feat: 회원가입시 이메일과 비밀번호 보안 개선

backend/package.json

@@ -71,6 +71,7 @@
     "tsconfig-paths": "^4.1.1",
     "typeorm": "^0.3.11",
     "typeorm-model-generator": "^0.4.6",
+    "uuid": "^9.0.0",
     "winston": "^3.6.0",
     "winston-daily-rotate-file": "^4.6.1",
     "zod": "^3.21.4"

backend/src/auth/auth.controller.ts

@@ -1,6 +1,7 @@
 import * as bcrypt from 'bcrypt';
 import { NextFunction, Request, Response } from 'express';
 import * as status from 'http-status';
+import { randomUUID } from 'crypto';
 import * as models from '../DTO/users.model';
 import { oauth42ApiOption, oauthUrlOption } from '../config';
 import { updateSlackIdByUserId } from '../slack/slack.service';
@@ -30,7 +31,7 @@ export const getToken = async (req: Request, res: Response, next: NextFunction):
       // 회원가입
       try {
         const email = `${nickName}@student.42seoul.kr`;
-        await usersService.createUser(String(email), await bcrypt.hash(String(email), 10));
+        await usersService.createUser(String(email), await bcrypt.hash(randomUUID(), 10));
         const newUser: { items: models.User[] } = await usersService.searchUserByEmail(email);
         await authService.updateAuthenticationUser(newUser.items[0].id, id, nickName);
         await updateSlackIdByUserId(newUser.items[0].id);

backend/src/routes/users.routes.ts

@@ -168,7 +168,7 @@ export const router = Router();
  *            application/json:
  *              schema:
  *                type: object
- *                description: 200, 201, 205 에러 가능
+ *                description: 200, 201, 205, 209 에러 가능
  *                properties:
  *                  errorCode:
  *                    type: number

backend/src/users/users.controller.ts

@@ -67,6 +67,10 @@ export const create = async (req: Request, res: Response, next: NextFunction) =>
   if (!email || !password) {
     return next(new ErrorResponse(errorCode.INVALID_INPUT, status.BAD_REQUEST));
   }
+  const regex = /@student\.42seoul\.kr$/;
+  if (regex.test(email)) {
+    return next(new ErrorResponse(errorCode.INVALID_INPUT, status.BAD_REQUEST));
+  }
   try {
     pwSchema
       .is().min(10)

backend/src/utils/error/errorCode.ts

@@ -22,6 +22,7 @@ export const INVALIDATE_PASSWORD = '205';
 export const INVALID_ROLE = '206';
 export const SLACK_OVERLAP = '207';
 export const INTRA_AUTHENTICATE_SUCCESS = '208';
+export const STUDENT_42_SUBSCRIPTION_FORBIDDEN = '209';
 
 export const SLACKID_OVERLAP = '301';
 export const NO_ISBN = '302';