From c3a06af069cad24e912fd519c975735fddc83514 Mon Sep 17 00:00:00 2001
From: Haemin Kim <haemin1230@gmail.com>
Date: Sun, 19 Oct 2025 17:29:28 +0900
Subject: [PATCH] =?UTF-8?q?:recycle:=20(#352)=20=ED=85=8C=EC=8A=A4?=
 =?UTF-8?q?=ED=8A=B8=EC=9A=A9=20=EC=BF=A0=ED=82=A4=20=EC=84=A4=EC=A0=95=20?=
 =?UTF-8?q?=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../backend/domain/user/service/AuthServiceImpl.java | 12 ++++++++++--
 .../backend/global/security/filter/LoginFilter.java  |  6 +++++-
 2 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/backend/src/main/java/org/example/backend/domain/user/service/AuthServiceImpl.java b/backend/src/main/java/org/example/backend/domain/user/service/AuthServiceImpl.java
index d6c9d041..4f450f18 100644
--- a/backend/src/main/java/org/example/backend/domain/user/service/AuthServiceImpl.java
+++ b/backend/src/main/java/org/example/backend/domain/user/service/AuthServiceImpl.java
@@ -181,8 +181,12 @@ private LoginResponseDTO.KakaoLoginResponse kakaoUserLogin(HashMap<String, Objec
         response.addHeader("Authorization","Bearer "+accessToken);
 
         // refresh token 응답 Header
+//        response.addHeader("Set-Cookie","refresh_token="+refreshToken+
+//                "; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
+
+        // 테스트용 쿠키 설정
         response.addHeader("Set-Cookie","refresh_token="+refreshToken+
-                "; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
+                "; HttpOnly; SameSite=Lax; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
 
         // role 기반으로 온보딩 여부 판단
         boolean onboardingRequired = user.getRole() == Role.UNKNOWN;
@@ -218,7 +222,11 @@ public void kakaoOnboarding(OnboardingRequestDTO dto, HttpServletResponse respon
         response.addHeader("Authorization","Bearer "+accessToken);
 
         // refresh token 응답 Header
+//        response.addHeader("Set-Cookie","refresh_token="+refreshToken+
+//                "; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
+
+        // 테스트용 쿠키 설정
         response.addHeader("Set-Cookie","refresh_token="+refreshToken+
-                "; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
+                "; HttpOnly; SameSite=Lax; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
     }
 }
diff --git a/backend/src/main/java/org/example/backend/global/security/filter/LoginFilter.java b/backend/src/main/java/org/example/backend/global/security/filter/LoginFilter.java
index bb74e680..25c16aef 100644
--- a/backend/src/main/java/org/example/backend/global/security/filter/LoginFilter.java
+++ b/backend/src/main/java/org/example/backend/global/security/filter/LoginFilter.java
@@ -96,8 +96,12 @@ protected void successfulAuthentication(HttpServletRequest request, HttpServletR
         response.addHeader("Authorization","Bearer "+accessToken);
 
         // refresh token 응답 Header
+//        response.addHeader("Set-Cookie","refresh_token="+refreshToken+
+//                "; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
+
+        // 테스트용 쿠키 설정
         response.addHeader("Set-Cookie","refresh_token="+refreshToken+
-                "; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
+                "; HttpOnly; SameSite=Lax; Path=/; Max-Age=" + (14 * 24 * 60 * 60));
 
         // 응답 body
         response.setStatus(HttpServletResponse.SC_OK);