refactor: move buildable .NET source into src/, update CI/doc paths

Groups the repo root into src (buildable source), docs (already existed), and everything else (db/, scripts/, tests/, deploy/ - deployment/ops/test assets that aren't compiled, already organized as their own folders). CI now only needs src/ to build: dotnet restore/build/test/publish all point at src/TaxBaik.sln, src/TaxBaik.Web/, src/TaxBaik.Proxy/. - git mv every project (Domain, Infrastructure, Application, Application.Tests, Web, Web.Client, Proxy) and TaxBaik.sln into src/ as a unit, so relative ProjectReference/.sln paths stay valid unchanged. - .gitea/workflows/deploy.yml: 6 dotnet restore/clean/build/test/publish invocations now point at src/. db/migrations and scripts/ stay at root (deploy_gb.sh and browser-e2e.yml only touch published output and the deployed URL, not source paths - verified, no changes needed there). - scripts/validate_admin_render.sh: admin render-mode file paths now src/TaxBaik.Web.Client/... - scripts/validate_kst_timestamps.sh: dropped deploy.sh from its target list - that script was removed in the prior cleanup commit (dead, no CI workflow referenced it) but this validator still expected it to exist. - CLAUDE.md, docs/ENGINEERING_HARNESS.md, docs/ADMIN_PATTERN_CRITIQUE_WBS.md: updated project-structure diagram, dotnet run/build commands, and grep targets to the new src/ paths (also fixed a pre-existing stale path in ADMIN_PATTERN_CRITIQUE_WBS.md that still said TaxBaik.Web/Components/Admin from before that ever moved to TaxBaik.Web.Client). - Added a Repo Root harness rule + Architecture Guardrail entries: new files belong under src/docs/tests/scripts/db/deploy, not loose at root; temp work stays outside the repo (or under a gitignored .scratch/) and is never committed. Verified locally: dotnet build/test src/TaxBaik.sln (26/26 tests), and all three scripts/validate_*.sh pass against the new layout. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-03 10:37:37 +09:00
parent c00d002972
commit ea447495d3
277 changed files with 36 additions and 29 deletions
@@ -0,0 +1,106 @@
+namespace TaxBaik.Web.Services;
+
+using System.Net;
+using System.Text.Json;
+
+/// <summary>
+/// HTTP 요청 시 자동으로 access token을 추가하고,
+/// 401 응답을 받으면 refresh token으로 새 토큰을 획득한 후 재시도합니다.
+/// SOLID: Single Responsibility - 토큰 갱신 로직만 담당
+/// </summary>
+public class TokenRefreshHandler : DelegatingHandler
+{
+    private readonly IServiceProvider _serviceProvider;
+    private readonly ILogger<TokenRefreshHandler> _logger;
+
+    public TokenRefreshHandler(IServiceProvider serviceProvider, ILogger<TokenRefreshHandler> logger)
+    {
+        _serviceProvider = serviceProvider;
+        _logger = logger;
+    }
+
+    protected override async Task<HttpResponseMessage> SendAsync(
+        HttpRequestMessage request,
+        CancellationToken cancellationToken)
+    {
+        // 최신 Scoped ITokenStore 실시간 해석 (Scope Capture 차단 및 기존 Blazor 회로 수명 공유)
+        var tokenStore = Microsoft.Extensions.DependencyInjection.ServiceProviderServiceExtensions.GetRequiredService<ITokenStore>(_serviceProvider);
+
+        // 요청에 access token 추가
+        if (!string.IsNullOrEmpty(tokenStore.AccessToken))
+        {
+            request.Headers.Authorization = new("Bearer", tokenStore.AccessToken);
+        }
+
+        var response = await base.SendAsync(request, cancellationToken);
+
+        // 401 응답이면 토큰 갱신 시도
+        if (response.StatusCode == HttpStatusCode.Unauthorized)
+        {
+            if (!string.IsNullOrEmpty(tokenStore.RefreshToken))
+            {
+                var newTokenPair = await RefreshTokenAsync(tokenStore.RefreshToken, request, cancellationToken);
+                if (newTokenPair != null)
+                {
+                    // TokenStore에 토큰 저장
+                    tokenStore.AccessToken = newTokenPair.AccessToken;
+                    tokenStore.RefreshToken = newTokenPair.RefreshToken;
+                    tokenStore.TokenExpiryTicks = DateTime.UtcNow.AddSeconds(newTokenPair.ExpiresIn).Ticks;
+
+                    // 새 토큰으로 재요청
+                    request.Headers.Authorization = new("Bearer", newTokenPair.AccessToken);
+                    response = await base.SendAsync(request, cancellationToken);
+                }
+                else
+                {
+                    _logger.LogWarning("토큰 갱신 실패 - 로그아웃");
+                    tokenStore.Clear();
+                }
+            }
+        }
+
+        return response;
+    }
+
+    private async Task<WasmAuthTokenPair?> RefreshTokenAsync(string refreshToken, HttpRequestMessage originalRequest, CancellationToken ct)
+    {
+        try
+        {
+            // 원래 요청의 호스트 정보 추출
+            var authority = originalRequest.RequestUri?.Authority ?? "localhost:5001";
+            var scheme = originalRequest.RequestUri?.Scheme ?? "http";
+
+            using var httpClient = new HttpClient();
+            var refreshUri = new Uri($"{scheme}://{authority}/taxbaik/api/auth/refresh");
+            var json = JsonSerializer.Serialize(new { refreshToken });
+            var content = new StringContent(json, System.Text.Encoding.UTF8, "application/json");
+
+            var response = await httpClient.PostAsync(refreshUri, content, ct);
+            if (!response.IsSuccessStatusCode)
+            {
+                _logger.LogWarning($"Token refresh failed with status {response.StatusCode}");
+                return null;
+            }
+
+            var responseContent = await response.Content.ReadAsStringAsync(ct);
+            var result = JsonSerializer.Deserialize<AuthTokenResponse>(responseContent,
+                new JsonSerializerOptions { PropertyNameCaseInsensitive = true });
+
+            return result != null
+                ? new WasmAuthTokenPair(result.AccessToken, result.RefreshToken, result.ExpiresIn)
+                : null;
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "Exception during token refresh");
+            return null;
+        }
+    }
+}
+
+internal class AuthTokenResponse
+{
+    public string AccessToken { get; set; } = string.Empty;
+    public string RefreshToken { get; set; } = string.Empty;
+    public int ExpiresIn { get; set; }
+}