[BUG] 프론트 연동 오류

Author: chanwonlee

src/main/java/com/sudo/railo/auth/util/CookieManager.java

@@ -1,32 +1,31 @@
 package com.sudo.railo.auth.util;
 
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
 
-import jakarta.servlet.http.Cookie;
 import jakarta.servlet.http.HttpServletResponse;
 
 @Component
 public class CookieManager {
 
 	private static final String COOKIE_PATH = "/";
 
+	@Value("${cookie.domain}")
+	private String cookieDomain;
+
 	public void setCookie(HttpServletResponse response, String name, String value, int maxAge) {
-		Cookie cookie = createCookie(name, value, maxAge);
-		response.addCookie(cookie);
+		String cookieHeader = String.format(
+			"%s=%s; Max-Age=%d; Path=%s; Domain=%s; Secure; HttpOnly; SameSite=None",
+			name, value, maxAge, COOKIE_PATH, cookieDomain
+		);
+		response.setHeader("Set-Cookie", cookieHeader); // 중복 방지: addHeader → setHeader
 	}
 
 	public void removeCookie(HttpServletResponse response, String name) {
-		Cookie cookie = createCookie(name, null, 0);
-		response.addCookie(cookie);
-	}
-
-	private Cookie createCookie(String name, String value, int maxAge) {
-		Cookie cookie = new Cookie(name, value);
-		cookie.setMaxAge(maxAge);
-		cookie.setSecure(true);
-		cookie.setHttpOnly(true);
-		cookie.setPath(COOKIE_PATH);
-
-		return cookie;
+		String cookieHeader = String.format(
+			"%s=; Max-Age=0; Path=%s; Domain=%s; Secure; HttpOnly; SameSite=None",
+			name, COOKIE_PATH, cookieDomain
+		);
+		response.setHeader("Set-Cookie", cookieHeader); // 중복 방지
 	}
 }

src/main/resources/application-dev.yml

@@ -70,6 +70,9 @@ cors:
 jwt:
   secret: ${JWT_KEY}
 
+cookie:
+  domain: localhost
+
 booking:
   expiration:
     reservation: 10

src/main/resources/application-prod.yml

@@ -63,13 +63,16 @@ train:
     ratio: 0.15
 
 cors:
-  allowed-origins: http://localhost:3000, https://www.raillo.shop
+  allowed-origins: https://www.raillo.shop
   allowed-methods: GET, POST, PUT, DELETE
   allowed-headers: Access-Control-Allow-Origin, Content-type, Access-Control-Allow-Headers, Authorization, X-Requested-With
 
 jwt:
   secret: ${JWT_KEY}
 
+cookie:
+  domain: .raillo.shop
+
 booking:
   expiration:
     reservation: 10

src/test/resources/application-test.yml

@@ -55,3 +55,6 @@ cors:
 booking:
   expiration:
     reservation: 1
+
+cookie:
+  domain: .test