From 7e45e00e9b20c1860ec659f86b3a6dd7e50696e6 Mon Sep 17 00:00:00 2001 From: happybell80 Date: Wed, 17 Sep 2025 20:35:59 +0900 Subject: [PATCH] Update NAVER WORKS documentation with OAuth patterns matching Gmail/Slack - Add OAuth endpoint patterns for all providers (Gmail, Slack, NAVER WORKS) - Unify Redirect URL domain to auth.ro-being.com across all providers - Update Private Key storage location (Base64 in .env) --- ...²„μ›μŠ€_μΊ˜λ¦°λ”_API_연동_κ°€μ΄λ“œ.md | 35 ++++++++++++++++--- 1 file changed, 31 insertions(+), 4 deletions(-) diff --git a/ideas/250916_λ„€μ΄λ²„μ›μŠ€_μΊ˜λ¦°λ”_API_연동_κ°€μ΄λ“œ.md b/ideas/250916_λ„€μ΄λ²„μ›μŠ€_μΊ˜λ¦°λ”_API_연동_κ°€μ΄λ“œ.md index a4b98f2..160330f 100644 --- a/ideas/250916_λ„€μ΄λ²„μ›μŠ€_μΊ˜λ¦°λ”_API_연동_κ°€μ΄λ“œ.md +++ b/ideas/250916_λ„€μ΄λ²„μ›μŠ€_μΊ˜λ¦°λ”_API_연동_κ°€μ΄λ“œ.md @@ -9,7 +9,32 @@ - **skill μ„œλΉ„μŠ€**: NAVER WORKS μ „μš© μŠ€ν‚¬ μ—†μŒ - **nginx**: NAVER WORKS λΌμš°νŒ… μ„€μ • μ—†μŒ -### ν™•μΈλœ NAVER WORKS OAuth 2.0 μ—”λ“œν¬μΈνŠΈ +### ν™•μΈλœ OAuth μ—”λ“œν¬μΈνŠΈ νŒ¨ν„΄ + +#### πŸ“ Google (Gmail) OAuth - κ΅¬ν˜„λ¨ +**API μ—”λ“œν¬μΈνŠΈ**: +- `/auth/gmail/login` - 둜그인 μ‹œμž‘ +- `/auth/gmail/callback` - OAuth 콜백 +- `/auth/gmail/passport/` - Passport 둜그인 μ‹œμž‘ +- `/auth/gmail/passport/callback` - Passport 콜백 +- `/auth/gmail/passport/status` - Passport μƒνƒœ 확인 + +#### πŸ“ Slack OAuth - κ΅¬ν˜„λ¨ +**API μ—”λ“œν¬μΈνŠΈ**: +- `/auth/slack/login/` - 둜그인 μ‹œμž‘ +- `/auth/slack/login/callback` - OAuth 콜백 +- `/auth/slack/passport/install` - Passport μ„€μΉ˜ +- `/auth/slack/passport/callback` - Passport 콜백 +- `/auth/slack/passport/status/{workspace_id}` - Passport μƒνƒœ + +#### πŸ“ NAVER WORKS OAuth - κ΅¬ν˜„ μ˜ˆμ • +**API μ—”λ“œν¬μΈνŠΈ** (Gmail/Slack νŒ¨ν„΄ μ°Έμ‘°): +- `/auth/naverworks/login` - 둜그인 μ‹œμž‘ +- `/auth/naverworks/callback` - OAuth 콜백 +- `/auth/naverworks/passport/` - Passport 둜그인 (선택적) +- `/auth/naverworks/passport/callback` - Passport 콜백 (선택적) + +**μ™ΈλΆ€ OAuth URL**: - **Authorization**: `https://auth.worksmobile.com/oauth2/v2.0/authorize` - **Token**: `https://auth.worksmobile.com/oauth2/v2.0/token` - **Userinfo (OIDC)**: `https://www.worksapis.com/v1.0/oidc/userinfo` @@ -36,7 +61,9 @@ ### 1.3. OAuth μ„€μ • -- **Redirect URL**: `https://auth.robeing.com/oauth/naverworks/callback` +- **Redirect URL**: `https://auth.ro-being.com/auth/naverworks/callback` + - **주의**: μ½˜μ†”μ—μ„œ auth.robeing.com β†’ auth.ro-being.com λ³€κ²½ ν•„μš” + - **νŒ¨ν„΄**: Gmail/Slackκ³Ό λ™μΌν•˜κ²Œ auth.ro-being.com 도메인 μ‚¬μš© - **ν™œμ„±ν™”λœ Scopes**: - `openid`, `profile`, `email` (OIDC μ‚¬μš©μž μ‹λ³„μš©) - `calendar` (μΊ˜λ¦°λ” 읽기/μ“°κΈ°) @@ -151,10 +178,10 @@ ### 5.3 κ²°μ •/확인 ν•„μš” 사항 #### 결정사항 (ν™•μ •) -- **Redirect URL 도메인**: `auth.ro-being.com` μ‚¬μš© +- **Redirect URL 도메인**: `auth.ro-being.com` μ‚¬μš© (Gmail/Slackκ³Ό 톡일) - **Private Key 처리**: - 2025-09-17: Git μž„μ‹œ commit ν›„ μ„œλ²„ 전솑 μ™„λ£Œ - - μ„œλ²„ 51123 μ•ˆμ „ μ €μž₯: `/secure/naverworks/private_20250917185550.key` + - μ„œλ²„ 51123: Base64둜 .env νŒŒμΌμ— μ €μž₯됨 - Gitμ—μ„œ μ‚­μ œ μ™„λ£Œ (commit a4a2b9c) - **NAVER WORKS 토큰 ν…Œμ΄λΈ”**: `naverworks_token` (team μŠ€ν‚€λ§ˆ μ•„λž˜, λ‹¨μˆ˜ν˜•)