{"id":2661,"date":"2026-10-24T08:52:17","date_gmt":"2026-10-24T08:52:17","guid":{"rendered":"https:\/\/wayhope.kro.kr\/?p=2661"},"modified":"2026-10-24T08:52:17","modified_gmt":"2026-10-24T08:52:17","slug":"jwt-%eb%b0%8f-%ed%86%a0%ed%81%b0-%ea%b4%80%eb%a6%ac","status":"publish","type":"post","link":"https:\/\/wayhope.kro.kr\/?p=2661","title":{"rendered":"JWT \ubc0f \ud1a0\ud070 \uad00\ub9ac"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">JWT\ub780 \ubb34\uc5c7\uc778\uac00?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">JWT(JSON Web Token)\ub294 \uc0ac\uc6a9\uc790\ub098 \uc2dc\uc2a4\ud15c\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c JSON \ud615\ud0dc\ub85c \ub2f4\uace0, \uc774\ub97c \uc548\uc804\ud558\uac8c \uc804\ub2ec\ud558\uae30 \uc704\ud55c \ud1a0\ud070 \ud45c\uc900\uc774\ub2e4. \uc77c\ubc18\uc801\uc73c\ub85c \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \uac8c\uc784 \uc11c\ubc84\uc758 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\ub97c \uc0ac\uc6a9\ud558\uba74 \uc11c\ubc84\uac00 \ubcc4\ub3c4\uc758 \uc138\uc158 \uc800\uc7a5\uc18c\ub97c \uc870\ud68c\ud558\uc9c0 \uc54a\uace0\ub3c4 \ud1a0\ud070\uc758 \uc11c\uba85\uacfc \ud074\ub808\uc784\uc744 \uac80\uc99d\ud558\uc5ec \uc694\uccad\uc758 \uc720\ud6a8\uc131\uc744 \ud310\ub2e8\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub9cc JWT \uc790\uccb4\uac00 \uc0ac\uc6a9\uc790\ub97c \uc778\uc99d\ud558\uac70\ub098 \uad8c\ud55c\uc744 \ubd80\uc5ec\ud558\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \uc11c\ubc84\uac00 \ud1a0\ud070\uc744 \ubc1c\uae09\ud558\uace0, \uc11c\uba85\uc744 \uac80\uc99d\ud558\uace0, \ud1a0\ud070\uc5d0 \ud3ec\ud568\ub41c \uc815\ubcf4\ub97c \uc2e0\ub8b0\ud560 \uc218 \uc788\ub294\uc9c0 \ud310\ub2e8\ud558\ub294 \uacfc\uc815\uc774 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\ub97c \uc774\uc6a9\ud55c \uc778\uc99d \uc2dc\uc2a4\ud15c\uc744 \uc124\uacc4\ud560 \ub54c\ub294 \ub2e4\uc74c \ud56d\ubaa9\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>JWT\uc758 \uad6c\uc870\uc640 \uc11c\uba85 \uac80\uc99d<\/li>\n\n\n\n<li>Access Token\uacfc Refresh Token\uc758 \uc5ed\ud560 \ubd84\ub9ac<\/li>\n\n\n\n<li>\ud1a0\ud070 \ub9cc\ub8cc\uc640 \uac31\uc2e0<\/li>\n\n\n\n<li>Refresh Token Rotation \ubc0f \uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0<\/li>\n\n\n\n<li>\ub85c\uadf8\uc544\uc6c3\uacfc \ud1a0\ud070 \ubb34\ud6a8\ud654<\/li>\n\n\n\n<li>\ud1a0\ud070 \uc800\uc7a5 \uc704\uce58\uc640 \ube0c\ub77c\uc6b0\uc800 \ubcf4\uc548<\/li>\n\n\n\n<li>HttpOnly, Secure, SameSite \ucfe0\ud0a4 \uc124\uc815<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">JWT\uc758 \uad6c\uc870<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ub2e4\uc74c \uc138 \ubd80\ubd84\uc73c\ub85c \uad6c\uc131\ub41c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Header.Payload.Signature<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uac01 \ubd80\ubd84\uc740 Base64URL \uc778\ucf54\ub529\uc73c\ub85c \ud45c\ud604\ub418\uba70, \uc810(<code>.<\/code>)\uc73c\ub85c \uad6c\ubd84\ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Header<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Header\uc5d0\ub294 \ud1a0\ud070\uc758 \uc720\ud615\uacfc \uc11c\uba85 \uc54c\uace0\ub9ac\uc998 \ub4f1\uc758 \uc815\ubcf4\uac00 \ud3ec\ud568\ub41c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"alg\": \"HS256\",\n  \"typ\": \"JWT\"\n}<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>alg<\/code>: \uc11c\uba85\uc5d0 \uc0ac\uc6a9\ud558\ub294 \uc54c\uace0\ub9ac\uc998<\/li>\n\n\n\n<li><code>typ<\/code>: \ud1a0\ud070 \uc720\ud615<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 <code>HS256<\/code>\uc740 \ube44\ubc00\ud0a4\ub97c \uc774\uc6a9\ud55c HMAC-SHA256 \uc11c\uba85 \uc54c\uace0\ub9ac\uc998\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc804\ub2ec\ud55c <code>alg<\/code> \uac12\uc744 \ubb34\uc870\uac74 \uc2e0\ub8b0\ud574\uc11c\ub294 \uc548 \ub41c\ub2e4. \uc11c\ubc84\uc5d0\uc11c \ud5c8\uc6a9\ud55c \uc54c\uace0\ub9ac\uc998\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc9c0\uc815\ud558\uace0 \uac80\uc99d\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Payload<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Payload\uc5d0\ub294 \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790, \ubc1c\uae09 \uc2dc\uac04, \ub9cc\ub8cc \uc2dc\uac04 \ub4f1\uc758 \ud074\ub808\uc784(Claim)\uc774 \ud3ec\ud568\ub41c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"sub\": \"user-123\",\n  \"role\": \"user\",\n  \"iat\": 1792832400,\n  \"exp\": 1792833300,\n  \"iss\": \"api.example.com\",\n  \"aud\": \"game-client\"\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc8fc\uc694 \ud074\ub808\uc784\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\ud074\ub808\uc784<\/th><th>\uc758\ubbf8<\/th><\/tr><tr><td><code>sub<\/code><\/td><td>\ud1a0\ud070\uc758 \uc8fc\uccb4, \uc77c\ubc18\uc801\uc73c\ub85c \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790<\/td><\/tr><tr><td><code>iat<\/code><\/td><td>\ud1a0\ud070 \ubc1c\uae09 \uc2dc\uac01<\/td><\/tr><tr><td><code>exp<\/code><\/td><td>\ud1a0\ud070 \ub9cc\ub8cc \uc2dc\uac01<\/td><\/tr><tr><td><code>iss<\/code><\/td><td>\ud1a0\ud070 \ubc1c\uae09\uc790<\/td><\/tr><tr><td><code>aud<\/code><\/td><td>\ud1a0\ud070\uc744 \uc0ac\uc6a9\ud560 \ub300\uc0c1<\/td><\/tr><tr><td><code>nbf<\/code><\/td><td>\ud1a0\ud070\uc744 \uc0ac\uc6a9\ud558\uae30 \uc2dc\uc791\ud560 \uc218 \uc788\ub294 \uc2dc\uac01<\/td><\/tr><tr><td><code>jti<\/code><\/td><td>\ud1a0\ud070\uc758 \uace0\uc720 \uc2dd\ubcc4\uc790<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Payload\ub294 \uc554\ud638\ud654\ub418\uc5b4 \uc788\uc9c0 \uc54a\ub2e4. Base64URL\uc740 \uc778\ucf54\ub529\uc77c \ubfd0\uc774\ubbc0\ub85c \ud1a0\ud070\uc744 \ud68d\ub4dd\ud55c \uc0ac\ub78c\uc740 Payload\ub97c \ub514\ucf54\ub529\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub530\ub77c\uc11c \ube44\ubc00\ubc88\ud638, \ube44\ubc00\ubc88\ud638 \ud574\uc2dc, \uac1c\uc778\uc815\ubcf4, \uacb0\uc81c \uc815\ubcf4 \ub4f1\uc758 \ubbfc\uac10\ud55c \ub370\uc774\ud130\ub97c JWT\uc5d0 \ub123\uc5b4\uc11c\ub294 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Signature<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Signature\ub294 Header\uc640 Payload\uac00 \ubcc0\uc870\ub418\uc9c0 \uc54a\uc558\ub294\uc9c0 \uac80\uc99d\ud558\uae30 \uc704\ud55c \uc11c\uba85\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HS256\uc744 \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0 \uac1c\ub150\uc801\uc73c\ub85c \ub2e4\uc74c\uacfc \uac19\uc774 \uc0dd\uc131\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>HMAC-SHA256(\n  secret,\n  Base64URL(Header) + \".\" + Base64URL(Payload)\n)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uacf5\uaca9\uc790\uac00 Payload\uc758 \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790\ub97c \ubcc0\uacbd\ud558\uba74 \uae30\uc874 \uc11c\uba85\uacfc \uc77c\uce58\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \uc11c\ubc84\uc758 \uac80\uc99d\uc5d0 \uc2e4\ud328\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\uc758 \uc11c\uba85\uc740 \ub370\uc774\ud130\uc758 \ubb34\uacb0\uc131\uacfc \ubc1c\uae09 \uc8fc\uccb4\uc5d0 \ub300\ud55c \uc2e0\ub8b0\ub97c \uac80\uc99d\ud558\ub294 \uc218\ub2e8\uc774\ub2e4. <strong>\uc11c\uba85\uc740 Payload\ub97c \uc228\uae30\uc9c0 \uc54a\uc73c\uba70, \ud1a0\ud070 \uc790\uccb4\uc758 \ud0c8\ucde8\ub97c \ubc29\uc9c0\ud558\uc9c0\ub3c4 \uc54a\ub294\ub2e4.