public enum RoleType
{
	USER,
	OAUTH
}

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter
{
	@Autowired
	ApplicationContext context;

	@Override
	public void configure(WebSecurity web) throws Exception
	{
		// 메인페이지 : css나 js 같은것들도 여기에 포함시켜준다.
		// web.ignoring().antMatchers("/**");
	}

	@Override
	protected void configure(HttpSecurity http) throws Exception
	{
		http
			// 강의 특성상 전부 허용으로 작업하겠습니다.
			.authorizeRequests()
				.antMatchers("/**")
				.permitAll()
		.and()
			.logout()
				.logoutUrl("/sign-out")
				.logoutSuccessUrl("/")
				.invalidateHttpSession(true)
		.and()
			.formLogin()
				.loginPage("/sign-in")
				.loginProcessingUrl("/sign-in/auth")
				.failureUrl("/sign-in?error=exception")
				.defaultSuccessUrl("/")

		.and()
			// 여기 나오는 sso.filter 빈은 다음장에서 작성합니다.
			// 이 장에서 실행을 확인하시려면 당연히 NPE 오류가 나니 아래 소스에 주석을 걸어주시기 바랍니다.
			.addFilterBefore((Filter)context.getBean("sso.filter"), BasicAuthenticationFilter.class);
	}
}

@Entity(name="account")
@Table(name="account")
@EntityListeners(ColumnSaveOptionListener.class)
@Data @Getter @Setter @ToString
public class Account
{
	@Id
	@Column(name="sn", nullable=false, unique=true)
	@SequenceGenerator(name="account_sn_seq", sequenceName="account_sn_seq", allocationSize=1)
	@GeneratedValue(strategy=GenerationType.SEQUENCE, generator="account_sn_seq")
	long sn;

	@Column(name="mail", nullable=false, length=64, unique=true)
	String mail;

	@Column(name="auth", nullable=false, length=128)
	String auth;

	// 컬럼 생략...

	@OneToMany(mappedBy="sn", fetch = FetchType.LAZY)
	List<AccountRole> roles;
}

@Entity(name="account_role")
@Table
(
	name="account_role",
	uniqueConstraints=@UniqueConstraint(columnNames={"sn", "role"})
)
@Data @Getter @Setter @ToString
public class AccountRole
{
	@Id
	@Column(name="sn", nullable=false)
	long sn;

	@Column(name="role", nullable=false, length=64)
	String role;

	@Column(name="role_date")
	Date roleDate;
}

@Entity(name="account_oauth_client")
@Table
(
	name="account_oauth_client",
	uniqueConstraints=@UniqueConstraint(columnNames={"sn", "type"})
)
@Data @Getter @Setter @ToString
public class AccountOauthClient
{
	@Id
	@Column(name="sn", nullable=false)
	long sn;

	@Column(name="type", nullable=false, length=12)
	String type;

	@Column(name="id", nullable=false, length=64)
	String id;
}

public interface AccountRepository extends JpaRepository<Account, Long>
{
	@Query("SELECT a FROM account a LEFT JOIN FETCH a.roles b WHERE a.mail = lower(:mail)")
	public Account findByMail(@Param("mail") String mail);

	@Query("SELECT a FROM account a LEFT JOIN FETCH a.roles b WHERE a.sn = (SELECT sn FROM account_oauth_client WHERE type = :type AND id = :id)")
	public Account findByOAuthId(@Param("type") String type, @Param("id") String id);
}

@Component
public class AccountService
{
	@Autowired
	AccountRepository accountRepository;

	public List<Account> findAll()
	{
		return accountRepository.findAll();
	}

	public Account getAccountByMail(String mail)
	{
		return accountRepository.findByMail(mail);
	}

	public Account getAccountByOAuthId(String type, String id)
	{
		return accountRepository.findByOAuthId(type, id);
	}
}

@Configuration
public class AuthenticationConfig extends GlobalAuthenticationConfigurerAdapter
{
	@Autowired
	UserDetailsService userDetailsService;

	@Override
	public void init(AuthenticationManagerBuilder auth) throws Exception
	{
		auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
	}

	@Bean
	PasswordEncoder passwordEncoder()
	{
		// 예제입니다.
		// 본인이 사용하는 패스워드 인코더를 쓰시면됩니다.
		return new SaroPasswordEncoder();
	}
}

@Data
@EqualsAndHashCode(callSuper=false)
public class UserDetails extends User
{
	private static final long serialVersionUID = 1L;

	@Getter
	private long sn;

	public UserDetails(Account account)
	{
		super
		(
			account.getMail(),
			account.getAuth(),
			getAuthorities(account.getRoles())
		);

		sn = account.getSn();
	}

	// 이 부분은 나중에 OAuth에서도 쓰이는 부분입니다.!!
	// 기본적으로 USER : RoleType.USER.toString() 를 주고 계정에 추가 권한을 줍니다.
	public static List<GrantedAuthority> getAuthorities(List<AccountRole> roles)
	{
		List<GrantedAuthority> list = new ArrayList<>(1);

		list.add(new SimpleGrantedAuthority(RoleType.USER.toString()));

		if (roles != null)
		{
			roles.stream().forEach((AccountRole role) ->
			{
				list.add(new SimpleGrantedAuthority(role.getRole()));
			});
		}

		return list;
	}
}

@Service
public class UserDetailsService implements org.springframework.security.core.userdetails.UserDetailsService
{
	@Autowired
	AccountService accountService;

	@Override
	public UserDetails loadUserByUsername(String ac) throws UsernameNotFoundException
	{
		Account account = accountService.getAccountByMail(ac);

		if (account == null)
		{
			throw new UsernameNotFoundException("sign-in fail");
		}

		return new UserDetails(account);
	}
}