SSO 연동 가이드

import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import java.util.Date;
import java.util.UUID;

String jwt = Jwts.builder()
    .setSubject("user_123")                          // 파트너 서비스 사용자 고유 ID
    .claim("email", "user@example.com")
    .claim("name", "홍길동")
    .setId(UUID.randomUUID().toString())             // jti: 매 요청마다 새 UUID 필수
    .setExpiration(new Date(System.currentTimeMillis() + 5 * 60 * 1000))  // 5분
    .signWith(SignatureAlgorithm.HS256, sharedSecret.getBytes())
    .compact();

const jwt = require('jsonwebtoken');
const { v4: uuidv4 } = require('uuid');

const token = jwt.sign(
    {
        sub: 'user_123',           // 파트너 서비스 사용자 고유 ID
        email: 'user@example.com',
        name: '홍길동',
        jti: uuidv4(),             // 매 요청마다 새 UUID 필수
    },
    sharedSecret,
    { algorithm: 'HS256', expiresIn: '5m' }
);

GET https://console.fingerpush.link/sso/callback?token={JWT}&client_id={client_id}

// JWT 생성 후 SSO 엔드포인트로 리다이렉트
String redirectUrl = "https://console.fingerpush.link/sso/callback"
    + "?token=" + URLEncoder.encode(token, "UTF-8")
    + "&client_id=" + URLEncoder.encode(clientId, "UTF-8");
response.sendRedirect(redirectUrl);

// 세션에서 API 키 조회
String apiKey = (String) session.getAttribute("FPLINK_API_KEY");
if (apiKey == null || apiKey.isBlank()) {
    response.setStatus(401);
    out.print("{\"code\":\"NOT_CONNECTED\",\"error\":\"연동이 필요합니다.\"}");
    return;
}

// 파트너 서버 → Service API 호출
// POST /api/v1/service/urls
conn.setRequestProperty("X-API-KEY", apiKey);
conn.setRequestProperty("Content-Type", "application/json; charset=UTF-8");
String jsonBody = "{\"url\":\"" + escapedUrl + "\"}";
// 응답의 shortUrl/shortCode를 그대로 프론트에 전달

// 브라우저는 파트너 서버만 호출 (API 키 미노출)
const formData = new URLSearchParams();
formData.append('originalUrl', originalUrl);

const res = await fetch('/samples/sso/fingerpush-shorturl-sample.jsp', {
  method: 'POST',
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
  body: formData.toString()
});
const data = await res.json();

// 세션 API 키로 캠페인 생성
String apiKey = (String) session.getAttribute("FPLINK_API_KEY");
if (apiKey == null || apiKey.isBlank()) {
    response.setStatus(401);
    out.print("{\"code\":\"NOT_CONNECTED\"}");
    return;
}

// POST /api/v1/service/campaigns
conn.setRequestProperty("X-API-KEY", apiKey);
String body = "{" +
    "\"name\":\"" + escapedName + "\"," +
    "\"originalUrl\":\"" + escapedUrl + "\"," +
    "\"utmSource\":\"fingerpush\"," +
    "\"utmMedium\":\"push\"" +
"}";
// alias/id를 프론트에 전달해 /c/{alias} URL 표시

const formData = new URLSearchParams();
formData.append('action', 'campaign');
formData.append('campaignName', campaignName);
formData.append('campaignUrl', campaignUrl);
formData.append('utmSource', 'fingerpush');
formData.append('utmMedium', 'push');

const res = await fetch('/samples/sso/fingerpush-shorturl-sample.jsp', {
  method: 'POST',
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
  body: formData.toString()
});
const data = await res.json();

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8" import="javax.crypto.Mac,javax.crypto.spec.SecretKeySpec,java.util.Base64,java.nio.charset.StandardCharsets,java.time.Instant,java.util.UUID" %>
<%
String fpUserId = "user_123";
String userEmail = "user@example.com";
String userName = "홍길동";
String clientId = "fingerpush_dev";
String sharedSecret = System.getenv("FPLINK_SHARED_SECRET");

if (sharedSecret == null || sharedSecret.isBlank()) {
    response.sendError(500, "sharedSecret 누락");
    return;
}

long now = Instant.now().getEpochSecond();
long exp = now + 300;
String jti = UUID.randomUUID().toString();

String header = Base64.getUrlEncoder().withoutPadding()
    .encodeToString("{\"alg\":\"HS256\",\"typ\":\"JWT\"}".getBytes(StandardCharsets.UTF_8));

String payloadJson = "{"
    + "\"jti\":\"" + jti + "\"," 
    + "\"sub\":\"" + fpUserId + "\"," 
    + "\"email\":\"" + userEmail + "\"," 
    + "\"name\":\"" + userName + "\"," 
    + "\"client_id\":\"" + clientId + "\"," 
    + "\"iat\":" + now + ","
    + "\"exp\":" + exp
    + "}";

String payload = Base64.getUrlEncoder().withoutPadding()
    .encodeToString(payloadJson.getBytes(StandardCharsets.UTF_8));

String signingInput = header + "." + payload;
Mac mac = Mac.getInstance("HmacSHA256");
mac.init(new SecretKeySpec(sharedSecret.getBytes(StandardCharsets.UTF_8), "HmacSHA256"));
String signature = Base64.getUrlEncoder().withoutPadding()
    .encodeToString(mac.doFinal(signingInput.getBytes(StandardCharsets.UTF_8)));

