fix: EgovLoginFailHandler 가 로그인 실패 URL 대신 접근거부 URL 로 보내는 문제 수정

Foundation/org.egovframe.rte.fdl.security/src/main/java/org/egovframe/rte/fdl/security/bean/EgovLoginFailHandler.java

@@ -51,12 +51,12 @@ public EgovLoginFailHandler(EgovSecurityConfig config) {
     @Override
     public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException exception) throws IOException, ServletException {
         if (ObjectUtils.isEmpty(config)) {
-            throw new NoSuchBeanDefinitionException("### EgovLoginFailHandler getAccessDeniedUrl not found.");
+            throw new NoSuchBeanDefinitionException("### EgovLoginFailHandler getLoginFailureUrl not found.");
         }
 
         String failureUrl;
-        if (StringUtils.hasText(config.getAccessDeniedUrl())) {
-            failureUrl = config.getAccessDeniedUrl();
+        if (StringUtils.hasText(config.getLoginFailureUrl())) {
+            failureUrl = config.getLoginFailureUrl();
         } else {
             failureUrl = DEFAULT_LOGIN_FAILURE_URL;
         }

Foundation/org.egovframe.rte.fdl.security/src/test/java/org/egovframe/rte/fdl/security/bean/EgovLoginFailHandlerTest.java

@@ -0,0 +1,44 @@
+package org.egovframe.rte.fdl.security.bean;
+
+import org.egovframe.rte.fdl.security.config.EgovSecurityConfig;
+import org.junit.jupiter.api.Test;
+import org.springframework.mock.web.MockHttpServletRequest;
+import org.springframework.mock.web.MockHttpServletResponse;
+import org.springframework.security.authentication.BadCredentialsException;
+
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+public class EgovLoginFailHandlerTest {
+
+    @Test
+    public void onAuthenticationFailure_usesLoginFailureUrl() throws Exception {
+        EgovSecurityConfig config = new EgovSecurityConfig();
+        config.setLoginFailureUrl("/uat/uia/loginFail.do");
+        // 접근거부 URL 은 로그인 실패와 다른 화면이다. 둘을 구분해 두고 어느 쪽으로 가는지 본다.
+        config.setAccessDeniedUrl("/system/accessDenied.do");
+
+        EgovLoginFailHandler handler = new EgovLoginFailHandler(config);
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        MockHttpServletResponse response = new MockHttpServletResponse();
+
+        handler.onAuthenticationFailure(request, response, new BadCredentialsException("bad"));
+
+        assertEquals("/uat/uia/loginFail.do", response.getForwardedUrl());
+    }
+
+    @Test
+    public void onAuthenticationFailure_fallsBackToDefaultUrl_whenLoginFailureUrlBlank() throws Exception {
+        EgovSecurityConfig config = new EgovSecurityConfig();
+        config.setLoginFailureUrl(" ");
+        config.setAccessDeniedUrl("/system/accessDenied.do");
+
+        EgovLoginFailHandler handler = new EgovLoginFailHandler(config);
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        MockHttpServletResponse response = new MockHttpServletResponse();
+
+        assertDoesNotThrow(() -> handler.onAuthenticationFailure(request, response, new BadCredentialsException("bad")));
+        assertEquals("/index.html", response.getForwardedUrl());
+    }
+
+}