacf5\ud588\ub2e4\uba74 \uc778\uc99d\uc774 \uc644\ub8cc\ub41c \uac83\uc774\ub2e4. \ud558\uc9c0\ub9cc \ub85c\uadf8\uc778\uc5d0 \uc131\uacf5\ud588\ub2e4\uace0 \ud574\uc11c \ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \uc778\ubca4\ud1a0\ub9ac\ub97c \uc870\ud68c\ud558\uac70\ub098 \uc6b4\uc601\uc790 \uc804\uc6a9 API\ub97c \ud638\ucd9c\ud560 \uc218 \uc788\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc778\uc99d(Authentication)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d\uc740 \uc0ac\uc6a9\uc790\uac00 \uc8fc\uc7a5\ud558\ub294 \uc2e0\uc6d0\uc774 \uc2e4\uc81c\ub85c \uc720\ud6a8\ud55c\uc9c0 \uac80\uc99d\ud558\ub294 \uacfc\uc815\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc77c\ubc18\uc801\uc73c\ub85c \ub2e4\uc74c\uacfc \uac19\uc740 \ubc29\uc2dd\uc774 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\uc544\uc774\ub514\uc640 \ube44\ubc00\ubc88\ud638<\/li>\n\n\n\n<li>\uc138\uc158 \ucfe0\ud0a4<\/li>\n\n\n\n<li>\uc561\uc138\uc2a4 \ud1a0\ud070(JWT \ub4f1)<\/li>\n\n\n\n<li>\uc77c\ud68c\uc6a9 \uc778\uc99d \ucf54\ub4dc(OTP)<\/li>\n\n\n\n<li>\ud328\uc2a4\ud0a4(Passkey)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc544\uc774\ub514\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0 \uc11c\ubc84\ub294 \uc0ac\uc6a9\uc790\uac00 \uc81c\ucd9c\ud55c \ube44\ubc00\ubc88\ud638\ub97c \uc800\uc7a5\ub41c \ube44\ubc00\ubc88\ud638 \ud574\uc2dc\uc640 \ube44\uad50\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ube44\ubc00\ubc88\ud638\ub294 \ud3c9\ubb38\uc73c\ub85c \uc800\uc7a5\ud558\uc9c0 \uc54a\uace0 Argon2id, bcrypt \ub4f1\uc758 \ube44\ubc00\ubc88\ud638 \ud574\uc2f1 \uc54c\uace0\ub9ac\uc998\uc744 \uc0ac\uc6a9\ud574 \uc800\uc7a5\ud574\uc57c \ud55c\ub2e4. \ube44\ubc00\ubc88\ud638 \uac80\uc99d\uc5d0 \uc131\uacf5\ud558\uba74 \uc11c\ubc84\ub294 \uc138\uc158\uc744 \uc0dd\uc131\ud558\uac70\ub098 \ud1a0\ud070\uc744 \ubc1c\uae09\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\ud074\ub77c\uc774\uc5b8\ud2b8\n    |\n    | \uc544\uc774\ub514 + \ube44\ubc00\ubc88\ud638\n    v\n\uc778\uc99d \uc11c\ubc84\n    |\n    | \uc0ac\uc6a9\uc790 \uc870\ud68c\n    | \ube44\ubc00\ubc88\ud638 \ud574\uc2dc \uac80\uc99d\n    v\n\uc778\uc99d \uc131\uacf5\n    |\n    | \uc138\uc158 \uc0dd\uc131 \ub610\ub294 \ud1a0\ud070 \ubc1c\uae09\n    v\n\uc778\uc99d \uc815\ubcf4 \uc804\ub2ec<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d\uc740 \ub85c\uadf8\uc778 \uc2dc\uc810\uc5d0\ub9cc \ud544\uc694\ud55c \uac83\uc774 \uc544\ub2c8\ub2e4. \uc774\ud6c4 \uc694\uccad\uc5d0\uc11c\ub3c4 \uc138\uc158\uc774\ub098 \ud1a0\ud070\uc744 \uac80\uc99d\ud574 \uc694\uccad\uc790\uac00 \ub204\uad6c\uc778\uc9c0 \ud655\uc778\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc778\uac00(Authorization)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uac00\ub294 \uc778\uc99d\ub41c \uc0ac\uc6a9\uc790\uac00 \uc694\uccad\ud55c \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\ub294\uc9c0 \ud310\ub2e8\ud558\ub294 \uacfc\uc815\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc740 \uad8c\ud55c\uc744 \uc0dd\uac01\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\uc0ac\uc6a9\uc790<\/th><th>\uc694\uccad<\/th><th>\uacb0\uacfc<\/th><\/tr><tr><td>\uc77c\ubc18 \uc0ac\uc6a9\uc790<\/td><td>\uc790\uc2e0\uc758 \ud504\ub85c\ud544 \uc870\ud68c<\/td><td>\ud5c8\uc6a9<\/td><\/tr><tr><td>\uc77c\ubc18 \uc0ac\uc6a9\uc790<\/td><td>\ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \ube44\uacf5\uac1c \ud504\ub85c\ud544 \uc870\ud68c<\/td><td>\uac70\ubd80<\/td><\/tr><tr><td>\uc77c\ubc18 \uc0ac\uc6a9\uc790<\/td><td>\uc6b4\uc601\uc790 \uc804\uc6a9 \uacc4\uc815 \uc815\uc9c0 API \ud638\ucd9c<\/td><td>\uac70\ubd80<\/td><\/tr><tr><td>\uc6b4\uc601\uc790<\/td><td>\uacc4\uc815 \uc815\uc9c0 API \ud638\ucd9c<\/td><td>\uad8c\ud55c \uc815\ucc45\uc5d0 \ub530\ub77c \ud5c8\uc6a9<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5ec\uae30\uc11c \uc911\uc694\ud55c \uc810\uc740 <strong>\uc778\uc99d\uc5d0 \uc131\uacf5\ud588\ub2e4\ub294 \uc0ac\uc2e4\uc774 \ubaa8\ub4e0 \uc791\uc5c5\uc758 \ud5c8\uac00\ub97c \uc758\ubbf8\ud558\uc9c0 \uc54a\ub294\ub2e4\ub294 \uac83<\/strong>\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \uc778\uc99d\ub41c \uc0ac\uc6a9\uc790\uc758 \uc2dd\ubcc4\uc790\uc640 \uc694\uccad \ub300\uc0c1\uc758 \uc18c\uc720 \uad00\uacc4, \uc5ed\ud560, \uc138\ubd80 \uad8c\ud55c \ub4f1\uc744 \ud655\uc778\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc740 API\uac00 \uc788\ub2e4\uace0 \uac00\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GET \/users\/1001\/inventory<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub85c\uadf8\uc778\ud55c \uc0ac\uc6a9\uc790\uc758 ID\uac00 <code>1001<\/code>\uc774\ub77c\uba74 \uc790\uc2e0\uc758 \uc778\ubca4\ud1a0\ub9ac\ub97c \uc870\ud68c\ud560 \uc218 \uc788\ub2e4. \ud558\uc9c0\ub9cc \ub85c\uadf8\uc778\ud55c \uc0ac\uc6a9\uc790\uc758 ID\uac00 <code>2002<\/code>\uc778\ub370 URL\uc758 \uc0ac\uc6a9\uc790 ID\uac00 <code>1001<\/code>\uc774\ub77c\uba74, \ubcc4\ub3c4\uc758 \uad8c\ud55c\uc774 \uc5c6\ub294 \ud55c \uc811\uadfc\uc744 \uac70\ubd80\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc804\ub2ec\ud55c \uc0ac\uc6a9\uc790 ID\ub9cc \ubbff\uace0 \ub370\uc774\ud130\ub97c \ubc18\ud658\ud558\uba74 \ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \ub370\uc774\ud130\uc5d0 \uc811\uadfc\ud558\ub294 IDOR(Insecure Direct Object Reference) \ucde8\uc57d\uc810\uc774 \ubc1c\uc0dd\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub530\ub77c\uc11c \uc778\uc99d\uacfc \uc778\uac00\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \ubd84\ub9ac\ud574 \uc124\uacc4\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\uc778\uc99d: \uc694\uccad\uc744 \ubcf4\ub0b8 \uc0ac\uc6a9\uc790\ub294 \ub204\uad6c\uc778\uac00?<\/li>\n\n\n\n<li>\uc778\uac00: \uc774 \uc0ac\uc6a9\uc790\ub294 \ud574\ub2f9 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\ub294\uac00?