[feat] Refresh Token Rotation 적용

src/main/java/org/hankki/hankkiserver/api/auth/service/AuthFacade.java

@@ -44,7 +44,7 @@ public void logout(final long userId) {
 
     @Transactional
     public UserReissueResponse reissue(final String refreshToken) {
-        Token issuedTokens = authService.generateAccessToken(refreshToken);
+        Token issuedTokens = authService.generateNewTokens(refreshToken);
         return UserReissueResponse.of(issuedTokens);
     }
 }

src/main/java/org/hankki/hankkiserver/api/auth/service/AuthService.java

@@ -51,12 +51,14 @@ public void deleteUser(final User user) {
         userInfoFinder.getUserInfo(user.getId()).softDelete();
     }
 
-    protected Token generateAccessToken(final String refreshToken) {
+    protected Token generateNewTokens(final String refreshToken) {
         String strippedToken = refreshToken.substring(BEARER.length());
         long userId = jwtProvider.getSubject(strippedToken);
         validateRefreshToken(refreshToken, userId);
-        String accessToken = jwtProvider.generateAccessToken(userId, getUserRole(userId));
-        return Token.of(accessToken, strippedToken);
+        Token issuedTokens = jwtProvider.issueTokens(userId, getUserRole(userId));
+        UserInfo findUserInfo = userInfoFinder.getUserInfo(userId);
+        findUserInfo.updateRefreshToken(issuedTokens.refreshToken());
+        return issuedTokens;
     }
 
     private Token generateTokens(final long userId) {

src/main/java/org/hankki/hankkiserver/auth/jwt/JwtProvider.java

@@ -14,7 +14,7 @@ public Token issueTokens(final Long userId, final String role) {
         return Token.of(generateAccessToken(userId, role), generateRefreshToken(userId, role));
     }
 
-    public String generateAccessToken(final Long userId, final String role) {
+    private String generateAccessToken(final Long userId, final String role) {
         return jwtGenerator.generateToken(userId, role, true);
     }