<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">JWT \uc11c\uba85 \uac80\uc99d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \uc778\uc99d\uc774 \ud544\uc694\ud55c \uc694\uccad\uc744 \ubc1b\uc744 \ub54c JWT\uc758 \uc720\ud6a8\uc131\uc744 \uac80\uc99d\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uac80\uc99d \uacfc\uc815\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>\ud1a0\ud070\uc758 \ud615\uc2dd\uc774 \uc62c\ubc14\ub978\uc9c0 \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ud5c8\uc6a9\ub41c \uc11c\uba85 \uc54c\uace0\ub9ac\uc998\uc778\uc9c0 \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc11c\uba85\uc744 \uac80\uc99d\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ub9cc\ub8cc \uc2dc\uac04\uc778 <code>exp<\/code>\ub97c \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ubc1c\uae09 \uc804 \uc0ac\uc6a9 \uc81c\ud55c\uc778 <code>nbf<\/code>\ub97c \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ubc1c\uae09\uc790 <code>iss<\/code>\uc640 \ub300\uc0c1 <code>aud<\/code>\uac00 \uc11c\ube44\uc2a4 \uc124\uc815\uacfc \uc77c\uce58\ud558\ub294\uc9c0 \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ud1a0\ud070 \uc720\ud615\uacfc \uc6a9\ub3c4\uac00 \ud574\ub2f9 \uc694\uccad\uc5d0 \uc801\ud569\ud55c\uc9c0 \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ud544\uc694\ud55c \uacbd\uc6b0 \uc0ac\uc6a9\uc790 \uc0c1\ud0dc\uc640 \ud1a0\ud070 \ud3d0\uae30 \uc5ec\ubd80\ub97c \ud655\uc778\ud55c\ub2e4.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\uba85\uc774 \uc720\ud6a8\ud558\ub354\ub77c\ub3c4 \uc0ac\uc6a9\uc790\uac00 \uc815\uc9c0\ub418\uc5c8\uac70\ub098, \ud1a0\ud070\uc774 \ud3d0\uae30\ub418\uc5c8\uac70\ub098, \ud574\ub2f9 \ub9ac\uc18c\uc2a4\uc5d0 \ub300\ud55c \uad8c\ud55c\uc774 \uc5c6\ub2e4\uba74 \uc694\uccad\uc744 \uac70\ubd80\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c JWT\uc758 <code>role<\/code> \ud074\ub808\uc784\ub9cc \ud655\uc778\ud558\uace0 \ubaa8\ub4e0 \uad8c\ud55c\uc744 \uacb0\uc815\ud558\ub294 \ubc29\uc2dd\uc740 \uc8fc\uc758\ud574\uc57c \ud55c\ub2e4. \ud1a0\ud070 \ubc1c\uae09 \uc774\ud6c4 \uad8c\ud55c\uc774 \ubcc0\uacbd\ub418\uc5c8\uc744 \uc218 \uc788\uc73c\ubbc0\ub85c, \ub192\uc740 \ubcf4\uc548 \uc218\uc900\uc774 \ud544\uc694\ud55c \uc791\uc5c5\uc5d0\uc11c\ub294 \ucd5c\uc2e0 \uc0ac\uc6a9\uc790 \uc0c1\ud0dc\ub098 \uad8c\ud55c \uc815\ubcf4\ub97c \ucd94\uac00\ub85c \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Access Token\uacfc Refresh Token<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uacfc Refresh Token\uc740 \ubaa9\uc801\uc774 \ub2e4\ub974\ub2e4. \ub450 \ud1a0\ud070\uc744 \ubd84\ub9ac\ud558\uba74 \uc778\uc99d \uc694\uccad\uc5d0 \uc0ac\uc6a9\ud558\ub294 \ud1a0\ud070\uc758 \uc218\uba85\uc744 \uc9e7\uac8c \uc720\uc9c0\ud558\uba74\uc11c\ub3c4 \uc0ac\uc6a9\uc790\uac00 \ub9e4\ubc88 \ub85c\uadf8\uc778\ud558\uc9c0 \uc54a\ub3c4\ub85d \ub9cc\ub4e4 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Access Token<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uc740 API\uc5d0 \uc811\uadfc\ud560 \ub54c \uc0ac\uc6a9\ud558\ub294 \ud1a0\ud070\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc740 \uc694\uccad\uc5d0 \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GET \/api\/profile\nAuthorization: Bearer &lt;access_token&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \ud1a0\ud070\uc744 \uac80\uc99d\ud55c \ud6c4 \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790\uc640 \uad8c\ud55c\uc744 \ud655\uc778\ud558\uace0 \uc694\uccad\uc744 \ucc98\ub9ac\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uc758 \ud2b9\uc9d5\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>API \uc811\uadfc \uad8c\ud55c\uc744 \uc99d\uba85\ud558\ub294 \ub370 \uc0ac\uc6a9\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc77c\ubc18\uc801\uc73c\ub85c \uc9e7\uc740 \ub9cc\ub8cc \uc2dc\uac04\uc744 \uc124\uc815\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ud0c8\ucde8\ub418\uba74 \ub9cc\ub8cc\ub418\uac70\ub098 \ubcc4\ub3c4\ub85c \ubb34\ud6a8\ud654\ub420 \ub54c\uae4c\uc9c0 \uc545\uc6a9\ub420 \uc218 \uc788\ub2e4.<\/li>\n\n\n\n<li>\ub9cc\ub8cc \uc2dc\uac04\uc744 \uc9e7\uac8c \uc124\uc815\ud558\uba74 \ud0c8\ucde8\uc5d0 \ub530\ub978 \ud53c\ud574 \uc2dc\uac04\uc744 \uc904\uc77c \uc218 \uc788\ub2e4.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 Access Token\uc758 \uc720\ud6a8 \uae30\uac04\uc744 10~15\ubd84\uc73c\ub85c \uc124\uc815\ud560 \uc218 \uc788\ub2e4. \uc774\ub294 \uc608\uc2dc\uc774\uba70, \uc2e4\uc81c \ub9cc\ub8cc \uc2dc\uac04\uc740 \uc11c\ube44\uc2a4\uc758 \ubcf4\uc548 \uc694\uad6c\uc0ac\ud56d\uacfc \uc0ac\uc6a9\uc790 \uacbd\ud5d8\uc5d0 \ub530\ub77c \uacb0\uc815\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Refresh Token<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Refresh Token\uc740 \uc0c8\ub85c\uc6b4 Access Token\uc744 \ubc1c\uae09\ubc1b\uae30 \uc704\ud55c \ud1a0\ud070\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uc774 \ub9cc\ub8cc\ub418\uc5c8\uc744 \ub54c Refresh Token\uc744 \uc0ac\uc6a9\ud558\uba74 \uc0ac\uc6a9\uc790\ub294 \ub85c\uadf8\uc778 \uc815\ubcf4\ub97c \ub2e4\uc2dc \uc785\ub825\ud558\uc9c0 \uc54a\uace0\ub3c4 \uc778\uc99d\uc744 \uc774\uc5b4\uac08 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc77c\ubc18\uc801\uc778 \ud2b9\uc9d5\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Access Token\ubcf4\ub2e4 \uae34 \uc720\ud6a8 \uae30\uac04\uc744 \uac00\uc9c4\ub2e4.<\/li>\n\n\n\n<li>\uc77c\ubc18 API \uc694\uccad\uc758 \uc778\uc99d \uc218\ub2e8\uc73c\ub85c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\ub294\ub2e4.<\/li>\n\n\n\n<li>\ud1a0\ud070 \uac31\uc2e0 \uc804\uc6a9 \uc5d4\ub4dc\ud3ec\uc778\ud2b8\uc5d0\uc11c\ub9cc \uc0ac\uc6a9\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ud0c8\ucde8 \uc2dc \uc7a5\uae30\uac04 \uc545\uc6a9\ub420 \uc704\ud5d8\uc774 \uc788\uc73c\ubbc0\ub85c \uc11c\ubc84 \uce21 \uad00\ub9ac\uc640 \ud3d0\uae30 \uc815\ucc45\uc774 \ud544\uc694\ud558\ub2e4.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 Refresh Token\uc758 \uc808\ub300 \uc720\ud6a8 \uae30\uac04\uc744 7\uc77c\ub85c \uc124\uc815\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uacfc Refresh Token\uc740 \uac01\uac01\uc758 \uc6a9\ub3c4\uc5d0 \ub9de\uac8c \ubc1c\uae09\ud558\uace0 \uac80\uc99d\ud574\uc57c \ud55c\ub2e4. \uc11c\ub85c \ub2e4\ub978 \ud1a0\ud070 \uc720\ud615, \ubc1c\uae09 \ubaa9\uc801, \ub300\uc0c1, \uac80\uc99d \uaddc\uce59\uc744 \uc0ac\uc6a9\ud558\uba74 \ud55c \uc885\ub958\uc758 \ud1a0\ud070\uc744 \ub2e4\ub978 \uc6a9\ub3c4\ub85c \uc624\uc6a9\ud558\ub294 \uc704\ud5d8\uc744 \uc904\uc77c \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud1a0\ud070 \ub9cc\ub8cc\uc640 \uac31\uc2e0<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070 \ub9cc\ub8cc\ub294 \uc778\uc99d \uc815\ubcf4\uac00 \ubb34\uae30\ud55c \uc720\ud6a8\ud558\uac8c \uc720\uc9c0\ub418\ub294 \uac83\uc744 \ubc29\uc9c0\ud558\ub294 \uc7a5\uce58\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uc774 \ub9cc\ub8cc\ub418\uba74 \uc11c\ubc84\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uc778\uc99d \uc2e4\ud328\ub97c \ubc18\ud658\ud55c\ub2e4. \ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc774 \uc751\ub2f5\uc744 \ud655\uc778\ud55c \ub4a4 Refresh Token\uc744 \uc774\uc6a9\ud574 \ud1a0\ud070 \uac31\uc2e0\uc744 \uc2dc\ub3c4\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc77c\ubc18\uc801\uc778 \ud750\ub984\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\ud074\ub77c\uc774\uc5b8\ud2b8\n    |\n    | API \uc694\uccad + Access Token\n    v\nAPI \uc11c\ubc84\n    |\n    | Access Token \ub9cc\ub8cc\n    v\n401 Unauthorized\n    |\n    | Refresh Token\uc73c\ub85c \uac31\uc2e0 \uc694\uccad\n    v\n\uc778\uc99d \uc11c\ubc84\n    |\n    | Refresh Token \uac80\uc99d\n    v\n\uc0c8 Access Token \ubc1c\uae09\n    |\n    v\nAPI \uc7ac\uc694\uccad<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uac31\uc2e0 \uc694\uccad\uc740 \uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc774 \uc124\uacc4\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>POST \/auth\/refresh\nCookie: refreshToken=&lt;refresh_token&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 Refresh Token\uc758 \uc11c\uba85, \ub9cc\ub8cc, \ubc1c\uae09 \ubaa9\uc801, \uc138\uc158 \uc0c1\ud0dc, \ud3d0\uae30 \uc5ec\ubd80 \ub4f1\uc744 \uac80\uc99d\ud55c \ud6c4 \uc0c8\ub85c\uc6b4 Access Token\uc744 \ubc1c\uae09\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Refresh Token Rotation\uc744 \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0\uc5d0\ub294 \uae30\uc874 Refresh Token\uc744 \ud3d0\uae30\ud558\uace0 \uc0c8\ub85c\uc6b4 Refresh Token\ub3c4 \ud568\uaed8 \ubc1c\uae09\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \ud1a0\ud070 \uac31\uc2e0\uc774 \uc644\ub8cc\ub41c \ud6c4 \uc6d0\ub798 \uc694\uccad\uc744 \ub2e4\uc2dc \uc2dc\ub3c4\ud560 \uc218 \uc788\ub2e4. \ub2e8, \ubaa8\ub4e0 <code>401 Unauthorized<\/code> \uc751\ub2f5\uc5d0\uc11c \ubb34\uc870\uac74 \uac31\uc2e0\uc744 \uc2dc\ub3c4\ud558\uba74 \uc548 \ub41c\ub2e4. \uc798\ubabb\ub41c \uc790\uaca9 \uc99d\uba85\uc774\ub098 \uac31\uc2e0 \ubd88\uac00\ub2a5\ud55c \uc0c1\ud0dc\uc5d0\uc11c\ub3c4 \ubb34\ud55c \uc7ac\uc2dc\ub3c4\ud560 \uc218 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c \uc5ec\ub7ec API \uc694\uccad\uc774 \ub3d9\uc2dc\uc5d0 \ub9cc\ub8cc\ub418\ub294 \uc0c1\ud669\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4. \uc5ec\ub7ec \uac31\uc2e0 \uc694\uccad\uc774 \ub3d9\uc2dc\uc5d0 \ubc1c\uc0dd\ud558\uba74 \ud1a0\ud070 \uad50\uccb4 \uacfc\uc815\uc5d0\uc11c \ucda9\ub3cc\ud560 \uc218 \uc788\uc73c\ubbc0\ub85c \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c\ub294 \uac31\uc2e0 \uc694\uccad\uc744 \ub2e8\uc77c\ud654\ud558\uace0, \uc11c\ubc84\uc5d0\uc11c\ub294 \ud1a0\ud070 \uc0c1\ud0dc\ub97c \uc6d0\uc790\uc801\uc73c\ub85c \ubcc0\uacbd\ud558\ub294 \ubc29\uc2dd\uc774 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Refresh Token Rotation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Refresh Token Rotation\uc740 \ud1a0\ud070 \uac31\uc2e0 \uc2dc \uae30\uc874 Refresh Token\uc744 \ud3d0\uae30\ud558\uace0 \uc0c8\ub85c\uc6b4 Refresh Token\uc744 \ubc1c\uae09\ud558\ub294 \ubc29\uc2dd\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uae30\uc874 Refresh Token\uc744 \uacc4\uc18d \uc7ac\uc0ac\uc6a9\ud558\ub3c4\ub85d \ud5c8\uc6a9\ud558\uba74 \ud1a0\ud070\uc774 \ud0c8\ucde8\ub418\uc5c8\uc744 \ub54c \uacf5\uaca9\uc790\uac00 \uc624\ub79c \uae30\uac04 \uac31\uc2e0\uc744 \ubc18\ubcf5\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rotation\uc744 \uc801\uc6a9\ud558\uba74 \uac31\uc2e0\ud560 \ub54c\ub9c8\ub2e4 \uc0ac\uc6a9 \uac00\ub2a5\ud55c Refresh Token\uc774 \ubcc0\uacbd\ub41c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Rotation\uc774 \uc5c6\ub294 \uad6c\uc870<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\ub85c\uadf8\uc778\n  |\n  v\nRefresh Token A \ubc1c\uae09\n  |\n  +--&gt; Access Token \uac31\uc2e0\n  |\n  +--&gt; Access Token \uac31\uc2e0\n  |\n  +--&gt; Access Token \uac31\uc2e0<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uae30\uc874 Refresh Token A\uac00 \uacc4\uc18d \uc720\ud6a8\ud558\ub2e4\uba74, \uc774\ub97c \ud0c8\ucde8\ud55c \uacf5\uaca9\uc790\ub3c4 \ubc18\ubcf5\uc801\uc73c\ub85c \ud1a0\ud070\uc744 \uac31\uc2e0\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Rotation\uc744 \uc801\uc6a9\ud55c \uad6c\uc870<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\ub85c\uadf8\uc778\n  |\n  v\nRefresh Token A\n  |\n  | \uac31\uc2e0\n  v\nRefresh Token A \ud3d0\uae30\nRefresh Token B \ubc1c\uae09\n  |\n  | \uac31\uc2e0\n  v\nRefresh Token B \ud3d0\uae30\nRefresh Token C \ubc1c\uae09<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ubc29\uc2dd\uc5d0\uc11c\ub294 \uac01 \uac31\uc2e0 \ub2e8\uacc4\uc5d0\uc11c \uc774\uc804 \ud1a0\ud070\uc744 \ub354 \uc774\uc0c1 \uc815\uc0c1\uc801\uc73c\ub85c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\ub3c4\ub85d \ucc98\ub9ac\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub9cc Rotation\ub9cc \uc801\uc6a9\ud55c\ub2e4\uace0 \ud0c8\ucde8 \uc704\ud5d8\uc774 \uc644\uc804\ud788 \uc81c\uac70\ub418\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \uacf5\uaca9\uc790\uac00 \uc544\uc9c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc740 \ucd5c\uc2e0 Refresh Token\uc744 \ud0c8\ucde8\ud558\uba74 \uc774\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4. \ub530\ub77c\uc11c \uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0, \uc138\uc158 \ud3d0\uae30, \uc548\uc804\ud55c \ud1a0\ud070 \uc800\uc7a5\uc744 \ud568\uaed8 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Refresh Token \uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0 \ubc0f \ud3d0\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Refresh Token Rotation\uc5d0\uc11c \uc911\uc694\ud55c \uae30\ub2a5 \uc911 \ud558\ub098\ub294 \uc774\ubbf8 \uc0ac\uc6a9\ub418\uc5c8\uac70\ub098 \ud3d0\uae30\ub41c Refresh Token\uc774 \ub2e4\uc2dc \uc81c\ucd9c\ub418\uc5c8\ub294\uc9c0 \ud0d0\uc9c0\ud558\ub294 \uac83\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \uc815\uc0c1\uc801\uc778 \uc0ac\uc6a9\uc790\uac00 Refresh Token A\ub97c \uc0ac\uc6a9\ud574 \uac31\uc2e0\ud588\ub2e4\uba74 \uc11c\ubc84\ub294 A\ub97c \ud3d0\uae30\ud558\uace0 B\ub97c \ubc1c\uae09\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ud6c4 \ub204\uad70\uac00 \ub2e4\uc2dc A\ub97c \uc81c\ucd9c\ud558\uba74 \ub2e4\uc74c \ub450 \uac00\uc9c0 \uc0c1\ud669\uc744 \uace0\ub824\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\uacf5\uaca9\uc790\uac00 \ud0c8\ucde8\ud55c \uc774\uc804 \ud1a0\ud070\uc744 \uc7ac\uc0ac\uc6a9\ud588\ub2e4.<\/li>\n\n\n\n<li>\uc815\uc0c1 \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc911\ubcf5 \uc694\uccad\uc774\ub098 \ub124\ud2b8\uc6cc\ud06c \uc9c0\uc5f0 \ub54c\ubb38\uc5d0 \uc774\uc804 \ud1a0\ud070\uc774 \ub2e4\uc2dc \uc81c\ucd9c\ub418\uc5c8\ub2e4.