<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\uc138\uc158 \uae30\ubc18 \uc778\uc99d(Session-Based Authentication)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 \uae30\ubc18 \uc778\uc99d\uc740 \ub85c\uadf8\uc778\ud55c \uc0ac\uc6a9\uc790\uc758 \uc778\uc99d \uc0c1\ud0dc\ub97c \uc11c\ubc84\uac00 \uc138\uc158\uc73c\ub85c \uad00\ub9ac\ud558\ub294 \ubc29\uc2dd\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \ub85c\uadf8\uc778\uc5d0 \uc131\uacf5\ud55c \uc0ac\uc6a9\uc790\uc5d0 \ub300\ud55c \uc138\uc158\uc744 \uc0dd\uc131\ud558\uace0, \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\ub294 \ud574\ub2f9 \uc138\uc158\uc744 \uc2dd\ubcc4\ud560 \uc218 \uc788\ub294 \uc138\uc158 ID\ub97c \uc804\ub2ec\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc774\ud6c4 \uc694\uccad\uc5d0 \uc138\uc158 ID\ub97c \ud3ec\ud568\ud558\uace0, \uc11c\ubc84\ub294 \uc774\ub97c \uc0ac\uc6a9\ud574 \uc800\uc7a5\ub41c \uc138\uc158 \uc815\ubcf4\ub97c \uc870\ud68c\ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ub3d9\uc791 \uc6d0\ub9ac<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>1. \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \ub85c\uadf8\uc778 \uc694\uccad\n        |\n        v\n2. \uc11c\ubc84\uac00 \uc0ac\uc6a9\uc790 \uc778\uc99d\n        |\n        v\n3. \uc11c\ubc84\uac00 \uc138\uc158 \uc0dd\uc131\n   sessionId -&gt; userId\n        |\n        v\n4. \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0 \uc138\uc158 ID \uc804\ub2ec\n        |\n        v\n5. \uc774\ud6c4 \uc694\uccad\uc5d0 \uc138\uc158 ID \ud3ec\ud568\n        |\n        v\n6. \uc11c\ubc84\uac00 \uc138\uc158 \uc870\ud68c \ubc0f \uac80\uc99d\n        |\n        v\n7. \uc0ac\uc6a9\uc790 \uc2dd\ubcc4 \ud6c4 \uc778\uac00 \uac80\uc0ac<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 \uc800\uc7a5\uc18c\uc5d0\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \uc815\ubcf4\uac00 \uc800\uc7a5\ub420 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>interface SessionData {\n  userId: string;\n  role: \"user\" | \"admin\";\n  createdAt: number;\n  expiresAt: number;\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2e4\uc81c \uc6b4\uc601 \ud658\uacbd\uc5d0\uc11c\ub294 \uc138\uc158 ID\ub97c \ud0a4\ub85c \uc0ac\uc6a9\ud558\uace0, \uc704\uc640 \uac19\uc740 \ub370\uc774\ud130\ub97c \uc11c\ubc84 \uce21 \uc800\uc7a5\uc18c\uc5d0 \ubcf4\uad00\ud560 \uc218 \uc788\ub2e4. \uc800\uc7a5\uc18c\ub85c\ub294 Redis\ub098 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ub4f1\uc774 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 Redis\uc5d0 \ub2e4\uc74c\uacfc \uac19\uc774 \uc800\uc7a5\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Key:\nsession:random-session-id\n\nValue:\n{\n  \"userId\": \"1001\",\n  \"role\": \"user\"\n}\n\nTTL:\n1800 seconds<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">TTL(Time To Live)\uc744 \uc124\uc815\ud558\uba74 \uc9c0\uc815\ub41c \uc2dc\uac04\uc774 \uc9c0\ub09c \uc138\uc158\uc774 \uc790\ub3d9\uc73c\ub85c \ub9cc\ub8cc\ub418\ub3c4\ub85d \uad6c\uc131\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc138\uc158 \uae30\ubc18 \uc778\uc99d\uc758 \uc7a5\uc810<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc11c\ubc84\uc5d0\uc11c \uc778\uc99d \uc0c1\ud0dc\ub97c \uc9c1\uc811 \ud1b5\uc81c\ud560 \uc218 \uc788\ub2e4.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158\uc744 \uc0ad\uc81c\ud558\uac70\ub098 \ub9cc\ub8cc\uc2dc\ud0a4\uba74 \ud574\ub2f9 \uc138\uc158 ID\ub97c \uc774\uc6a9\ud55c \ud6c4\uc18d \uc694\uccad\uc744 \ucc28\ub2e8\ud560 \uc218 \uc788\ub2e4. \ub85c\uadf8\uc544\uc6c3, \uac15\uc81c \ub85c\uadf8\uc544\uc6c3, \uacc4\uc815 \uc815\uc9c0 \ub4f1\uc758 \ucc98\ub9ac\ub97c \ube44\uad50\uc801 \uba85\ud655\ud558\uac8c \uad6c\ud604\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc0ac\uc6a9\uc790 ID\ub098 \uad8c\ud55c\uc744 \uc784\uc758\ub85c \ubcc0\uacbd\ud558\ub354\ub77c\ub3c4 \uc11c\ubc84\uc5d0 \uc800\uc7a5\ub41c \uc138\uc158 \uc815\ubcf4\ub97c \uae30\uc900\uc73c\ub85c \uc778\uc99d \uc0c1\ud0dc\ub97c \ud310\ub2e8\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc138\uc158 \uae30\ubc18 \uc778\uc99d\uc758 \ub2e8\uc810<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 \ub370\uc774\ud130\ub97c \uc11c\ubc84 \uce21\uc5d0\uc11c \uad00\ub9ac\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\uac00 \uc5ec\ub7ec \ub300\ub85c \ud655\uc7a5\ub418\uba74 \ubaa8\ub4e0 \uc11c\ubc84\uac00 \ub3d9\uc77c\ud55c \uc138\uc158 \uc0c1\ud0dc\ub97c \uc870\ud68c\ud560 \uc218 \uc788\uc5b4\uc57c \ud55c\ub2e4. \uc11c\ubc84\ubcc4 \uba54\ubaa8\ub9ac\uc5d0\ub9cc \uc138\uc158\uc744 \uc800\uc7a5\ud558\uba74 \uc0ac\uc6a9\uc790\uac00 \ub2e4\ub978 \uc11c\ubc84\ub85c \uc694\uccad\uc744 \ubcf4\ub0bc \ub54c \uc138\uc158\uc744 \ucc3e\uc9c0 \ubabb\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub97c \ud574\uacb0\ud558\uae30 \uc704\ud574 Redis\uc640 \uac19\uc740 \uc911\uc559 \uc138\uc158 \uc800\uc7a5\uc18c\ub97c \uc0ac\uc6a9\ud558\uac70\ub098, \ubcc4\ub3c4\uc758 \uc138\uc158 \uacf5\uc720 \uad6c\uc870\ub97c \uad6c\ucd95\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Client\n   |\n   v\nLoad Balancer\n   |\n   +-------- Server A --------+\n   |                          |\n   +-------- Server B --------+---- Redis\n   |                          |\n   +-------- Server C --------+<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uad6c\uc870\uc5d0\uc11c\ub294 \uc5b4\ub5a4 \uc11c\ubc84\uac00 \uc694\uccad\uc744 \ucc98\ub9ac\ud558\ub354\ub77c\ub3c4 Redis\ub97c \ud1b5\ud574 \ub3d9\uc77c\ud55c \uc138\uc158 \uc815\ubcf4\ub97c \uc870\ud68c\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e8, Redis\ub97c \uc0ac\uc6a9\ud55c\ub2e4\uace0 \ud574\uc11c \ubaa8\ub4e0 \ud655\uc7a5\uc131 \ubb38\uc81c\uac00 \uc790\ub3d9\uc73c\ub85c \ud574\uacb0\ub418\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \uc5f0\uacb0 \uc218, \uc800\uc7a5\uc18c \uac00\uc6a9\uc131, \ub124\ud2b8\uc6cc\ud06c \uc9c0\uc5f0, \ub9cc\ub8cc \uc815\ucc45 \ub4f1\uc744 \ud568\uaed8 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud1a0\ud070 \uae30\ubc18 \uc778\uc99d(Token-Based Authentication)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070 \uae30\ubc18 \uc778\uc99d\uc740 \uc11c\ubc84\uac00 \ubc1c\uae09\ud55c \ud1a0\ud070\uc744 \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \ubcf4\uad00\ud558\uace0, \uc774\ud6c4 \uc694\uccad\uc5d0 \ud1a0\ud070\uc744 \ud3ec\ud568\ud558\ub294 \ubc29\uc2dd\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub300\ud45c\uc801\uc778 \ud1a0\ud070 \ud615\uc2dd\uc73c\ub85c JWT(JSON Web Token)\uac00 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070\uc5d0\ub294 \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790, \ub9cc\ub8cc \uc2dc\uac04, \ubc1c\uae09\uc790 \ub4f1\uc758 \ud074\ub808\uc784\uc774 \ud3ec\ud568\ub420 \uc218 \uc788\ub2e4. \uc11c\uba85\ub41c JWT\ub294 \uc11c\ubc84\uac00 \ud1a0\ud070\uc758 \ubb34\uacb0\uc131\uacfc \ubc1c\uae09\uc790\ub97c \uac80\uc99d\ud558\ub294 \ub370 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">JWT\uc758 \uad6c\uc870<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ub2e4\uc74c \uc138 \ubd80\ubd84\uc73c\ub85c \uad6c\uc131\ub41c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Header.Payload.Signature<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Header: \ud1a0\ud070 \uc720\ud615\uacfc \uc11c\uba85 \uc54c\uace0\ub9ac\uc998 \ub4f1\uc758 \uc815\ubcf4<\/li>\n\n\n\n<li>Payload: \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790, \ub9cc\ub8cc \uc2dc\uac04 \ub4f1\uc758 \ud074\ub808\uc784<\/li>\n\n\n\n<li>Signature: \ud1a0\ud070\uc758 \ubb34\uacb0\uc131\uc744 \uac80\uc99d\ud558\uae30 \uc704\ud55c \uc11c\uba85<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 Payload\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud615\ud0dc\uc77c \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"sub\": \"1001\",\n  \"role\": \"user\",\n  \"iss\": \"https:\/\/auth.example.com\",\n  \"aud\": \"game-api\",\n  \"iat\": 1792843200,\n  \"exp\": 1792844100\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uac01 \ud544\ub4dc\uc758 \uc758\ubbf8\ub294 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\ud544\ub4dc<\/th><th>\uc758\ubbf8<\/th><\/tr><tr><td><code>sub<\/code><\/td><td>\ud1a0\ud070\uc758 \uc8fc\uccb4, \uc77c\ubc18\uc801\uc73c\ub85c \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790<\/td><\/tr><tr><td><code>role<\/code><\/td><td>\uc5ed\ud560 \uc815\ubcf4<\/td><\/tr><tr><td><code>iss<\/code><\/td><td>\ud1a0\ud070 \ubc1c\uae09\uc790<\/td><\/tr><tr><td><code>aud<\/code><\/td><td>\ud1a0\ud070\uc744 \uc0ac\uc6a9\ud560 \ub300\uc0c1\uc73c\ub85c \uc9c0\uc815\ub41c \uc11c\ube44\uc2a4<\/td><\/tr><tr><td><code>iat<\/code><\/td><td>\ud1a0\ud070 \ubc1c\uae09 \uc2dc\uac01<\/td><\/tr><tr><td><code>exp<\/code><\/td><td>\ud1a0\ud070 \ub9cc\ub8cc \uc2dc\uac01<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\uc758 Payload\ub294 \uc77c\ubc18\uc801\uc73c\ub85c Base64URL \uc778\ucf54\ub529\ub41c \ub370\uc774\ud130\uc774\uc9c0 \uc554\ud638\ud654\ub41c \ub370\uc774\ud130\uac00 \uc544\ub2c8\ub2e4. \ub530\ub77c\uc11c \ube44\ubc00\ubc88\ud638, \uc778\uc99d \ube44\ubc00\uac12, \ubbfc\uac10\ud55c \uac1c\uc778\uc815\ubcf4 \ub4f1\uc744 \uadf8\ub300\ub85c \ub123\uc5b4\uc11c\ub294 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud1a0\ud070 \uae30\ubc18 \uc778\uc99d\uc758 \ub3d9\uc791 \uc6d0\ub9ac<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>1. \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \ub85c\uadf8\uc778 \uc694\uccad\n        |\n        v\n2. \uc11c\ubc84\uac00 \uc0ac\uc6a9\uc790 \uc778\uc99d\n        |\n        v\n3. \uc11c\ubc84\uac00 \ud1a0\ud070 \ubc1c\uae09\n        |\n        v\n4. \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \ud1a0\ud070 \ubcf4\uad00\n        |\n        v\n5. \uc694\uccad \ud5e4\ub354\uc5d0 \ud1a0\ud070 \ud3ec\ud568\n        |\n        v\n6. \uc11c\ubc84\uac00 \uc11c\uba85\uacfc \ub9cc\ub8cc \uc2dc\uac04 \uac80\uc99d\n        |\n        v\n7. \uc0ac\uc6a9\uc790 \uc2dd\ubcc4 \ubc0f \uc778\uac00 \uac80\uc0ac<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc77c\ubc18\uc801\uc778 HTTP API\uc5d0\uc11c\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \uc694\uccad\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GET \/users\/me\nAuthorization: Bearer &lt;access-token&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \ud1a0\ud070\uc758 \uc11c\uba85, \ub9cc\ub8cc \uc2dc\uac04, \ubc1c\uae09\uc790, \ub300\uc0c1 \uc11c\ube44\uc2a4 \ub4f1\uc744 \uc815\ucc45\uc5d0 \ub530\ub77c \uac80\uc99d\ud55c\ub2e4. \uc774\ud6c4 \ud1a0\ud070\uc5d0\uc11c \uac80\uc99d\ub41c \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790\ub97c \uc5bb\uace0 \uc694\uccad\uc5d0 \ud544\uc694\ud55c \uad8c\ud55c\uc744 \ud655\uc778\ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc138\uc158 \uae30\ubc18 \uc778\uc99d\uacfc \ud1a0\ud070 \uae30\ubc18 \uc778\uc99d \ube44\uad50<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\ube44\uad50 \ud56d\ubaa9<\/th><th>\uc138\uc158 \uae30\ubc18<\/th><th>\ud1a0\ud070 \uae30\ubc18<\/th><\/tr><tr><td>\uc778\uc99d \uc0c1\ud0dc<\/td><td>\uc11c\ubc84 \uce21 \uc138\uc158 \uc800\uc7a5\uc18c<\/td><td>\ud1a0\ud070 \ubc0f \uac80\uc99d \uc815\ucc45<\/td><\/tr><tr><td>\uc694\uccad \uc2dc \ucc98\ub9ac<\/td><td>\uc138\uc158 \uc870\ud68c \ubc0f \uac80\uc99d<\/td><td>\ud1a0\ud070 \uac80\uc99d<\/td><\/tr><tr><td>\uac15\uc81c \ub85c\uadf8\uc544\uc6c3<\/td><td>\uc138\uc158 \uc0ad\uc81c\ub85c \ucc98\ub9ac \uac00\ub2a5<\/td><td>\ubcc4\ub3c4\uc758 \ud3d0\uae30 \uc815\ucc45 \ud544\uc694<\/td><\/tr><tr><td>\uc11c\ubc84 \ud655\uc7a5<\/td><td>\uc138\uc158 \uacf5\uc720 \uad6c\uc870 \ud544\uc694<\/td><td>\uac80\uc99d \uad6c\uc870\uc5d0 \ub530\ub77c \uc0c1\ud0dc \uacf5\uc720 \ubd80\ub2f4 \uac10\uc18c<\/td><\/tr><tr><td>\ud1a0\ud070 \ud0c8\ucde8 \ub300\uc751<\/td><td>\uc138\uc158 \ud3d0\uae30 \uac00\ub2a5<\/td><td>\ub9cc\ub8cc, \ud3d0\uae30 \ubaa9\ub85d, \ud1a0\ud070 \ud68c\uc804 \ub4f1 \ud544\uc694<\/td><\/tr><tr><td>\uc8fc\uc694 \uace0\ub824 \uc0ac\ud56d<\/td><td>\uc800\uc7a5\uc18c\uc640 \uc138\uc158 \uad00\ub9ac<\/td><td>\ud1a0\ud070 \uc218\uba85, \ud0a4 \uad00\ub9ac, \ud3d0\uae30 \uc804\ub7b5<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070 \uae30\ubc18 \uc778\uc99d\uc774 \ubc18\ub4dc\uc2dc \uc138\uc158 \uae30\ubc18 \uc778\uc99d\ubcf4\ub2e4 \ube60\ub974\uac70\ub098 \uc548\uc804\ud55c \uac83\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\ub97c \uc0ac\uc6a9\ud558\ub354\ub77c\ub3c4 \ud3d0\uae30 \ubaa9\ub85d, \uc0ac\uc6a9\uc790 \uc0c1\ud0dc \ud655\uc778, \uad8c\ud55c \ubcc0\uacbd \ubc18\uc601 \ub4f1\uc744 \uc704\ud574 \uc11c\ubc84 \uce21 \uc800\uc7a5\uc18c\ub97c \uc870\ud68c\ud560 \uc218 \uc788\ub2e4. \ubc18\ub300\ub85c \uc138\uc158 \uae30\ubc18 \uc778\uc99d\ub3c4 Redis \ub4f1\uc744 \ud65c\uc6a9\ud574 \ucda9\ubd84\ud788 \ud655\uc7a5\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud575\uc2ec\uc740 \ud2b9\uc815 \uae30\uc220\uc744 \uc120\ud0dd\ud558\ub294 \uac83\ubcf4\ub2e4 \uc778\uc99d \uc0c1\ud0dc\uc758 \uc218\uba85, \ud3d0\uae30 \uac00\ub2a5\uc131, \uc6b4\uc601 \ubcf5\uc7a1\uc131, \ubcf4\uc548 \uc694\uad6c\uc0ac\ud56d\uc5d0 \ub9de\ub294 \uad6c\uc870\ub97c \uc124\uacc4\ud558\ub294 \uac83\uc774\ub2e4.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\uc138\uc158 ID(Session ID)\uc640 \uc138\uc158 \ud558\uc774\uc7ac\ud0b9(Session Hijacking)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 ID\ub294 \uc11c\ubc84\uac00 \ud2b9\uc815 \uc138\uc158\uc744 \uc2dd\ubcc4\ud558\uae30 \uc704\ud574 \uc0ac\uc6a9\ud558\ub294 \uac12\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ucfe0\ud0a4\uc5d0 \uc138\uc158 ID\ub97c \ubcf4\uad00\ud558\uace0, \ube0c\ub77c\uc6b0\uc800\ub294 \uc774\ud6c4 \uc694\uccad\uc5d0 \ud574\ub2f9 \ucfe0\ud0a4\ub97c \uc790\ub3d9\uc73c\ub85c \ud3ec\ud568\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc740 \uc751\ub2f5\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Set-Cookie: __Host-session=&lt;opaque-random-value&gt;; Path=\/; Secure; HttpOnly; SameSite=Lax<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uac01 \uc635\uc158\uc740 \ub2e4\uc74c\uacfc \uac19\uc740 \ubaa9\uc801\uc744 \uac00\uc9c4\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\uc635\uc158<\/th><th>\ubaa9\uc801<\/th><\/tr><tr><td><code>Secure<\/code><\/td><td>HTTPS \uc5f0\uacb0\uc5d0\uc11c\ub9cc \ucfe0\ud0a4 \uc804\uc1a1<\/td><\/tr><tr><td><code>HttpOnly<\/code><\/td><td>JavaScript\uc5d0\uc11c \ucfe0\ud0a4\uc5d0 \uc9c1\uc811 \uc811\uadfc\ud558\ub294 \uac83\uc744 \uc81c\ud55c<\/td><\/tr><tr><td><code>SameSite=Lax<\/code><\/td><td>\uc77c\ubd80 \uad50\ucc28 \uc0ac\uc774\ud2b8 \uc694\uccad\uc5d0\uc11c \ucfe0\ud0a4 \uc804\uc1a1\uc744 \uc81c\ud55c<\/td><\/tr><tr><td><code>Path=\/<\/code><\/td><td>\uc0ac\uc774\ud2b8\uc758 \uc804\uccb4 \uacbd\ub85c\uc5d0\uc11c \ucfe0\ud0a4 \uc0ac\uc6a9<\/td><\/tr><tr><td><code>__Host-<\/code> \uc811\ub450\uc0ac<\/td><td>\uc9c0\uc6d0 \ube0c\ub77c\uc6b0\uc800\uc5d0\uc11c Secure, Path=\/ \ubc0f Domain \ubbf8\uc9c0\uc815 \uc870\uac74\uc744 \uac15\uc81c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><code>HttpOnly<\/code>\ub294 JavaScript\ub97c \ud1b5\ud55c \ucfe0\ud0a4 \ud0c8\ucde8 \uc704\ud5d8\uc744 \uc904\uc774\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub418\uc9c0\ub9cc, XSS \uc790\uccb4\ub97c \ubc29\uc9c0\ud558\uc9c0\ub294 \uc54a\ub294\ub2e4. \uacf5\uaca9\uc790\uac00 \ud398\uc774\uc9c0 \ub0b4\uc5d0\uc11c \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub2e4\uba74 \ucfe0\ud0a4\ub97c \uc9c1\uc811 \uc77d\uc9c0 \ubabb\ud558\ub354\ub77c\ub3c4 \uc0ac\uc6a9\uc790\uc758 \uad8c\ud55c\uc73c\ub85c \uc694\uccad\uc744 \uc218\ud589\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c <code>SameSite<\/code>\ub294 CSRF \uc704\ud5d8\uc744 \uc904\uc774\ub294 \ubc29\uc5b4 \uc218\ub2e8\uc774\uc9c0\ub9cc, \ubaa8\ub4e0 CSRF \uacf5\uaca9\uc744 \uc790\ub3d9\uc73c\ub85c \ubc29\uc9c0\ud55c\ub2e4\uace0 \ubcfc \uc218\ub294 \uc5c6\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc138\uc158 \ud558\uc774\uc7ac\ud0b9\uc774\ub780?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 \ud558\uc774\uc7ac\ud0b9\uc740 \uacf5\uaca9\uc790\uac00 \ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \uc720\ud6a8\ud55c \uc138\uc158 ID\ub97c \ud0c8\ucde8\ud574 \ud574\ub2f9 \uc0ac\uc6a9\uc790\ub85c \uc704\uc7a5\ud558\ub294 \uacf5\uaca9\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 ID\uac00 \uc720\ud6a8\ud558\uace0 \uc11c\ubc84\uac00 \uc774\ub97c \uc815\uc0c1\uc801\uc778 \uc778\uc99d \uc815\ubcf4\ub85c \ubc1b\uc544\ub4e4\uc778\ub2e4\uba74, \uacf5\uaca9\uc790\ub294 \uc0ac\uc6a9\uc790\uc758 \ube44\ubc00\ubc88\ud638\ub97c \ubab0\ub77c\ub3c4 \ud574\ub2f9 \uc138\uc158\uc758 \uad8c\ud55c\uc744 \uc545\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc989, \uc138\uc158 ID\ub294 \ub2e8\uc21c\ud55c \uc2dd\ubcc4\uc790\uac00 \uc544\ub2c8\ub2e4. \uc720\ud6a8\ud55c \uc138\uc158 ID \uc790\uccb4\uac00 \uc778\uc99d \uc218\ub2e8\uc73c\ub85c \uc791\ub3d9\ud558\uae30 \ub54c\ubb38\uc5d0 \ube44\ubc00 \uc815\ubcf4\ucc98\ub7fc \ubcf4\ud638\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc8fc\uc694 \uacf5\uaca9 \uacbd\ub85c<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ub124\ud2b8\uc6cc\ud06c \ub3c4\uccad<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HTTPS\ub97c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc73c\uba74 \ub124\ud2b8\uc6cc\ud06c \uad6c\uac04\uc5d0\uc11c \uc138\uc158 \ucfe0\ud0a4\uac00 \ub178\ucd9c\ub420 \uc704\ud5d8\uc774 \ucee4\uc9c4\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub300\uc751 \ubc29\ubc95\uc740 HTTPS \uc801\uc6a9, \uc548\uc804\ud55c TLS \uc124\uc815, HTTP\uc5d0\uc11c HTTPS\ub85c\uc758 \uac15\uc81c \uc804\ud658\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>XSS(Cross-Site Scripting)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uacf5\uaca9\uc790\uac00 \uc6f9 \ud398\uc774\uc9c0\uc5d0\uc11c \uc545\uc131 JavaScript\ub97c \uc2e4\ud589\ud558\uba74 \uc138\uc158 \uc815\ubcf4\ub97c \ub178\ub9ac\uac70\ub098 \uc0ac\uc6a9\uc790\uc758 \uad8c\ud55c\uc73c\ub85c \uc694\uccad\uc744 \uc218\ud589\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub300\uc751 \ubc29\ubc95\uc740 \ucd9c\ub825 \uc778\ucf54\ub529, \uc548\uc804\ud55c DOM API \uc0ac\uc6a9, \uc785\ub825 \ucc98\ub9ac, CSP(Content Security Policy) \uc801\uc6a9 \ub4f1\uc774\ub2e4. <code>HttpOnly<\/code> \ucfe0\ud0a4\ub3c4 \uc911\uc694\ud55c \ubc29\uc5b4 \uc218\ub2e8\uc774\uc9c0\ub9cc XSS\uc5d0 \ub300\ud55c \uc644\uc804\ud55c \ud574\uacb0\ucc45\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc138\uc158 \uace0\uc815(Session Fixation)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uacf5\uaca9\uc790\uac00 \ud2b9\uc815 \uc138\uc158 ID\ub97c \uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc778\ud55c \ub4a4\uc5d0\ub3c4 \uc720\uc9c0\ud558\ub3c4\ub85d \uc720\ub3c4\ud558\ub294 \uacf5\uaca9\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub85c\uadf8\uc778 \uc774\uc804\uc5d0 \uacf5\uaca9\uc790\uac00 \uc54c\uace0 \uc788\ub358 \uc138\uc158 ID\uac00 \ub85c\uadf8\uc778 \uc774\ud6c4\uc5d0\ub3c4 \uc720\ud6a8\ud558\uba74 \uacf5\uaca9\uc790\uac00 \uc778\uc99d\ub41c \uc138\uc158\uc744 \uc545\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub300\uc751 \ubc29\ubc95\uc740 \ub85c\uadf8\uc778 \uc131\uacf5 \ubc0f \uad8c\ud55c \uc0c1\uc2b9 \uc2dc \uc138\uc158 ID\ub97c \uc7ac\ubc1c\uae09\ud558\ub294 \uac83\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc545\uc131 \ucf54\ub4dc \ubc0f \ube0c\ub77c\uc6b0\uc800 \ud655\uc7a5 \ud504\ub85c\uadf8\ub7a8<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9\uc790 \uae30\uae30\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 \uc545\uc131 \ucf54\ub4dc\ub098 \uad8c\ud55c\uc774 \uacfc\ub3c4\ud55c \ud655\uc7a5 \ud504\ub85c\uadf8\ub7a8\uc774 \uc778\uc99d \uc815\ubcf4\ub97c \ud0c8\ucde8\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84 \uce21 \ubc29\uc5b4\ub9cc\uc73c\ub85c \ubaa8\ub4e0 \ud074\ub77c\uc774\uc5b8\ud2b8 \ud658\uacbd\uc758 \uc704\ud5d8\uc744 \uc81c\uac70\ud560 \uc218\ub294 \uc5c6\uc73c\ubbc0\ub85c \uae30\uae30 \ubcf4\uc548\uacfc \ucd5c\uc18c \uad8c\ud55c \uc6d0\uce59\ub3c4 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc138\uc158 \ud558\uc774\uc7ac\ud0b9 \ubc29\uc5b4 \uc804\ub7b5<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ucda9\ubd84\ud55c \ubb34\uc791\uc704\uc131\uc744 \uac00\uc9c4 \uc138\uc158 ID \uc0dd\uc131<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138\uc158 ID\ub294 \uc608\uce21\ud560 \uc218 \uc5c6\uc5b4\uc57c \ud55c\ub2e4. \uc554\ud638\ud559\uc801\uc73c\ub85c \uc548\uc804\ud55c \ub09c\uc218 \uc0dd\uc131\uae30\ub97c \uc0ac\uc6a9\ud558\uace0 \ucda9\ubd84\ud55c \uc5d4\ud2b8\ub85c\ud53c\ub97c \ud655\ubcf4\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc9c1\uc811 \uad6c\ud604\ud558\uae30\ubcf4\ub2e4 \uac80\uc99d\ub41c \uc138\uc158 \uad00\ub9ac \ub77c\uc774\ube0c\ub7ec\ub9ac\ub97c \uc0ac\uc6a9\ud558\ub294 \ud3b8\uc774 \uc548\uc804\ud558\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ub85c\uadf8\uc778 \uc131\uacf5 \uc2dc \uc138\uc158 ID \uc7ac\ubc1c\uae09<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub85c\uadf8\uc778 \uc774\uc804\uc758 \uc138\uc158 ID\uac00 \uc778\uc99d \uc774\ud6c4\uc5d0\ub3c4 \uc720\uc9c0\ub418\uc9c0 \uc54a\ub3c4\ub85d \ud55c\ub2e4. \uc774\ub97c \uc138\uc158 ID \ud68c\uc804(Session Rotation)\uc774\ub77c\uace0 \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc138\uc158 \ub9cc\ub8cc \uc815\ucc45 \uc801\uc6a9<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc720\ud734 \uc2dc\uac04\uc774 \uae38\uc5b4\uc9c0\uac70\ub098 \uc808\ub300 \uc720\ud6a8 \uc2dc\uac04\uc774 \uc9c0\ub098\uba74 \uc138\uc158\uc744 \ub9cc\ub8cc\uc2dc\ud0a8\ub2e4. \ubbfc\uac10\ud55c \uc791\uc5c5\uc5d0\ub294 \uc7ac\uc778\uc99d\uc744 \uc694\uad6c\ud560 \uc218\ub3c4 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ub85c\uadf8\uc544\uc6c3 \uc2dc \uc11c\ubc84 \uce21 \uc138\uc158 \ubb34\ud6a8\ud654<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c \ucfe0\ud0a4\ub9cc \uc0ad\uc81c\ud574\uc11c\ub294 \ucda9\ubd84\ud558\uc9c0 \uc54a\uc744 \uc218 \uc788\ub2e4. \uc11c\ubc84 \uc800\uc7a5\uc18c\uc5d0\uc11c\ub3c4 \ud574\ub2f9 \uc138\uc158\uc744 \ubb34\ud6a8\ud654\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ubbfc\uac10\ud55c \uc694\uccad\uc5d0 \ub300\ud55c \ucd94\uac00 \uac80\uc99d<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ube44\ubc00\ubc88\ud638 \ubcc0\uacbd, \uacb0\uc81c \uc218\ub2e8 \ubcc0\uacbd, \uacc4\uc815 \uc0ad\uc81c \ub4f1 \uc911\uc694\ud55c \uc791\uc5c5\uc740 \ub2e8\uc21c\ud788 \uc720\ud6a8\ud55c \uc138\uc158\uc774 \uc788\ub2e4\ub294 \uc774\uc720\ub9cc\uc73c\ub85c \ud5c8\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc7ac\uc778\uc99d\uc774\ub098 \ucd94\uac00 \uc778\uc99d\uc744 \uc694\uad6c\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">RBAC(Role-Based Access Control)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">RBAC\ub294 \uc5ed\ud560(Role)\uc744 \uc911\uc2ec\uc73c\ub85c \uc0ac\uc6a9\uc790\uc5d0\uac8c \uad8c\ud55c\uc744 \ubd80\uc5ec\ud558\ub294 \uc811\uadfc \uc81c\uc5b4 \ubaa8\ub378\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9\uc790\ub9c8\ub2e4 \uac1c\ubcc4 \uad8c\ud55c\uc744 \uc9c1\uc811 \ubd80\uc5ec\ud558\ub294 \ub300\uc2e0 \uc5ed\ud560\uc5d0 \uad8c\ud55c\uc744 \uc5f0\uacb0\ud558\uace0, \uc0ac\uc6a9\uc790\uc5d0\uac8c \uc5ed\ud560\uc744 \ud560\ub2f9\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \uac8c\uc784 \uc11c\ube44\uc2a4\uc5d0\uc11c\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \uc5ed\ud560\uc744 \uc815\uc758\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>user<\/code>: \uc77c\ubc18 \uc0ac\uc6a9\uc790<\/li>\n\n\n\n<li><code>moderator<\/code>: \uc2e0\uace0 \ubc0f \ucc44\ud305 \uad00\ub9ac \ub2f4\ub2f9\uc790<\/li>\n\n\n\n<li><code>admin<\/code>: \uc6b4\uc601 \uad00\ub9ac \ub2f4\ub2f9\uc790<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uad8c\ud55c\uc740 \ub2e4\uc74c\uacfc \uac19\uc774 \uc815\uc758\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>profile:read<\/code>: \ud504\ub85c\ud544 \uc870\ud68c<\/li>\n\n\n\n<li><code>profile:update<\/code>: \ud504\ub85c\ud544 \uc218\uc815<\/li>\n\n\n\n<li><code>report:manage<\/code>: \uc2e0\uace0 \uad00\ub9ac<\/li>\n\n\n\n<li><code>user:ban<\/code>: \uc0ac\uc6a9\uc790 \uc815\uc9c0<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5ed\ud560\uacfc \uad8c\ud55c\uc744 \ubd84\ub9ac\ud558\uba74 \uc0c8\ub85c\uc6b4 \uc5ed\ud560\uc744 \ucd94\uac00\ud558\uac70\ub098 \uad8c\ud55c \uc815\ucc45\uc744 \ubcc0\uacbd\ud558\uae30 \uc27d\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">RBAC\uc758 \uae30\ubcf8 \uad6c\uc870<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>User\n  |\n  | \uc5ed\ud560 \ud560\ub2f9\n  v\nRole\n  |\n  | \uad8c\ud55c \uc5f0\uacb0\n  v\nPermission\n  |\n  v\nAPI \ub610\ub294 \ub9ac\uc18c\uc2a4 \uc811\uadfc \ud5c8\uc6a9 \uc5ec\ubd80<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc774 \uc124\uacc4\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\uc5ed\ud560<\/th><th>\ud504\ub85c\ud544 \uc870\ud68c<\/th><th>\uc2e0\uace0 \uad00\ub9ac<\/th><th>\uc0ac\uc6a9\uc790 \uc815\uc9c0<\/th><\/tr><tr><td><code>user<\/code><\/td><td>\ud5c8\uc6a9<\/td><td>\uac70\ubd80<\/td><td>\uac70\ubd80<\/td><\/tr><tr><td><code>moderator<\/code><\/td><td>\ud5c8\uc6a9<\/td><td>\ud5c8\uc6a9<\/td><td>\uc815\ucc45\uc5d0 \ub530\ub77c \uc81c\ud55c<\/td><\/tr><tr><td><code>admin<\/code><\/td><td>\ud5c8\uc6a9<\/td><td>\ud5c8\uc6a9<\/td><td>\ud5c8\uc6a9<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2e4\uc81c \uc11c\ube44\uc2a4\uc5d0\uc11c\ub294 \uc5ed\ud560\ubcc4 \uad8c\ud55c\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc815\uc758\ud574\uc57c \ud55c\ub2e4. <code>moderator<\/code>\uac00 \uc0ac\uc6a9\uc790\ub97c \uc815\uc9c0\ud560 \uc218 \uc788\ub294\uc9c0\uc640 \uac19\uc740 \uc815\ucc45\uc744 \uc554\ubb35\uc801\uc73c\ub85c \ucc98\ub9ac\ud558\uba74 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc5ed\ud560\uacfc \uad8c\ud55c\uc758 \ubd84\ub9ac<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9\uc790\uc5d0\uac8c <code>admin<\/code>\uc774\ub77c\ub294 \ubb38\uc790\uc5f4\uc774 \uc788\ub2e4\ub294 \uc774\uc720\ub9cc\uc73c\ub85c \ubaa8\ub4e0 \uc791\uc5c5\uc744 \ud5c8\uc6a9\ud558\ub294 \uad6c\uc870\ub294 \uac04\ub2e8\ud558\uc9c0\ub9cc, \uad8c\ud55c\uc774 \uc138\ubd84\ud654\ub420\uc218\ub85d \uad00\ub9ac\ud558\uae30 \uc5b4\ub835\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5ed\ud560\uacfc \uad8c\ud55c\uc744 \ubcc4\ub3c4\ub85c \uad00\ub9ac\ud558\uba74 \ub2e4\uc74c\uacfc \uac19\uc740 \uad6c\uc870\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>type Role = \"user\" | \"moderator\" | \"admin\";\n\ntype Permission =\n  | \"profile:read\"\n  | \"profile:update\"\n  | \"report:manage\"\n  | \"user:ban\";\n\nconst rolePermissions: Record&lt;Role, Permission&#91;]&gt; = {\n  user: &#91;\n    \"profile:read\",\n    \"profile:update\",\n  ],\n\n  moderator: &#91;\n    \"profile:read\",\n    \"report:manage\",\n  ],\n\n  admin: &#91;\n    \"profile:read\",\n    \"profile:update\",\n    \"report:manage\",\n    \"user:ban\",\n  ],\n};<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uc608\uc81c\ub294 \uc5ed\ud560\uacfc \uad8c\ud55c\uc758 \uad00\uacc4\ub97c \uc124\uba85\ud558\uae30 \uc704\ud55c \uae30\ubcf8 \uad6c\uc870\ub2e4. \uc2e4\uc81c \uc6b4\uc601 \ud658\uacbd\uc5d0\uc11c\ub294 \uad8c\ud55c\uc744 \ucf54\ub4dc\uc5d0 \uace0\uc815\ud558\ub294 \ub300\uc2e0 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub098 \uc911\uc559 \uc815\ucc45 \uc124\uc815\uc73c\ub85c \uad00\ub9ac\ud560 \uc218\ub3c4 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Express\uc5d0\uc11c RBAC \uc801\uc6a9\ud558\uae30<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\uc74c\uc740 \uc778\uc99d \ubbf8\ub4e4\uc6e8\uc5b4\uac00 \uac80\uc99d\ub41c \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub97c <code>req.user<\/code>\uc5d0 \uc124\uc815\ud588\ub2e4\uace0 \uac00\uc815\ud55c \uad8c\ud55c \uac80\uc0ac \uc608\uc81c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>import type {\n  Request,\n  Response,\n  NextFunction,\n} from \"express\";\n\ntype Role = \"user\" | \"moderator\" | \"admin\";\n\ntype Permission =\n  | \"profile:read\"\n  | \"profile:update\"\n  | \"report:manage\"\n  | \"user:ban\";\n\ninterface AuthenticatedUser {\n  id: string;\n  role: Role;\n}\n\ndeclare global {\n  namespace Express {\n    interface Request {\n      user?: AuthenticatedUser;\n    }\n  }\n}\n\nconst rolePermissions: Record&lt;Role, Permission&#91;]&gt; = {\n  user: &#91;\n    \"profile:read\",\n    \"profile:update\",\n  ],\n\n  moderator: &#91;\n    \"profile:read\",\n    \"report:manage\",\n  ],\n\n  admin: &#91;\n    \"profile:read\",\n    \"profile:update\",\n    \"report:manage\",\n    \"user:ban\",\n  ],\n};\n\nfunction requirePermission(permission: Permission) {\n  return (\n    req: Request,\n    res: Response,\n    next: NextFunction,\n  ) =&gt; {\n    const user = req.user;\n\n    if (!user) {\n      return res.status(401).json({\n        code: \"UNAUTHENTICATED\",\n        message: \"\uc778\uc99d\uc774 \ud544\uc694\ud569\ub2c8\ub2e4.