JWT 통합springboot token 인증 구현(코드 실습)

public static final long EXPIRATION_TIME = 3600_000; // 1 hour
public static final String SECRET = "secret";
public static final String TOKEN_PREFIX = "Bearer";
public static final String HEADER_STRING = "Authorization";
public static final String ROLE = "ROLE";

public static String getToken(String userRole) {
    HashMap map = new HashMap<>();
    map.put(ROLE, userRole);

    String jwt = Jwts.builder()
            .setClaims(map)  //playload  
            .setSubject("  ")   //   
            .setIssuer("jay")     //    
            .setIssuedAt(new Date()) //     
            .setExpiration(new Date(System.currentTimeMillis() + EXPIRATION_TIME)) //    
            .signWith(SignatureAlgorithm.HS512, SECRET) //  
            .compact();
    return TOKEN_PREFIX + " " + jwt;
}

public static HttpServletRequest validateTokenAndAddUserIdToHeader(HttpServletRequest request) {
    String token = request.getHeader(HEADER_STRING);
    if (token != null) {
        // parse the token.
        try {
            Map body = Jwts.parser()
                    .setSigningKey(SECRET)
                    .parseClaimsJws(token.replace(TOKEN_PREFIX, ""))
                    .getBody();
            return new CustomHttpServletRequest(request, body);
        } catch (Exception e) {
            logger.info(e.getMessage());
            throw new TokenValidationException(e.getMessage());
        }
    } else {
        throw new TokenValidationException("Missing token");
    }
}