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \ub450 \uc0c1\ud669\uc744 \ubb34\uc870\uac74 \uad6c\ubd84\ud560 \uc218 \uc788\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \ub530\ub77c\uc11c \ud1a0\ud070 \uc7ac\uc0ac\uc6a9\uc744 \ud0d0\uc9c0\ud588\uc744 \ub54c\uc758 \ucc98\ub9ac \uc815\ucc45\uacfc \ub3d9\uc2dc \uc694\uccad \uc81c\uc5b4\ub97c \ud568\uaed8 \uc124\uacc4\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc11c\ubc84 \uce21 \ud1a0\ud070 \uc0c1\ud0dc \uad00\ub9ac<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Refresh Token\uc758 \uc0c1\ud0dc\ub97c \ucd94\uc801\ud558\uae30 \uc704\ud574 \uc11c\ubc84\ub294 \ud1a0\ud070 \uc6d0\ubb38\uc744 \uc800\uc7a5\ud558\ub294 \ub300\uc2e0 \ud574\uc2dc\uac12\uc774\ub098 \ud1a0\ud070 \uc2dd\ubcc4\uc790\ub97c \uc800\uc7a5\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc740 \ud14c\uc774\ube14\uc744 \uad6c\uc131\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CREATE TABLE refresh_tokens (\n    id BIGINT PRIMARY KEY AUTO_INCREMENT,\n    user_id BIGINT NOT NULL,\n    token_hash CHAR(64) NOT NULL UNIQUE,\n    family_id CHAR(36) NOT NULL,\n    expires_at DATETIME NOT NULL,\n    revoked_at DATETIME NULL,\n    replaced_by CHAR(64) NULL,\n    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP\n);<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uac01 \ud544\ub4dc\uc758 \uc5ed\ud560\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\ud544\ub4dc<\/th><th>\uc5ed\ud560<\/th><\/tr><tr><td><code>user_id<\/code><\/td><td>\ud1a0\ud070 \uc18c\uc720 \uc0ac\uc6a9\uc790<\/td><\/tr><tr><td><code>token_hash<\/code><\/td><td>Refresh Token\uc758 \ud574\uc2dc\uac12<\/td><\/tr><tr><td><code>family_id<\/code><\/td><td>\ud558\ub098\uc758 \ub85c\uadf8\uc778 \uc138\uc158\uc5d0\uc11c \uc774\uc5b4\uc9c0\ub294 \ud1a0\ud070 \uacc4\uc5f4 \uc2dd\ubcc4\uc790<\/td><\/tr><tr><td><code>expires_at<\/code><\/td><td>\ud1a0\ud070 \ub9cc\ub8cc \uc2dc\uac01<\/td><\/tr><tr><td><code>revoked_at<\/code><\/td><td>\ud1a0\ud070 \ud3d0\uae30 \uc2dc\uac01<\/td><\/tr><tr><td><code>replaced_by<\/code><\/td><td>\ud6c4\uc18d \ud1a0\ud070\uc758 \ud574\uc2dc\uac12<\/td><\/tr><tr><td><code>created_at<\/code><\/td><td>\ud1a0\ud070 \uc0dd\uc131 \uc2dc\uac01<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2e4\uc81c \uad6c\ud604\uc5d0\uc11c\ub294 \uc778\ub371\uc2a4, \uc678\ub798 \ud0a4, \ub370\uc774\ud130 \ubcf4\uc874 \uc815\ucc45 \ub4f1\uc744 \ucd94\uac00\ub85c \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">JWT \uc790\uccb4\ub97c \uc800\uc7a5\ud560 \ud544\uc694\ub294 \uc5c6\ub2e4. \uc11c\ubc84\uac00 \ubc1b\uc740 \ud1a0\ud070\uc744 \uc548\uc804\ud55c \ubc29\uc2dd\uc73c\ub85c \ud574\uc2dc\ud55c \ud6c4 \uc800\uc7a5\ub41c \uac12\uacfc \ube44\uad50\ud560 \uc218 \uc788\ub2e4. \ubb34\uc791\uc704\uc131\uc774 \ucda9\ubd84\ud55c \ud1a0\ud070\uc744 \ub300\uc0c1\uc73c\ub85c SHA-256\uacfc \uac19\uc740 \ud574\uc2dc\ub97c \uc0ac\uc6a9\ud558\ub294 \ubc29\uc2dd\uc774 \uac00\ub2a5\ud558\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0 \ud750\ub984<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>Refresh Token \uc81c\ucd9c\n        |\n        v\n\ud1a0\ud070 \ud574\uc2dc \uc870\ud68c\n        |\n        v\n\ud1a0\ud070 \uc0c1\ud0dc \ud655\uc778\n        |\n        +--&gt; \uc720\ud6a8\ud558\uace0 \ubbf8\uc0ac\uc6a9 \uc0c1\ud0dc\n        |        |\n        |        v\n        |   \uae30\uc874 \ud1a0\ud070 \ud3d0\uae30\n        |   \uc0c8 \ud1a0\ud070 \ubc1c\uae09\n        |\n        +--&gt; \uc774\ubbf8 \ud3d0\uae30\ub41c \ud1a0\ud070\n                 |\n                 v\n          \uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0 \uc815\ucc45 \uc2e4\ud589\n                 |\n                 v\n          \uad00\ub828 \ud1a0\ud070 \uacc4\uc5f4 \ud3d0\uae30<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ubbf8 \ud3d0\uae30\ub41c \ud1a0\ud070\uc774 \ub2e4\uc2dc \uc81c\ucd9c\ub418\uc5c8\ub2e4\uba74 \ud574\ub2f9 \ud1a0\ud070\uc774 \uc18d\ud55c <code>family_id<\/code>\ub97c \uae30\uc900\uc73c\ub85c \uad00\ub828 Refresh Token\uc744 \ubaa8\ub450 \ud3d0\uae30\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc774 \ucc98\ub9ac\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>UPDATE refresh_tokens\nSET revoked_at = CURRENT_TIMESTAMP\nWHERE family_id = ?\n  AND revoked_at IS NULL;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub807\uac8c \ud558\uba74 \uac19\uc740 \ub85c\uadf8\uc778 \uc138\uc158\uc5d0\uc11c \ubc1c\uae09\ub41c \ud6c4\uc18d \ud1a0\ud070\uae4c\uc9c0 \ud3d0\uae30\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e8, \uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0 \uc2dc \ubaa8\ub4e0 \uae30\uae30\uc758 \uc138\uc158\uc744 \uc885\ub8cc\ud560\uc9c0, \ud574\ub2f9 \ub85c\uadf8\uc778 \uc138\uc158\ub9cc \uc885\ub8cc\ud560\uc9c0\ub294 \uc815\ucc45\uc5d0 \ub530\ub77c \uacb0\uc815\ud574\uc57c \ud55c\ub2e4. \uc77c\ubc18\uc801\uc73c\ub85c\ub294 \uc601\ud5a5\uc744 \ubc1b\uc740 \ud1a0\ud070 \uacc4\uc5f4\uc744 \ud3d0\uae30\ud558\uace0 \uc7ac\uc778\uc99d\uc744 \uc694\uad6c\ud558\ub294 \ubc29\uc2dd\uc774 \ud569\ub9ac\uc801\uc774\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ub3d9\uc2dc \uc694\uccad\uacfc \uc6d0\uc790\uc131<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070 \uc7ac\uc0ac\uc6a9 \ud0d0\uc9c0 \ub85c\uc9c1\uc740 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud2b8\ub79c\uc7ad\uc158\uacfc \uc6d0\uc790\uc131\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\uac00 \ub3d9\uc2dc\uc5d0 \ub450 \uac1c\uc758 \uac31\uc2e0 \uc694\uccad\uc744 \ubc1b\uc73c\uba74 \ub450 \uc694\uccad\uc774 \ubaa8\ub450 \uae30\uc874 \ud1a0\ud070\uc744 \uc720\ud6a8\ud558\ub2e4\uace0 \ud310\ub2e8\ud560 \uc218 \uc788\ub2e4. \uc774 \uacbd\uc6b0 \uc11c\ub85c \ub2e4\ub978 \ud6c4\uc18d \ud1a0\ud070\uc774 \ubc1c\uae09\ub418\uac70\ub098 \uc815\uc0c1\uc801\uc778 \uc694\uccad\uc774 \uc7ac\uc0ac\uc6a9\uc73c\ub85c \uc624\uc778\ub420 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub530\ub77c\uc11c \ub2e4\uc74c\uacfc \uac19\uc740 \ub300\ucc45\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud2b8\ub79c\uc7ad\uc158 \uc0ac\uc6a9<\/li>\n\n\n\n<li>\ud589 \uc7a0\uae08 \ub610\ub294 \uc870\uac74\ubd80 \uc5c5\ub370\uc774\ud2b8<\/li>\n\n\n\n<li>\uae30\uc874 \ud1a0\ud070\uc758 \ubbf8\uc0ac\uc6a9 \uc0c1\ud0dc\ub97c \ud655\uc778\ud558\ub294 \uc6d0\uc790\uc801 \ubcc0\uacbd<\/li>\n\n\n\n<li>\ub3d9\uc77c \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uac31\uc2e0 \uc694\uccad \ub2e8\uc77c\ud654<\/li>\n\n\n\n<li>\uc911\ubcf5 \uc694\uccad\uacfc \uc2e4\uc81c \uc7ac\uc0ac\uc6a9\uc744 \uad6c\ubd84\ud558\uae30 \uc704\ud55c \uba85\ud655\ud55c \uc815\ucc45<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\ud2b9\ud788 \uc774\uc804 \ud1a0\ud070\uc774 \uc774\ubbf8 \uad50\uccb4\ub41c \uc0c1\ud0dc\ub77c\uba74, \uc11c\ubc84\ub294 \ub2e8\uc21c\ud788 \uc0c8 \ud1a0\ud070\uc744 \ubc1c\uae09\ud558\ub294 \ubc29\uc2dd\uc73c\ub85c \uc6b0\ud68c\ud574\uc11c\ub294 \uc548 \ub41c\ub2e4. \uadf8\ub807\uc9c0 \uc54a\uc73c\uba74 Rotation\uc758 \ubcf4\uc548 \ubaa9\uc801\uc774 \uc57d\ud654\ub41c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ub85c\uadf8\uc544\uc6c3\uacfc \ud1a0\ud070 \ubb34\ud6a8\ud654<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">JWT\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uc790\uccb4\uc801\uc73c\ub85c \uc720\ud6a8\uc131\uc744 \uac80\uc99d\ud560 \uc218 \uc788\ub3c4\ub85d \uc124\uacc4\ub418\uc5b4 \uc788\ub2e4. \ub530\ub77c\uc11c \uc11c\ubc84\uac00 JWT\ub97c \ubc1c\uae09\ud55c \ud6c4 \ubcc4\ub3c4 \uc0c1\ud0dc\ub97c \ud655\uc778\ud558\uc9c0 \uc54a\ub294 \uad6c\uc870\uc5d0\uc11c\ub294 \ub85c\uadf8\uc544\uc6c3\uc744 \uc694\uccad\ud574\ub3c4 \uae30\uc874 Access Token\uc774 \ub9cc\ub8cc\ub420 \ub54c\uae4c\uc9c0 \uc720\ud6a8\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc989, <strong>\ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c \ud1a0\ud070\uc744 \uc0ad\uc81c\ud558\ub294 \uac83\uacfc \uc11c\ubc84\uc5d0\uc11c \ud1a0\ud070\uc744 \ubb34\ud6a8\ud654\ud558\ub294 \uac83\uc740 \uc11c\ub85c \ub2e4\ub978 \uc791\uc5c5\uc774\ub2e4.