🚑 fix: Change env settings to Jasypt encryption

- 환경변수 항목 Jasypt 암호화 방식으로 수정 - 노출된 보안요소 변경 Related: #14
local-mood · Dec 20, 2023 · f5195f3 · f5195f3
1 parent 908515e
commit f5195f3
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 12 deletions.
diff --git a/src/main/java/com/ceos/vote/auth/jwt/provider/JwtTokenProvider.java b/src/main/java/com/ceos/vote/auth/jwt/provider/JwtTokenProvider.java
@@ -21,7 +21,6 @@
 @Component
 @Transactional(readOnly = true)
 @Slf4j
-@PropertySource("classpath:application.yml")
 public class JwtTokenProvider {
 
     private static final String AUTHORITIES_KEY = "role";

diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
@@ -3,23 +3,17 @@ spring:
   profiles:
     include: secret
 
-  jwt:
-    token:
-      secret: ${jwt.token.secret}
-      access-token-validity-in-seconds: ${jwt.token.access-token-validity-in-seconds}
-      refresh-token-validity-in-seconds: ${jwt.token.refresh-token-validity-in-seconds}
-
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
-    url: ${db.url}
-    username: ${db.username}
-    password: ${db.password}
+    url: ENC(aaX0j72mYzWkdVKfmPSv5K3RI0oVxwToz7mqL8Y8Dv2+8iqO7YaSFVvIl+fuaZKYbxN7wd6zBE0XvbXa8fSBmufq2aRVHVRX+Y71TnkCeOY81CyS1cZX4g==)
+    username: ENC(qOgX3PNBqpY45OYhqZFcoQ==)
+    password: ENC(Zg96EiJQDju2pWAq/nC5vwapLPZL4WLQ)
 
   data:
     redis:
-      host: ${redis.host}
+      host: ENC(EIZI2FGl7luftV7JAzeyjQ==)
       port: 6379
-      password: root1234
+      password: ENC(bSF1EdS4uTZc49wWhYhICDcugXrrIhgV)
 
   jpa:
     database: mysql