feat: 로그아웃 기능 구현

backend/src/main/java/com/ody/auth/controller/AuthController.java

@@ -37,8 +37,8 @@ public ResponseEntity<AuthResponse> refreshAccessToken(@RequestHeader(HttpHeader
 
     @Override
     @PostMapping("/v1/auth/logout")
-    public ResponseEntity<Void> logout(@RequestHeader(HttpHeaders.AUTHORIZATION) String authorization) {
-        authService.logout(authorization);
+    public ResponseEntity<Void> logout(@RequestHeader(HttpHeaders.AUTHORIZATION) String rawAccessTokenValue) {
+        authService.logout(rawAccessTokenValue);
         return ResponseEntity.ok().build();
     }
 }

backend/src/main/java/com/ody/auth/service/AuthService.java

@@ -48,7 +48,7 @@ public AuthResponse renewTokens(String rawAuthorizationHeader) {
 
         jwtTokenProvider.validate(refreshToken);
         long memberId = jwtTokenProvider.parseAccessToken(accessToken);
-        checkSameMemberToken(memberId, refreshToken);
+        checkAlreadyLogout(memberId);
         return issueNewTokens(memberId);
     }
 
@@ -60,30 +60,19 @@ private AuthResponse issueNewTokens(long memberId) {
     }
 
     @Transactional
-    public void logout(String rawAuthorizationHeader) {
-        AuthorizationHeader authorizationHeader = new AuthorizationHeader(rawAuthorizationHeader);
-        AccessToken accessToken = authorizationHeader.getAccessToken();
-        RefreshToken refreshToken = authorizationHeader.getRefreshToken();
-
-        checkTokenExpiration(accessToken, refreshToken);
+    public void logout(String rawAccessTokenValue) {
+        AccessToken accessToken = new AccessToken(rawAccessTokenValue);
+        jwtTokenProvider.validate(accessToken);
 
         long memberId = jwtTokenProvider.parseAccessToken(accessToken);
-        checkSameMemberToken(memberId, refreshToken);
+        checkAlreadyLogout(memberId);
         memberService.updateRefreshToken(memberId, null);
     }
 
-    private void checkTokenExpiration(AccessToken accessToken, RefreshToken refreshToken) {
-        try {
-            jwtTokenProvider.validate(accessToken);
-            jwtTokenProvider.validate(refreshToken);
-        } catch (OdyUnauthorizedException exception) {
-            throw new OdyBadRequestException(exception.getMessage());
-        }
-    }
-
-    private void checkSameMemberToken(long memberId, RefreshToken refreshToken) {
-        if (!memberService.isMemberRefreshToken(memberId, refreshToken)) {
-            throw new OdyBadRequestException("리프레시 토큰 정보가 일치하지 않습니다");
+    private void checkAlreadyLogout(long memberId) {
+        Member member = memberService.findById(memberId);
+        if(member.isLogout()){
+            throw new OdyBadRequestException("이미 회원이 로그아웃 상태입니다.");
         }
     }
 }

backend/src/main/java/com/ody/member/domain/Member.java

@@ -74,6 +74,10 @@ public String getProviderId() {
         return authProvider.getProviderId();
     }
 
+    public boolean isLogout() {
+        return refreshToken == null;
+    }
+
     public boolean isSame(RefreshToken otherRefreshToken) {
         return this.refreshToken.equals(otherRefreshToken);
     }

backend/src/test/java/com/ody/auth/service/AuthServiceTest.java

@@ -25,13 +25,13 @@ class AuthServiceTest extends BaseServiceTest {
     @Autowired
     private MemberRepository memberRepository;
 
-    @DisplayName("로그 아웃 테스트")
+    @DisplayName("로그아웃 테스트")
     @Nested
     class LogOutTest {
 
-        @DisplayName("성공 : 유효한 액세스 토큰 + 유효한 리프레시 토큰")
+        @DisplayName("성공 : 유효한 액세스 토큰")
         @Test
-        void logOutSuccess() {
+        void logoutSuccess() {
             RefreshToken validRefreshToken = TokenFixture.getValidRefreshToken();
             Member member = createMemberByRefreshToken(validRefreshToken);
             AccessToken validAccessToken = TokenFixture.getValidAccessToken(member.getId());
@@ -42,39 +42,27 @@ void logOutSuccess() {
                     .doesNotThrowAnyException();
         }
 
-        @DisplayName("실패 : 만료된 액세스 토큰으로 로그아웃 시도 시 400을 반환한다")
+        @DisplayName("실패 : 만료된 액세스 토큰으로 로그아웃 시도 시 401을 반환한다")
         @Test
-        void logOutFail_When_ExpiredAccessToken() {
+        void logoutFailWhenExpiredAccessToken() {
             RefreshToken validRefreshToken = TokenFixture.getValidRefreshToken();
             Member member = createMemberByRefreshToken(validRefreshToken);
             AccessToken expiredAccessToken = TokenFixture.getExpiredAccessToken(member.getId());
             String authorizationHeader = resolveAuthorizationHeader(expiredAccessToken, validRefreshToken);
 
             assertThatThrownBy(() -> authService.logout(authorizationHeader))
-                    .isInstanceOf(OdyBadRequestException.class);
-        }
-
-        @DisplayName("실패 : 만료된 리프레시 토큰으로 로그아웃 시도 시 400을 반환한다")
-        @Test
-        void logOutFail_When_ExpiredRefreshToken() {
-            RefreshToken expiredRefreshToken = TokenFixture.getExpiredRefreshToken();
-            Member member = createMemberByRefreshToken(expiredRefreshToken);
-            AccessToken validAccessToken = TokenFixture.getValidAccessToken(member.getId());
-            String authorizationHeader = resolveAuthorizationHeader(validAccessToken, expiredRefreshToken);
-
-            assertThatThrownBy(() -> authService.logout(authorizationHeader))
-                    .isInstanceOf(OdyBadRequestException.class);
+                    .isInstanceOf(OdyUnauthorizedException.class);
         }
 
-        @DisplayName("실패 : 액세스 토큰 파싱 멤버와 리프레시 토큰 정보가 일치하지 않으면 401을 반환한다")
+        @DisplayName("실패 : 이미 로그아웃한 유저 엑세스 토큰으로 로그아웃 시도 시 400을 반환한다")
         @Test
-        void logOutFail_When_NotSameMemberToken() {
-            RefreshToken validRefreshToken = TokenFixture.getRefreshToken(TokenFixture.authPropertiesForValidToken);
+        void logoutFailWhenTryAlreadyLogoutMember() {
+            RefreshToken validRefreshToken = TokenFixture.getValidRefreshToken();
             Member member = createMemberByRefreshToken(validRefreshToken);
             AccessToken validAccessToken = TokenFixture.getValidAccessToken(member.getId());
+            String authorizationHeader = resolveAuthorizationHeader(validAccessToken, validRefreshToken);
 
-            RefreshToken otherRefreshToken = TokenFixture.getRefreshToken(TokenFixture.authPropertiesForValidToken2);
-            String authorizationHeader = resolveAuthorizationHeader(validAccessToken, otherRefreshToken);
+            member.updateRefreshToken(null);
 
             assertThatThrownBy(() -> authService.logout(authorizationHeader))
                     .isInstanceOf(OdyBadRequestException.class);