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud074\ub77c\uc774\uc5b8\ud2b8 \ud1a0\ud070 \uc0ad\uc81c<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ub85c\uadf8\uc544\uc6c3 \uc2dc \ube0c\ub77c\uc6b0\uc800\ub098 \uc571\uc5d0\uc11c Access Token\uacfc Refresh Token\uc744 \uc0ad\uc81c\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub807\uac8c \ud558\uba74 \ud574\ub2f9 \ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \ub354 \uc774\uc0c1 \ud1a0\ud070\uc744 \uc774\uc6a9\ud55c \uc815\uc0c1\uc801\uc778 \uc694\uccad\uc744 \uc218\ud589\ud560 \uc218 \uc5c6\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uadf8\ub7ec\ub098 \ud1a0\ud070\uc774 \uc774\ubbf8 \uacf5\uaca9\uc790\uc5d0\uac8c \ud0c8\ucde8\ub418\uc5c8\ub2e4\uba74 \uacf5\uaca9\uc790\uc758 \ud1a0\ud070\uae4c\uc9c0 \uc790\ub3d9\uc73c\ub85c \ubb34\ud6a8\ud654\ub418\uc9c0\ub294 \uc54a\ub294\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Refresh Token \ud3d0\uae30<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84\ub294 \ub85c\uadf8\uc544\uc6c3 \uc694\uccad\uc744 \ubc1b\uc73c\uba74 \ud574\ub2f9 \ub85c\uadf8\uc778 \uc138\uc158\uc758 Refresh Token\uc744 \ud3d0\uae30\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ud6c4 \ud574\ub2f9 \ud1a0\ud070\uc744 \uc774\uc6a9\ud55c \uac31\uc2e0\uc744 \uac70\ubd80\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ubc29\uc2dd\uc740 \uc7a5\uae30 \uc138\uc158\uc758 \uc9c0\uc18d\uc801\uc778 \uc0ac\uc6a9\uc744 \ucc28\ub2e8\ud558\uc9c0\ub9cc, \uc774\ubbf8 \ubc1c\uae09\ub41c Access Token\uc740 \ubcc4\ub3c4\uc758 \uac80\uc99d \uc7a5\uce58\uac00 \uc5c6\ub2e4\uba74 \ub9cc\ub8cc \uc804\uae4c\uc9c0 \uacc4\uc18d \uc720\ud6a8\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Access Token \uc989\uc2dc \ubb34\ud6a8\ud654<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\ub3c4 \uc989\uc2dc \ubb34\ud6a8\ud654\ud574\uc57c \ud55c\ub2e4\uba74 \ub2e4\uc74c \ubc29\ubc95\uc744 \uace0\ub824\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\ud1a0\ud070\uc758 <code>jti<\/code>\ub97c \uae30\uc900\uc73c\ub85c \ud3d0\uae30 \ubaa9\ub85d\uc744 \uad00\ub9ac\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc0ac\uc6a9\uc790\ub098 \uc138\uc158\uc758 \uc778\uc99d \ubc84\uc804\uc744 \uad00\ub9ac\ud558\uace0 \ud1a0\ud070\uc758 \ubc84\uc804\uacfc \ube44\uad50\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc694\uccad\ub9c8\ub2e4 \uc11c\ubc84 \uce21 \uc138\uc158 \uc0c1\ud0dc\ub97c \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>Access Token\uc758 \uc720\ud6a8 \uae30\uac04\uc744 \uc9e7\uac8c \uc124\uc815\ud558\uace0 Refresh Token\uc744 \ud3d0\uae30\ud55c\ub2e4.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\ud3d0\uae30 \ubaa9\ub85d\uc774\ub098 \uc138\uc158 \uc0c1\ud0dc\ub97c \ub9e4 \uc694\uccad\ub9c8\ub2e4 \ud655\uc778\ud558\uba74 JWT\uc758 \ubb34\uc0c1\ud0dc \uac80\uc99d\uc774\ub77c\ub294 \uc7a5\uc810\uc774 \uc77c\ubd80 \uc904\uc5b4\ub4e0\ub2e4. \ub530\ub77c\uc11c \ubcf4\uc548 \uc694\uad6c\uc0ac\ud56d\uacfc \uc131\ub2a5 \uc0ac\uc774\uc758 \uade0\ud615\uc774 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \uc77c\ubc18\uc801\uc778 API\uc5d0\uc11c\ub294 \uc9e7\uc740 Access Token\uacfc Refresh Token \ud3d0\uae30\ub97c \uc0ac\uc6a9\ud558\uace0, \uacb0\uc81c\u00b7\uad00\ub9ac\uc790 \uad8c\ud55c \ubcc0\uacbd\ucc98\ub7fc \uc989\uac01\uc801\uc778 \ubb34\ud6a8\ud654\uac00 \uc911\uc694\ud55c \uc791\uc5c5\uc5d0\uc11c\ub294 \uc11c\ubc84 \uce21 \uc0c1\ud0dc\ub97c \ucd94\uac00\ub85c \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud1a0\ud070 \uc800\uc7a5 \uc704\uce58\uc640 \ubcf4\uc548<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070\uc744 \uc5b4\ub514\uc5d0 \uc800\uc7a5\ud558\ub294\uc9c0\ub294 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc758 \ubcf4\uc548 \uc218\uc900\uc5d0 \uc9c1\uc811\uc801\uc778 \uc601\ud5a5\uc744 \uc900\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">localStorage<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>localStorage<\/code>\ub294 \ube0c\ub77c\uc6b0\uc800\uc5d0 \ub370\uc774\ud130\ub97c \uc9c0\uc18d\uc801\uc73c\ub85c \uc800\uc7a5\ud560 \uc218 \uc788\ub294 \uae30\ub2a5\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc7a5\uc810\uc740 \uad6c\ud604\uc774 \uac04\ub2e8\ud558\uace0 JavaScript\uc5d0\uc11c \uc27d\uac8c \uc811\uadfc\ud560 \uc218 \uc788\ub2e4\ub294 \uac83\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uadf8\ub7ec\ub098 \uac19\uc740 \ucd9c\ucc98\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 JavaScript\ub3c4 \uc800\uc7a5\ub41c \ud1a0\ud070\uc744 \uc77d\uc744 \uc218 \uc788\ub2e4. \ub530\ub77c\uc11c XSS(Cross-Site Scripting) \uacf5\uaca9\uc73c\ub85c \uc545\uc131 \ucf54\ub4dc\uac00 \uc2e4\ud589\ub418\uba74 \ud1a0\ud070\uc774 \ud0c8\ucde8\ub420 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud2b9\ud788 \uc7a5\uae30 \uc720\ud6a8 \uae30\uac04\uc744 \uac00\uc9c4 Refresh Token\uc744 <code>localStorage<\/code>\uc5d0 \uc800\uc7a5\ud558\uba74 \ud53c\ud574 \ubc94\uc704\uac00 \ucee4\uc9c8 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">sessionStorage<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>sessionStorage<\/code>\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ube0c\ub77c\uc6b0\uc800 \ud0ed\uc758 \uc138\uc158 \ub2e8\uc704\ub85c \ub370\uc774\ud130\ub97c \uc720\uc9c0\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>localStorage<\/code>\ubcf4\ub2e4 \uc218\uba85\uc774 \uc9e7\uc744 \uc218 \uc788\uc9c0\ub9cc JavaScript\uc5d0\uc11c \uc811\uadfc\ud560 \uc218 \uc788\ub2e4\ub294 \uc810\uc740 \ub3d9\uc77c\ud558\ub2e4. \ub530\ub77c\uc11c XSS \uacf5\uaca9\uc5d0 \ub300\ud55c \uadfc\ubcf8\uc801\uc778 \ubc29\uc5b4 \uc218\ub2e8\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uba54\ubaa8\ub9ac<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uc744 JavaScript \uba54\ubaa8\ub9ac\uc5d0\ub9cc \ubcf4\uad00\ud558\uba74 \ud398\uc774\uc9c0\ub97c \uc0c8\ub85c\uace0\uce68\ud558\uac70\ub098 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc885\ub8cc\ub420 \ub54c \ud1a0\ud070\uc774 \uc0ac\ub77c\uc9c8 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc9c0\uc18d \uc800\uc7a5\uc18c\uc5d0 \ud1a0\ud070\uc744 \ub0a8\uae30\uc9c0 \uc54a\ub294\ub2e4\ub294 \uc7a5\uc810\uc774 \uc788\uc9c0\ub9cc, \uc2e4\ud589 \uc911\uc778 \ud398\uc774\uc9c0\uc5d0\uc11c \uc545\uc131 JavaScript\uac00 \ub3d9\uc791\ud558\uba74 \uba54\ubaa8\ub9ac\uc5d0 \uc788\ub294 \ud1a0\ud070 \uc5ed\uc2dc \ud0c8\ucde8\ub420 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">HttpOnly \ucfe0\ud0a4<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>HttpOnly<\/code> \ucfe0\ud0a4\ub294 JavaScript\uc5d0\uc11c \ucfe0\ud0a4 \uac12\uc744 \uc9c1\uc811 \uc77d\uc744 \uc218 \uc5c6\ub3c4\ub85d \uc124\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ube0c\ub77c\uc6b0\uc800\uac00 \uc694\uccad\uc5d0 \ucfe0\ud0a4\ub97c \uc790\ub3d9\uc73c\ub85c \ud3ec\ud568\ud558\ubbc0\ub85c Refresh Token\uc744 \uc548\uc804\ud558\uac8c \uad00\ub9ac\ud558\ub294 \ubc29\ubc95\uc73c\ub85c \ud65c\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub9cc \ucfe0\ud0a4\uac00 \uc790\ub3d9\uc73c\ub85c \uc804\uc1a1\ub41c\ub2e4\ub294 \ud2b9\uc131 \ub54c\ubb38\uc5d0 CSRF(Cross-Site Request Forgery) \uacf5\uaca9\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4. <code>SameSite<\/code> \uc124\uc815, Origin \uac80\uc99d, \ud544\uc694\ud55c \uacbd\uc6b0 CSRF \ud1a0\ud070 \ub4f1\uc744 \ud568\uaed8 \uc801\uc6a9\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\uc800\uc7a5 \uc704\uce58 \ube44\uad50<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\uc800\uc7a5 \uc704\uce58<\/th><th>JavaScript \uc811\uadfc<\/th><th>\uc8fc\uc694 \uace0\ub824\uc0ac\ud56d<\/th><\/tr><tr><td><code>localStorage<\/code><\/td><td>\uac00\ub2a5<\/td><td>XSS\uc5d0 \uc758\ud55c \ud1a0\ud070 \ud0c8\ucde8<\/td><\/tr><tr><td><code>sessionStorage<\/code><\/td><td>\uac00\ub2a5<\/td><td>XSS \ubc0f \ud0ed \uc138\uc158 \uc218\uba85<\/td><\/tr><tr><td>\uba54\ubaa8\ub9ac<\/td><td>\uac00\ub2a5<\/td><td>\uc2e4\ud589 \uc911\uc778 \ud398\uc774\uc9c0\uc758 XSS<\/td><\/tr><tr><td>HttpOnly \ucfe0\ud0a4<\/td><td>\uc9c1\uc811 \uc811\uadfc \ubd88\uac00<\/td><td>CSRF \ubc0f \ucfe0\ud0a4 \uc124\uc815<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5b4\ub5a4 \uc800\uc7a5 \uc704\uce58\ub3c4 \ubaa8\ub4e0 \uacf5\uaca9\uc744 \ubc29\uc9c0\ud558\uc9c0\ub294 \ubabb\ud55c\ub2e4. \uc2e4\uc81c \uc124\uacc4\uc5d0\uc11c\ub294 XSS \ubc29\uc5b4, CSRF \ubc29\uc5b4, \ud1a0\ud070 \ub9cc\ub8cc, \ud3d0\uae30 \uc815\ucc45, TLS \uc801\uc6a9\uc744 \ud568\uaed8 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">HttpOnly, Secure, SameSite \ucfe0\ud0a4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ucfe0\ud0a4\ub97c \uc0ac\uc6a9\ud574 \ud1a0\ud070\uc744 \uc804\ub2ec\ud560 \ub54c\ub294 \ube0c\ub77c\uc6b0\uc800\uac00 \uc81c\uacf5\ud558\ub294 \ubcf4\uc548 \uc18d\uc131\uc744 \uc62c\ubc14\ub974\uac8c \uc124\uc815\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 Refresh Token\uc744 \ucfe0\ud0a4\uc5d0 \uc800\uc7a5\ud558\ub294 \uacbd\uc6b0 \ub2e4\uc74c\uacfc \uac19\uc774 \uc124\uc815\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Set-Cookie: refreshToken=&lt;refresh_token&gt;; HttpOnly; Secure; SameSite=Lax; Path=\/auth\/refresh; Max-Age=604800<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704 \uc124\uc815\uc740 \uc608\uc2dc\uc774\uba70, \uc2e4\uc81c \uc11c\ube44\uc2a4\uc758 \ub3c4\uba54\uc778 \uad6c\uc131\uacfc \uc778\uc99d \ud750\ub984\uc5d0 \ub530\ub77c \uc870\uc815\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">HttpOnly<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>HttpOnly<\/code>\ub294 JavaScript\uc5d0\uc11c \ucfe0\ud0a4\uc5d0 \uc9c1\uc811 \uc811\uadfc\ud558\ub294 \uac83\uc744 \uc81c\ud55c\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Set-Cookie: refreshToken=&lt;token&gt;; HttpOnly<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc77c\ubc18\uc801\uc778 JavaScript \ucf54\ub4dc\uc5d0\uc11c\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \ud574\ub2f9 \ucfe0\ud0a4 \uac12\uc744 \uc77d\uc744 \uc218 \uc5c6\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>document.cookie<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub97c \ud1b5\ud574 XSS \uacf5\uaca9\uc774 \ubc1c\uc0dd\ud558\ub354\ub77c\ub3c4 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\uac00 HttpOnly \ucfe0\ud0a4\uc758 \uac12\uc744 \uc9c1\uc811 \uc77d\uc5b4 \uc678\ubd80\ub85c \uc804\uc1a1\ud558\ub294 \uc704\ud5d8\uc744 \uc904\uc77c \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud558\uc9c0\ub9cc XSS \uc790\uccb4\ub97c \ubc29\uc9c0\ud558\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\uac00 \ube0c\ub77c\uc6b0\uc800 \uc548\uc5d0\uc11c \uc2e4\ud589\ub418\uba74 \uc0ac\uc6a9\uc790\ub97c \ub300\uc2e0\ud574 \uc694\uccad\uc744 \uc804\uc1a1\ud558\ub294 \uacf5\uaca9\uc740 \uc5ec\uc804\ud788 \uac00\ub2a5\ud558\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Secure<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>Secure<\/code>\ub294 HTTPS \uc5f0\uacb0\uc5d0\uc11c\ub9cc \ucfe0\ud0a4\uac00 \uc804\uc1a1\ub418\ub3c4\ub85d \uc81c\ud55c\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Set-Cookie: refreshToken=&lt;token&gt;; Secure<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">HTTPS\ub97c \uc801\uc6a9\ud558\uc9c0 \uc54a\uc73c\uba74 \ub124\ud2b8\uc6cc\ud06c\uc5d0\uc11c \ucfe0\ud0a4\uac00 \ub178\ucd9c\ub420 \uc704\ud5d8\uc774 \uc788\uc73c\ubbc0\ub85c \uc778\uc99d \ucfe0\ud0a4\uc5d0\ub294 \uc77c\ubc18\uc801\uc73c\ub85c <code>Secure<\/code>\ub97c \uc124\uc815\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc6b4\uc601 \ud658\uacbd\uc5d0\uc11c\ub294 HTTPS\ub97c \uc0ac\uc6a9\ud558\uace0, \uac1c\ubc1c \ud658\uacbd\uc5d0\uc11c\ub294 \ud658\uacbd\ubcc4 \ucfe0\ud0a4 \uc124\uc815\uc744 \ubd84\ub9ac\ud558\ub294 \uac83\uc774 \uc88b\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SameSite<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>SameSite<\/code>\ub294 \ub2e4\ub978 \uc0ac\uc774\ud2b8\uc5d0\uc11c \uc2dc\uc791\ub41c \uc694\uccad\uc5d0 \ucfe0\ud0a4\ub97c \uc5b4\ub290 \ubc94\uc704\uae4c\uc9c0 \ud3ec\ud568\ud560\uc9c0 \uc81c\uc5b4\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub300\ud45c\uc801\uc778 \uc124\uc815\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Strict<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SameSite=Strict<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uad50\ucc28 \uc0ac\uc774\ud2b8 \uc694\uccad\uc5d0 \ucfe0\ud0a4\uac00 \ud3ec\ud568\ub418\ub294 \uac83\uc744 \uac15\ud558\uac8c \uc81c\ud55c\ud55c\ub2e4. \ubcf4\uc548 \uce21\uba74\uc5d0\uc11c \uc720\ub9ac\ud560 \uc218 \uc788\uc9c0\ub9cc \uc678\ubd80 \uc0ac\uc774\ud2b8\uc5d0\uc11c \uc11c\ube44\uc2a4\ub85c \uc774\ub3d9\ud558\ub294 \uc77c\ubd80 \ud750\ub984\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uacbd\ud5d8\uc5d0 \uc601\ud5a5\uc744 \uc904 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Lax<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SameSite=Lax<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc77c\ubc18\uc801\uc778 \uc6f9 \uc11c\ube44\uc2a4\uc5d0\uc11c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \uc808\ucda9\uc548\uc774\ub2e4. \uc77c\ubd80 \ucd5c\uc0c1\uc704 \ud0d0\uc0c9 \uc694\uccad\uc5d0\ub294 \ucfe0\ud0a4\uac00 \ud3ec\ud568\ub420 \uc218 \uc788\uc73c\ubbc0\ub85c \ubaa8\ub4e0 CSRF \uacf5\uaca9\uc744 \ub9c9\ub294\ub2e4\uace0 \uac04\uc8fc\ud574\uc11c\ub294 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>None<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SameSite=None; Secure<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uad50\ucc28 \uc0ac\uc774\ud2b8 \uc694\uccad\uc5d0\uc11c\ub3c4 \ucfe0\ud0a4\uac00 \ud544\uc694\ud560 \ub54c \uc0ac\uc6a9\ud55c\ub2e4. <code>None<\/code>\uc744 \uc9c0\uc815\ud558\ub294 \ucfe0\ud0a4\uc5d0\ub294 <code>Secure<\/code>\uac00 \ud544\uc694\ud558\ub2e4. \ube0c\ub77c\uc6b0\uc800\uc758 \uc81c3\uc790 \ucfe0\ud0a4 \uc815\ucc45 \ub4f1\ub3c4 \ubcc4\ub3c4\ub85c \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud504\ub860\ud2b8\uc5d4\ub4dc\uc640 \ubc31\uc5d4\ub4dc\uac00 \uc11c\ub85c \ub2e4\ub978 \uc0ac\uc774\ud2b8\uc5d0 \ubc30\ud3ec\ub41c \uad6c\uc870\ub77c\uba74 \ucfe0\ud0a4 \uc815\ucc45, CORS, \uc790\uaca9 \uc99d\uba85 \uc804\uc1a1 \uc124\uc815\uc744 \ud568\uaed8 \uc124\uacc4\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Path\uc640 Domain<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>Path<\/code>\ub294 \ucfe0\ud0a4\ub97c \uc804\uc1a1\ud560 \uc694\uccad \uacbd\ub85c\ub97c \uc81c\ud55c\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc608\ub97c \ub4e4\uc5b4 \ub2e4\uc74c\uacfc \uac19\uc774 \uc124\uc815\ud558\uba74 \ube0c\ub77c\uc6b0\uc800\ub294 \ud574\ub2f9 \uacbd\ub85c\uc640 \uc77c\uce58\ud558\ub294 \uc694\uccad\uc5d0 \ucfe0\ud0a4\ub97c \ud3ec\ud568\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Path=\/auth\/refresh<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub9cc <code>Path<\/code>\ub294 \uac15\ub825\ud55c \ubcf4\uc548 \uacbd\uacc4\uac00 \uc544\ub2c8\ub2e4. \ub2e4\ub978 \uacbd\ub85c\uc758 \uc2a4\ud06c\ub9bd\ud2b8\ub85c\ubd80\ud130 \ucfe0\ud0a4 \uc790\uccb4\ub97c \ubcf4\ud638\ud558\ub294 \uc218\ub2e8\uc73c\ub85c \uac04\uc8fc\ud574\uc11c\ub294 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>Domain<\/code>\uc744 \uc0dd\ub7b5\ud558\uba74 \ucfe0\ud0a4\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ucfe0\ud0a4\ub97c \uc124\uc815\ud55c \ud638\uc2a4\ud2b8\uc5d0 \ud55c\uc815\ub41c\ub2e4. \uac00\ub2a5\ud55c \uacbd\uc6b0 \ubd88\ud544\uc694\ud558\uac8c \ub113\uc740 Domain \ubc94\uc704\ub97c \uc9c0\uc815\ud558\uc9c0 \uc54a\ub294 \ud3b8\uc774 \uc88b\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ucfe0\ud0a4 \uc774\ub984\uc5d0 <code>__Host-<\/code> \uc811\ub450\uc0ac\ub97c \uc0ac\uc6a9\ud558\uba74 \ub354 \uc5c4\uaca9\ud55c \uc81c\uc57d\uc744 \uc801\uc6a9\ud560 \uc218 \uc788\ub2e4. \uc608\ub97c \ub4e4\uc5b4 <code>__Host-refreshToken<\/code>\uc740 <code>Secure<\/code>\ub97c \uc0ac\uc6a9\ud558\uace0, <code>Path=\/<\/code>\ub85c \uc124\uc815\ud558\uba70, <code>Domain<\/code> \uc18d\uc131\uc744 \uc9c0\uc815\ud558\uc9c0 \uc54a\uc544\uc57c \ud55c\ub2e4. \uc774 \uc811\ub450\uc0ac\ub294 \ud558\uc704 \uacbd\ub85c\ub9cc\uc73c\ub85c \ucfe0\ud0a4 \uc804\uc1a1\uc744 \uc81c\ud55c\ud558\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud558\uc9c0\ub294 \uc54a\ub294\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Node.js\uc640 TypeScript\ub85c \uad6c\ud604\ud558\ub294 JWT \uc778\uc99d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\uc74c\uc740 <code>jsonwebtoken<\/code>\uc744 \uc0ac\uc6a9\ud558\ub294 \uac04\ub2e8\ud55c Access Token \ubc1c\uae09 \ubc0f \uac80\uc99d \uc608\uc2dc\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Access Token \ubc1c\uae09<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>import jwt from \"jsonwebtoken\";\n\nconst ACCESS_TOKEN_SECRET =\n  process.env.ACCESS_TOKEN_SECRET;\n\nif (!ACCESS_TOKEN_SECRET) {\n  throw new Error(\"ACCESS_TOKEN_SECRET is required\");\n}\n\ninterface AccessTokenPayload {\n  sub: string;\n  role: \"user\" | \"admin\";\n}\n\nexport function createAccessToken(\n  user: AccessTokenPayload\n): string {\n  return jwt.sign(\n    {\n      role: user.role,\n      tokenType: \"access\",\n    },\n    ACCESS_TOKEN_SECRET,\n    {\n      subject: user.sub,\n      issuer: \"api.example.com\",\n      audience: \"game-client\",\n      expiresIn: \"15m\",\n      algorithm: \"HS256\",\n    }\n  );\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ucf54\ub4dc\ub294 \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790\uc640 \uc5ed\ud560\uc744 \ud3ec\ud568\ud558\ub294 Access Token\uc744 \ubc1c\uae09\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc6b4\uc601 \ud658\uacbd\uc5d0\uc11c\ub294 \ucda9\ubd84\ud788 \uac15\ub825\ud558\uace0 \uc608\uce21 \ubd88\uac00\ub2a5\ud55c \ube44\ubc00\ud0a4\ub97c \uc0ac\uc6a9\ud574\uc57c \ud55c\ub2e4. \ube44\ubc00\ud0a4\ub97c \uc18c\uc2a4 \ucf54\ub4dc\uc5d0 \ud558\ub4dc\ucf54\ub529\ud558\uc9c0 \ub9d0\uace0, \ud658\uacbd \ubcc0\uc218\ub098 \ubcc4\ub3c4\uc758 \ube44\ubc00 \uad00\ub9ac \uc2dc\uc2a4\ud15c\uc744 \ud1b5\ud574 \uad00\ub9ac\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Access Token \uac80\uc99d<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>import jwt from \"jsonwebtoken\";\n\nconst ACCESS_TOKEN_SECRET =\n  process.env.ACCESS_TOKEN_SECRET!;\n\ninterface VerifiedAccessToken {\n  sub: string;\n  role: \"user\" | \"admin\";\n  tokenType: \"access\";\n}\n\nexport function verifyAccessToken(\n  token: string\n): VerifiedAccessToken {\n  const decoded = jwt.verify(\n    token,\n    ACCESS_TOKEN_SECRET,\n    {\n      algorithms: &#91;\"HS256\"],\n      issuer: \"api.example.com\",\n      audience: \"game-client\",\n    }\n  );\n\n  if (\n    typeof decoded === \"string\" ||\n    typeof decoded.sub !== \"string\" ||\n    (decoded.role !== \"user\" &amp;&amp;\n      decoded.role !== \"admin\") ||\n    decoded.tokenType !== \"access\"\n  ) {\n    throw new Error(\"Invalid access token payload\");\n  }\n\n  return {\n    sub: decoded.sub,\n    role: decoded.role,\n    tokenType: \"access\",\n  };\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>jwt.verify()<\/code>\ub294 \uc11c\uba85\uacfc \uc2dc\uac04 \uad00\ub828 \ud074\ub808\uc784 \ub4f1\uc744 \uac80\uc99d\ud55c\ub2e4. \uc704 \ucf54\ub4dc\uc5d0\uc11c\ub294 \uc54c\uace0\ub9ac\uc998, \ubc1c\uae09\uc790, \ub300\uc0c1\ub3c4 \uba85\uc2dc\uc801\uc73c\ub85c \uc81c\ud55c\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub9cc JWT \uc11c\uba85 \uac80\uc99d\uc774 \uc131\uacf5\ud588\ub2e4\uace0 \ud574\uc11c \ubaa8\ub4e0 \uad8c\ud55c \uac80\uc0ac\uac00 \ub05d\ub09c \uac83\uc740 \uc544\ub2c8\ub2e4. \uc2e4\uc81c API\uc5d0\uc11c\ub294 \uc694\uccad\ud55c \ub9ac\uc18c\uc2a4\uc5d0 \ub300\ud55c \uc811\uadfc \uad8c\ud55c, \uc0ac\uc6a9\uc790 \uc815\uc9c0 \uc0c1\ud0dc, \ud544\uc694\ud55c \uacbd\uc6b0 \uc138\uc158 \ud3d0\uae30 \uc5ec\ubd80 \ub4f1\uc744 \ucd94\uac00\ub85c \uac80\uc99d\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c \ube44\ubc00\ud0a4\uac00 \uc124\uc815\ub418\uc9c0 \uc54a\uc558\uc744 \ub54c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc2dc\uc791 \ub2e8\uacc4\uc5d0\uc11c \uc2e4\ud328\ud558\ub3c4\ub85d \ucc98\ub9ac\ud558\uace0, \uc6b4\uc601 \ucf54\ub4dc\uc5d0\uc11c\ub294 \uac80\uc99d\ub418\uc9c0 \uc54a\uc740 \ud1a0\ud070\uc758 Payload\ub97c \uc2e0\ub8b0\ud574\uc11c\ub294 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Refresh Token Rotation\uc758 \ud575\uc2ec \uad6c\ud604 \uc6d0\uce59<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Refresh Token Rotation\uc740 \ub2e8\uc21c\ud788 \uc0c8 \ud1a0\ud070\uc744 \ubc1c\uae09\ud558\ub294 \uac83\ub9cc\uc73c\ub85c \uc644\uc131\ub418\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc548\uc804\ud55c \uad6c\ud604\uc744 \uc704\ud574\uc11c\ub294 \ub2e4\uc74c \uc808\ucc28\uac00 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Refresh Token\uc744 \uc81c\ucd9c\ubc1b\ub294\ub2e4.<\/li>\n\n\n\n<li>\ud1a0\ud070\uc758 \uc11c\uba85, \ub9cc\ub8cc, \ubc1c\uae09 \ubaa9\uc801 \ubc0f \uc138\uc158 \uc0c1\ud0dc\ub97c \uac80\uc99d\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc11c\ubc84 \uc800\uc7a5\uc18c\uc5d0\uc11c \ud1a0\ud070\uc758 \ud574\uc2dc\uac12\uacfc \ud3d0\uae30 \uc0c1\ud0dc\ub97c \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\ud1a0\ud070\uc774 \uc544\uc9c1 \uc720\ud6a8\ud558\uace0 \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uc0c1\ud0dc\uc778\uc9c0 \uc6d0\uc790\uc801\uc73c\ub85c \ud655\uc778\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uae30\uc874 Refresh Token\uc744 \ud3d0\uae30\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc0c8\ub85c\uc6b4 Refresh Token\uc744 \ubc1c\uae09\ud558\uace0 \uc800\uc7a5\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc0c8\ub85c\uc6b4 Access Token\uacfc Refresh Token\uc744 \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0 \uc804\ub2ec\ud55c\ub2e4.