String token = signingInput + "." + signature;
String consoleUrl = "https://fpl-stage-console.kissoft.biz";
String redirectUrl = consoleUrl + "/sso/callback?token="
    + java.net.URLEncoder.encode(token, "UTF-8")
    + "&client_id=" + java.net.URLEncoder.encode(clientId, "UTF-8");

response.sendRedirect(redirectUrl);
%>

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8" %>
<%
String redirectUri = request.getParameter("redirect_uri");
String clientId = request.getParameter("client_id");

if (redirectUri == null || redirectUri.isBlank()) {
    response.sendError(400, "redirect_uri 필요");
    return;
}
if (clientId == null || !clientId.matches("[a-zA-Z0-9_]{1,50}")) {
    response.sendError(400, "client_id 형식 오류");
    return;
}

String host = new java.net.URL(redirectUri).getHost();
if (!host.equals("console.fingerpush.link")
        && !host.equals("fpl-stage-console.kissoft.biz")
        && !host.equals("fpl.fingerpush.link")) {
    response.sendError(403, "허용되지 않은 redirect_uri");
    return;
}

session.setAttribute("SSO_REDIRECT_URI", redirectUri);
session.setAttribute("SSO_CLIENT_ID", clientId);

Object loggedInUser = session.getAttribute("LOGIN_MEMBER");
if (loggedInUser != null) {
    request.getRequestDispatcher("/sso/redirect.jsp").forward(request, response);
    return;
}

response.sendRedirect(request.getContextPath() + "/memberNew.jsp?mode=login");
%>

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8" %>
<%
String ssoRedirectUri = (String) session.getAttribute("SSO_REDIRECT_URI");
if (ssoRedirectUri != null && !ssoRedirectUri.isEmpty()) {
    session.removeAttribute("SSO_REDIRECT_URI");
    session.removeAttribute("SSO_CLIENT_ID");
    request.getRequestDispatcher("/sso/redirect.jsp").forward(request, response);
    return;
}
// SSO 요청이 아니면 기존 로그인 완료 흐름 유지
// response.sendRedirect("/index.jsp");
%>

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8" import="java.net.*,java.io.*,java.nio.charset.StandardCharsets" %>
<%
if ("POST".equalsIgnoreCase(request.getMethod())) {
    response.setContentType("application/json; charset=UTF-8");
    String action = request.getParameter("action");

    if ("saveApiKey".equals(action)) {
        String apiKey = request.getParameter("apiKey");
        if (apiKey == null || apiKey.isBlank()) { response.setStatus(400); out.print("{\"error\":\"API 키 누락\"}"); return; }
        session.setAttribute("FPLINK_API_KEY", apiKey.trim());
        out.print("{\"success\":true}");
        return;
    }

    String apiKey = (String) session.getAttribute("FPLINK_API_KEY");
    if (apiKey == null || apiKey.isBlank()) { response.setStatus(401); out.print("{\"code\":\"NOT_CONNECTED\"}"); return; }

    String apiBase = "https://fpl-stage-console.kissoft.biz";
    String apiPath = "campaign".equals(action) ? "/api/v1/service/campaigns" : "/api/v1/service/urls";
    String body = "campaign".equals(action)
        ? ("{\"name\":\"" + request.getParameter("campaignName") + "\",\"originalUrl\":\"" + request.getParameter("campaignUrl") + "\"}")
        : ("{\"url\":\"" + request.getParameter("originalUrl") + "\"}");

    HttpURLConnection conn = (HttpURLConnection) new URL(apiBase + apiPath).openConnection();
    conn.setRequestMethod("POST");
    conn.setRequestProperty("Content-Type", "application/json; charset=UTF-8");
    conn.setRequestProperty("X-API-KEY", apiKey);
    conn.setDoOutput(true);
    try (OutputStream os = conn.getOutputStream()) { os.write(body.getBytes(StandardCharsets.UTF_8)); }

    InputStream is = conn.getResponseCode() >= 400 ? conn.getErrorStream() : conn.getInputStream();
    StringBuilder sb = new StringBuilder();
    if (is != null) {
        try (BufferedReader br = new BufferedReader(new InputStreamReader(is, StandardCharsets.UTF_8))) {
            String line; while ((line = br.readLine()) != null) sb.append(line);
        }
    }
    response.setStatus(conn.getResponseCode());
    out.print(sb.toString());
    return;
}
%>
<!doctype html>
<html lang="ko"><body>
  <h3>SSO + API키 기반 URL/Campaign 샘플</h3>
  <input id="apiKey" placeholder="동의 후 받은 API 키" />
  <button onclick="saveApiKey()">API 키 저장</button>
  <hr/>
  <input id="url" placeholder="https://example.com" />
  <button onclick="shorten()">URL 단축</button>
  <hr/>
  <input id="campName" placeholder="캠페인명" />
  <input id="campUrl" placeholder="캠페인 URL" />
  <button onclick="campaign()">Campaign 생성</button>
  <pre id="out"></pre>
  <script>
    async function saveApiKey(){
      const fd = new URLSearchParams();
      fd.append('action','saveApiKey');
      fd.append('apiKey', document.getElementById('apiKey').value);
      const r = await fetch(location.pathname,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:fd.toString()});
      document.getElementById('out').textContent = await r.text();
    }
    async function shorten(){
      const fd = new URLSearchParams();
      fd.append('originalUrl', document.getElementById('url').value);
      const r = await fetch(location.pathname,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:fd.toString()});
      document.getElementById('out').textContent = await r.text();
    }
    async function campaign(){
      const fd = new URLSearchParams();
      fd.append('action','campaign');
      fd.append('campaignName', document.getElementById('campName').value);
      fd.append('campaignUrl', document.getElementById('campUrl').value);
      const r = await fetch(location.pathname,{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:fd.toString()});
      document.getElementById('out').textContent = await r.text();
    }
  </script>
</body></html>