\",\n      });\n    }\n\n    const permissions = rolePermissions&#91;user.role];\n\n    if (!permissions?.includes(permission)) {\n      return res.status(403).json({\n        code: \"FORBIDDEN\",\n        message: \"\ud574\ub2f9 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uad8c\ud55c\uc774 \uc5c6\uc2b5\ub2c8\ub2e4.\",\n      });\n    }\n\n    next();\n  };\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub77c\uc6b0\ud2b8\uc5d0\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \uc801\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>app.get(\n  \"\/admin\/reports\",\n  authenticate,\n  requirePermission(\"report:manage\"),\n  getReports,\n);\n\napp.post(\n  \"\/admin\/users\/:userId\/ban\",\n  authenticate,\n  requirePermission(\"user:ban\"),\n  banUser,\n);<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5ec\uae30\uc11c <code>authenticate<\/code>\ub294 \ud1a0\ud070\uc774\ub098 \uc138\uc158\uc744 \uac80\uc99d\ud558\uace0 <code>req.user<\/code>\ub97c \uc124\uc815\ud558\ub294 \ubcc4\ub3c4\uc758 \ubbf8\ub4e4\uc6e8\uc5b4\ub2e4. \uc774 \uc608\uc81c\ub294 \ud574\ub2f9 \ubbf8\ub4e4\uc6e8\uc5b4\uc758 \uad6c\ud604\uc744 \uc0dd\ub7b5\ud588\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HTTP \uc0c1\ud0dc \ucf54\ub4dc\ub3c4 \uad6c\ubd84\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>401 Unauthorized<\/code>: \uc778\uc99d\ub418\uc9c0 \uc54a\uc558\uac70\ub098 \uc720\ud6a8\ud55c \uc778\uc99d \uc815\ubcf4\uac00 \uc5c6\ub294 \uacbd\uc6b0<\/li>\n\n\n\n<li><code>403 Forbidden<\/code>: \uc778\uc99d\uc740 \ub418\uc5c8\uc9c0\ub9cc \ud574\ub2f9 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uad8c\ud55c\uc774 \uc5c6\ub294 \uacbd\uc6b0<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">RBAC \ubbf8\ub4e4\uc6e8\uc5b4\ub294 \uc5ed\ud560\uc5d0 \uc5f0\uacb0\ub41c \uad8c\ud55c\uc744 \uac80\uc0ac\ud55c\ub2e4. \ud558\uc9c0\ub9cc \uc774\uac83\ub9cc\uc73c\ub85c \ubaa8\ub4e0 \uc778\uac00 \ubb38\uc81c\uac00 \ud574\uacb0\ub418\uc9c0\ub294 \uc54a\ub294\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \uc77c\ubc18 \uc0ac\uc6a9\uc790\uac00 \uc790\uc2e0\uc758 \ud504\ub85c\ud544\uc744 \uc218\uc815\ud558\ub294 \uc791\uc5c5\uc740 \ud5c8\uc6a9\ud558\ub354\ub77c\ub3c4, \ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \ud504\ub85c\ud544\uc744 \uc218\uc815\ud558\ub824\ub294 \uc694\uccad\uc740 \ubcc4\ub3c4\uc758 \uc18c\uc720\uad8c \uac80\uc0ac\uac00 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc989, \uc5ed\ud560 \uae30\ubc18 \uad8c\ud55c \uac80\uc0ac\uc640 \ub9ac\uc18c\uc2a4 \ub2e8\uc704 \uad8c\ud55c \uac80\uc0ac\ub97c \ud568\uaed8 \uc801\uc6a9\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\uc138\uc158, \ud1a0\ud070, RBAC\ub97c \ud568\uaed8 \uc0ac\uc6a9\ud558\ub294 \uc778\uc99d \uad6c\uc870<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2e4\uc81c \uc11c\ube44\uc2a4\uc5d0\uc11c\ub294 \uc778\uc99d\uacfc \uc778\uac00\ub97c \uac01\uac01 \ubd84\ub9ac\ub41c \ub2e8\uacc4\ub85c \ucc98\ub9ac\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Client\n  |\n  | \uc694\uccad + \uc138\uc158 \ucfe0\ud0a4 \ub610\ub294 \uc561\uc138\uc2a4 \ud1a0\ud070\n  v\nAuthentication Middleware\n  |\n  | \uc138\uc158 \ub610\ub294 \ud1a0\ud070 \uac80\uc99d\n  | \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\n  v\nAuthenticated User\n  |\n  v\nAuthorization Middleware\n  |\n  | \uc5ed\ud560 \ubc0f \uad8c\ud55c \ud655\uc778\n  v\nResource Ownership Check\n  |\n  | \ub300\uc0c1 \ub9ac\uc18c\uc2a4\uc5d0 \ub300\ud55c \uc811\uadfc \uad8c\ud55c \ud655\uc778\n  v\nApplication Service\n  |\n  v\nDatabase \/ Redis<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uad6c\uc870\uc5d0\uc11c \uac01 \uacc4\uce35\uc758 \ucc45\uc784\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Authentication Middleware<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d \uc815\ubcf4\ub97c \uac80\uc99d\ud558\uace0 \uc694\uccad\uc758 \uc0ac\uc6a9\uc790\ub97c \uc2dd\ubcc4\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Authorization Middleware<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9\uc790\uc758 \uc5ed\ud560\uacfc \uad8c\ud55c\uc744 \ud655\uc778\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Resource Ownership Check<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9\uc790\uac00 \uc694\uccad\ud55c \ub9ac\uc18c\uc2a4\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub294\uc9c0 \ud655\uc778\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Application Service<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uac80\uc99d\ub41c \uc694\uccad\uc744 \ubc14\ud0d5\uc73c\ub85c \uc2e4\uc81c \ube44\uc988\ub2c8\uc2a4 \ub85c\uc9c1\uc744 \uc218\ud589\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub7ec\ud55c \ucc45\uc784 \ubd84\ub9ac\ub294 \uc778\uc99d \ub85c\uc9c1\uacfc \ube44\uc988\ub2c8\uc2a4 \ub85c\uc9c1\uc774 \ub4a4\uc11e\uc774\ub294 \uac83\uc744 \ubc29\uc9c0\ud558\uace0, \uad8c\ud55c \uc815\ucc45\uc744 \uc77c\uad00\ub418\uac8c \uc801\uc6a9\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub41c\ub2e4.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\uac8c\uc784 \uc11c\ubc84\uc5d0\uc11c \uace0\ub824\ud560 \uc0ac\ud56d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uac8c\uc784 \uc11c\ubc84\ub294 \uc77c\ubc18 \uc6f9 \uc11c\ube44\uc2a4\uc640 \ub9c8\ucc2c\uac00\uc9c0\ub85c \uc778\uc99d\uacfc \uc778\uac00\ub97c \uc801\uc6a9\ud558\uc9c0\ub9cc, \uc2e4\uc2dc\uac04 \uc5f0\uacb0\uacfc \uac8c\uc784 \uc0c1\ud0dc\uae4c\uc9c0 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc5f0\uacb0 \uc778\uc99d\uacfc \uac8c\uc784 \uad8c\ud55c\uc740 \ubcc4\uac1c\ub2e4<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WebSocket\uc774\ub098 Colyseus \uae30\ubc18 \uc11c\ubc84\uc5d0\uc11c \uc5f0\uacb0\uc774 \uc778\uc99d\ub418\uc5c8\ub2e4\uace0 \ud574\uc11c \ubaa8\ub4e0 Room\uc774\ub098 \uba54\uc2dc\uc9c0\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \uc5f0\uacb0 \uc2dc \uc0ac\uc6a9\uc790\ub97c \uc778\uc99d\ud558\uace0, Room \uc785\uc7a5 \uc2dc \ud574\ub2f9 Room\uc5d0 \ub300\ud55c \uc811\uadfc \uad8c\ud55c\uc744 \ud655\uc778\ud558\uba70, \uba54\uc2dc\uc9c0\ub97c \ucc98\ub9ac\ud560 \ub54c\ub3c4 \ud544\uc694\ud55c \uad8c\ud55c\uacfc \uc0c1\ud0dc\ub97c \uac80\uc99d\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc804\ub2ec\ud558\ub294 \uc0ac\uc6a9\uc790 ID\ub97c \uc2e0\ub8b0\ud558\uc9c0 \uc54a\ub294\ub2e4<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \ub2e4\uc74c\uacfc \uac19\uc740 \uba54\uc2dc\uc9c0\ub97c \ubcf4\ub0b8\ub2e4\uace0 \uac00\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"userId\": \"1001\",\n  \"itemId\": \"sword-01\",\n  \"quantity\": 1\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\uac00 \uba54\uc2dc\uc9c0\uc758 <code>userId<\/code>\ub9cc \ubbff\uace0 \uc544\uc774\ud15c\uc744 \uc9c0\uae09\ud558\uba74 \uacf5\uaca9\uc790\uac00 \ub2e4\ub978 \uc0ac\uc6a9\uc790 ID\ub97c \uc785\ub825\ud574 \ud0c0\uc778\uc758 \uacc4\uc815\uc5d0 \uc601\ud5a5\uc744 \uc904 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \uc778\uc99d\ub41c \uc5f0\uacb0\uc5d0 \uc5f0\uacb0\ub41c \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790\ub97c \uae30\uc900\uc73c\ub85c \uc694\uccad\uc790\ub97c \ud310\ub2e8\ud574\uc57c \ud55c\ub2e4. \ub610\ud55c \uc544\uc774\ud15c \uc18c\uc720\uad8c, \uc218\ub7c9, \uac70\ub798 \uac00\ub2a5 \uc5ec\ubd80 \ub4f1 \uac8c\uc784 \uaddc\uce59\uc744 \uc11c\ubc84 \uce21\uc5d0\uc11c \uac80\uc99d\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud1a0\ud070 \ub9cc\ub8cc\uc640 \uc7ac\uc811\uc18d<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2e4\uc2dc\uac04 \uc5f0\uacb0\uc740 \uc77c\ubc18 HTTP \uc694\uccad\ubcf4\ub2e4 \uc624\ub798 \uc720\uc9c0\ub420 \uc218 \uc788\ub2e4. \ub530\ub77c\uc11c \uc5f0\uacb0\uc744 \ub9fa\uc744 \ub54c\ub9cc \ud1a0\ud070\uc744 \uac80\uc99d\ud558\uace0 \uc774\ud6c4\uc5d0\ub294 \uc544\ubb34\ub7f0 \ud655\uc778\ub3c4 \ud558\uc9c0 \uc54a\ub294 \uad6c\uc870\ub294 \uad8c\ud55c \ubcc0\uacbd\uc774\ub098 \uacc4\uc815 \uc815\uc9c0\uc5d0 \ub300\uc751\ud558\uae30 \uc5b4\ub824\uc6b8 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ube44\uc2a4\uc758 \ubcf4\uc548 \uc694\uad6c\uc0ac\ud56d\uc5d0 \ub530\ub77c \ud1a0\ud070 \ub9cc\ub8cc \uc2dc \uc5f0\uacb0\uc744 \uc885\ub8cc\ud558\uac70\ub098 \uc7ac\uc778\uc99d\uc744 \uc694\uad6c\ud558\uace0, \uacc4\uc815 \uc815\uc9c0 \ub610\ub294 \uc138\uc158 \ud3d0\uae30 \uc2dc \ud65c\uc131 \uc5f0\uacb0\uc5d0\ub3c4 \ud574\ub2f9 \uc0c1\ud0dc\ub97c \ubc18\uc601\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc778\uc99d\uacfc \uac8c\uc784 \uc0c1\ud0dc \ubcc0\uacbd\uc758 \ubd84\ub9ac<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d\uc5d0 \uc131\uacf5\ud588\ub2e4\ub294 \uac83\uc740 \uc0ac\uc6a9\uc790\uc758 \uc2e0\uc6d0\uc774 \ud655\uc778\ub418\uc5c8\ub2e4\ub294 \ub73b\uc774\uc9c0, \uac8c\uc784 \ub0b4 \ubaa8\ub4e0 \ud589\ub3d9\uc774 \uc720\ud6a8\ud558\ub2e4\ub294 \ub73b\uc774 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \uc0ac\uc6a9\uc790\uac00 \uc778\uc99d\ub418\uc5c8\ub354\ub77c\ub3c4 \ub2e4\uc74c \uc870\uac74\uc740 \ubcc4\ub3c4\ub85c \uac80\uc99d\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\ucda9\ubd84\ud55c \uac8c\uc784 \uc7ac\ud654\ub97c \ubcf4\uc720\ud558\uace0 \uc788\ub294\uac00?<\/li>\n\n\n\n<li>\ud574\ub2f9 \uc544\uc774\ud15c\uc744 \uc2e4\uc81c\ub85c \uc18c\uc720\ud558\uace0 \uc788\ub294\uac00?<\/li>\n\n\n\n<li>\ud604\uc7ac \uac8c\uc784 \uc0c1\ud0dc\uc5d0\uc11c \ud574\ub2f9 \ud589\ub3d9\uc774 \uac00\ub2a5\ud55c\uac00?<\/li>\n\n\n\n<li>\ub3d9\uc77c\ud55c \uac70\ub798 \uc694\uccad\uc774 \uc911\ubcf5 \ucc98\ub9ac\ub418\uc9c0 \uc54a\uc558\ub294\uac00?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d\uc740 \uc694\uccad\uc790\uc758 \uc2e0\uc6d0\uc744 \ubcf4\uc7a5\ud558\uace0, \uc778\uac00\ub294 \uc811\uadfc \uac00\ub2a5 \ubc94\uc704\ub97c \uc81c\ud55c\ud55c\ub2e4. \uac8c\uc784 \uaddc\uce59 \uac80\uc99d\uc740 \uc694\uccad\ud55c \ud589\ub3d9\uc774 \uc720\ud6a8\ud55c\uc9c0 \ud310\ub2e8\ud55c\ub2e4. \uc774 \uc138 \uac00\uc9c0\ub97c \ubd84\ub9ac\ud574\uc57c \uc11c\ubc84 \uad8c\ud55c \uae30\ubc18\uc758 \uc548\uc804\ud55c \uac8c\uc784 \ub85c\uc9c1\uc744 \uad6c\ucd95\ud560 \uc218 \uc788\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\uc6f9 \uc11c\ube44\uc2a4\uc640 \uac8c\uc784 \uc11c\ubc84\ub294 \uc0ac\uc6a9\uc790\uc758 \uc2e0\uc6d0\uc744 \ud655\uc778\ud558\uace0, \ud574\ub2f9 \uc0ac\uc6a9\uc790\uac00 \uc5b4\ub5a4 \ub9ac\uc18c\uc2a4\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub294\uc9c0 \ud310\ub2e8\ud574\uc57c \ud55c\ub2e4. \uc774\ub54c \ud544\uc694\ud55c \ud575\uc2ec \uac1c\ub150\uc774 \uc778\uc99d(Authentication)\uacfc \uc778\uac00(Authorization)\ub2e4. \uc778\uc99d \uad6c\uc870\ub97c \uc124\uacc4\ud560 \ub54c\ub294 \ub2e8\uc21c\ud788 \ub85c\uadf8\uc778 \uae30\ub2a5\uc744 \uad6c\ud604\ud558\ub294 \uac83\ub9cc\uc73c\ub85c\ub294 \ubd80\uc871\ud558\ub2e4. \ub85c\uadf8\uc778 \uc774\ud6c4 \uc0ac\uc6a9\uc790\uc758 \uc2e0\uc6d0\uc744 \uc5b4\ub5bb\uac8c \uc720\uc9c0\ud560 \uac83\uc778\uc9c0, \uc778\uc99d \uc815\ubcf4\ub97c \uc5b4\ub5bb\uac8c \ubcf4\ud638\ud560 \uac83\uc778\uc9c0, \ub2e4\ub978 \uc0ac\uc6a9\uc790\uc758 \ub370\uc774\ud130\uc5d0 \uc811\uadfc\ud558\uc9c0 \ubabb\ud558\ub3c4\ub85d \uc5b4\ub5bb\uac8c \ud1b5\uc81c\ud560 \uac83\uc778\uc9c0\uae4c\uc9c0 \uace0\ub824\ud574\uc57c \ud55c\ub2e4. \uc774 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2658","post","type-post","status-publish","format-standard","hentry","category-dev-logs"],"_links":{"self":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2658"}],"version-history":[{"count":2,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2658\/revisions"}],"predecessor-version":[{"id":2660,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2658\/revisions\/2660"}],"wp:attachment":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}