<\/li>\n\n\n\n<li>\uc774\ubbf8 \ud3d0\uae30\ub41c \ud1a0\ud070\uc774 \uc7ac\uc0ac\uc6a9\ub418\uc5c8\ub2e4\uba74 \uc124\uc815\ub41c \ud0d0\uc9c0 \uc815\ucc45\uc744 \uc2e4\ud589\ud55c\ub2e4.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uacfc\uc815\uc5d0\uc11c \uae30\uc874 \ud1a0\ud070 \ud3d0\uae30\uc640 \uc0c8 \ud1a0\ud070 \uc800\uc7a5\uc774 \uc77c\uad00\ub418\uac8c \ucc98\ub9ac\ub418\uc5b4\uc57c \ud55c\ub2e4. \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud2b8\ub79c\uc7ad\uc158\uc774\ub098 \uc870\uac74\ubd80 \uc5c5\ub370\uc774\ud2b8\ub97c \uc0ac\uc6a9\ud574 \uc911\uac04 \uc2e4\ud328\uc640 \ub3d9\uc2dc \uc694\uccad \ubb38\uc81c\ub97c \ubc29\uc9c0\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0c8 \ud1a0\ud070 \ubc1c\uae09\uacfc \uc800\uc7a5\uc5d0 \uc2e4\ud328\ud588\uc744 \ub54c \uae30\uc874 \ud1a0\ud070\ub9cc \ud3d0\uae30\ub418\ub294 \uc0c1\ud669\ub3c4 \uace0\ub824\ud574\uc57c \ud55c\ub2e4. \ud2b8\ub79c\uc7ad\uc158\uc73c\ub85c \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ubcc0\uacbd\uc744 \ubb36\uac70\ub098, \uc2e4\ud328 \ubcf5\uad6c \uc815\ucc45\uc744 \uc124\uacc4\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\uc2e4\ubb34\uc5d0\uc11c \uace0\ub824\ud574\uc57c \ud560 \ucd94\uac00 \ubcf4\uc548 \uc0ac\ud56d<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Access Token\uacfc Refresh Token\uc758 \uc6a9\ub3c4 \ubd84\ub9ac<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token\uc740 API \uc811\uadfc\uc6a9\uc73c\ub85c, Refresh Token\uc740 \uac31\uc2e0\uc6a9\uc73c\ub85c\ub9cc \uc0ac\uc6a9\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070 \uc720\ud615\uacfc \uac80\uc99d \uaddc\uce59\uc744 \ubd84\ub9ac\ud558\uba74 Refresh Token\uc744 \uc77c\ubc18 API\uc5d0 \uc81c\ucd9c\ud558\uac70\ub098 \ub2e4\ub978 \uc6a9\ub3c4\uc758 \ud1a0\ud070\uc744 \uc798\ubabb \uc0ac\uc6a9\ud558\ub294 \ubb38\uc81c\ub97c \uc904\uc77c \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Refresh Token \ud574\uc2dc \uc800\uc7a5<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc11c\ubc84 \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0\ub294 Refresh Token \uc6d0\ubb38\uc744 \uadf8\ub300\ub85c \uc800\uc7a5\ud558\uae30\ubcf4\ub2e4 \ud574\uc2dc\uac12\uc744 \uc800\uc7a5\ud558\ub294 \ubc29\uc2dd\uc744 \uace0\ub824\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc720\ucd9c\ub418\ub354\ub77c\ub3c4 \uacf5\uaca9\uc790\uac00 \uc800\uc7a5\ub41c \uac12\ub9cc\uc73c\ub85c \uc6d0\ub798 \ud1a0\ud070\uc744 \ubc14\ub85c \uc0ac\uc6a9\ud558\ub294 \uc704\ud5d8\uc744 \uc904\uc77c \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ube44\ubc00\ud0a4 \uad00\ub9ac\uc640 \uad50\uccb4<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">JWT \uc11c\uba85 \ud0a4\uac00 \uc720\ucd9c\ub418\uba74 \uacf5\uaca9\uc790\uac00 \uc720\ud6a8\ud55c \ud1a0\ud070\uc744 \uc704\uc870\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub530\ub77c\uc11c \ube44\ubc00\ud0a4\ub97c \uc548\uc804\ud558\uac8c \ubcf4\uad00\ud558\uace0, \uc811\uadfc \uad8c\ud55c\uc744 \ucd5c\uc18c\ud654\ud558\uba70, \ud0a4 \uad50\uccb4 \uc808\ucc28\ub97c \ub9c8\ub828\ud574\uc57c \ud55c\ub2e4. \ube44\ub300\uce6d \ud0a4\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0\uc5d0\ub294 \uc11c\uba85\uc6a9 \uac1c\uc778\ud0a4\uc640 \uac80\uc99d\uc6a9 \uacf5\uac1c\ud0a4\ub97c \ubd84\ub9ac\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">HTTPS \uc801\uc6a9<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070\uc740 \ub124\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574 \uc804\ub2ec\ub418\ub294 \uc778\uc99d \uc815\ubcf4\ub2e4. HTTPS\ub97c \uc801\uc6a9\ud558\uc9c0 \uc54a\uc73c\uba74 \uc804\uc1a1 \uacfc\uc815\uc5d0\uc11c \ud1a0\ud070\uc774 \ub178\ucd9c\ub420 \uc704\ud5d8\uc774 \uc788\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ub85c\uadf8\uc5d0\uc11c \ud1a0\ud070 \uc81c\uac70<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access Token, Refresh Token, \ucfe0\ud0a4 \uac12, <code>Authorization<\/code> \ud5e4\ub354\ub97c \ub85c\uadf8\uc5d0 \uadf8\ub300\ub85c \uae30\ub85d\ud574\uc11c\ub294 \uc548 \ub41c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc778\uc99d \ubb38\uc81c\ub97c \ucd94\uc801\ud574\uc57c \ud55c\ub2e4\uba74 \uc0ac\uc6a9\uc790 \uc2dd\ubcc4\uc790, \uc694\uccad ID, \uc138\uc158 \uc2dd\ubcc4\uc790, \uc2e4\ud328 \uc0ac\uc720 \ub4f1 \ubbfc\uac10\ud55c \uc778\uc99d \uc815\ubcf4\uac00 \uc544\ub2cc \ub370\uc774\ud130\ub97c \uc911\uc2ec\uc73c\ub85c \uae30\ub85d\ud558\ub294 \ud3b8\uc774 \uc88b\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ub85c\uadf8\uc544\uc6c3\uacfc \uacc4\uc815 \ubcf4\uc548 \uc774\ubca4\ud2b8<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ube44\ubc00\ubc88\ud638 \ubcc0\uacbd, \uacc4\uc815 \uc815\uc9c0, \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ub85c\uadf8\uc778, \uad00\ub9ac\uc790 \uad8c\ud55c \ubcc0\uacbd \ub4f1\uc758 \uc0c1\ud669\uc5d0\uc11c\ub294 \uad00\ub828 \uc138\uc158\uc774\ub098 \ud1a0\ud070\uc744 \ud3d0\uae30\ud558\ub294 \uc815\ucc45\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e8\uc21c\ud55c \ub85c\uadf8\uc544\uc6c3\uacfc \uacc4\uc815 \uc804\uccb4 \uc138\uc158 \uc885\ub8cc\ub294 \uad6c\ubd84\ud574\uc11c \uc124\uacc4\ud574\uc57c \ud55c\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>JWT\ub780 \ubb34\uc5c7\uc778\uac00? JWT(JSON Web Token)\ub294 \uc0ac\uc6a9\uc790\ub098 \uc2dc\uc2a4\ud15c\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c JSON \ud615\ud0dc\ub85c \ub2f4\uace0, \uc774\ub97c \uc548\uc804\ud558\uac8c \uc804\ub2ec\ud558\uae30 \uc704\ud55c \ud1a0\ud070 \ud45c\uc900\uc774\ub2e4. \uc77c\ubc18\uc801\uc73c\ub85c \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \uac8c\uc784 \uc11c\ubc84\uc758 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc0ac\uc6a9\ud55c\ub2e4. JWT\ub97c \uc0ac\uc6a9\ud558\uba74 \uc11c\ubc84\uac00 \ubcc4\ub3c4\uc758 \uc138\uc158 \uc800\uc7a5\uc18c\ub97c \uc870\ud68c\ud558\uc9c0 \uc54a\uace0\ub3c4 \ud1a0\ud070\uc758 \uc11c\uba85\uacfc \ud074\ub808\uc784\uc744 \uac80\uc99d\ud558\uc5ec \uc694\uccad\uc758 \uc720\ud6a8\uc131\uc744 \ud310\ub2e8\ud560 \uc218 \uc788\ub2e4. \ub2e4\ub9cc JWT \uc790\uccb4\uac00 \uc0ac\uc6a9\uc790\ub97c \uc778\uc99d\ud558\uac70\ub098 \uad8c\ud55c\uc744 \ubd80\uc5ec\ud558\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \uc11c\ubc84\uac00 \ud1a0\ud070\uc744 \ubc1c\uae09\ud558\uace0, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2661","post","type-post","status-publish","format-standard","hentry","category-dev-logs"],"_links":{"self":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2661","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2661"}],"version-history":[{"count":1,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2661\/revisions"}],"predecessor-version":[{"id":2662,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2661\/revisions\/2662"}],"wp:attachment":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}