From 200b28e9a1a3f56dc1617d35b6a4ed42b4e55c5d Mon Sep 17 00:00:00 2001
From: "sungjin.choi" <sungjin.choi@specialsource.company>
Date: Mon, 20 Jul 2026 15:09:45 +0900
Subject: [PATCH] =?UTF-8?q?feat=20-=20=EC=9D=B8=EA=B0=80=20url=20=EC=B6=94?=
 =?UTF-8?q?=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../specialsource/config/WebMvcConfig.java    | 30 +++++++------------
 1 file changed, 11 insertions(+), 19 deletions(-)

diff --git a/src/main/java/company/specialsource/config/WebMvcConfig.java b/src/main/java/company/specialsource/config/WebMvcConfig.java
index f9d0a2f..d098188 100644
--- a/src/main/java/company/specialsource/config/WebMvcConfig.java
+++ b/src/main/java/company/specialsource/config/WebMvcConfig.java
@@ -1,28 +1,20 @@
 package company.specialsource.config;
 
-import org.springframework.context.annotation.Bean;
+import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Configuration;
-import org.springframework.security.config.annotation.web.builders.HttpSecurity;
-import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
-import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 
 @Configuration
-@EnableWebSecurity
-public class WebMvcConfig {
+@RequiredArgsConstructor
+public class WebMvcConfig implements WebMvcConfigurer {
 
-    @Bean
-    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
-        http
-            // 1. 🟢 외부 매크로의 POST 요청이 통과할 수 있도록 CSRF 보호 대상에서 업로드 API를 제외합니다.
-            .csrf(csrf -> csrf
-                .ignoringRequestMatchers("/api/sync/upload")
-            )
-            // 2. 🟢 로그인이나 별도의 인증 토큰 없이도 접근할 수 있도록 허용합니다.
-            .authorizeHttpRequests(auth -> auth
-                .requestMatchers("/api/sync/upload").permitAll()
-                .anyRequest().authenticated()
-            );
+    private final VisitorInterceptor visitorInterceptor;
 
-        return http.build();
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(visitorInterceptor)
+//                .addPathPatterns("/api/**") // 🟢 모든 API 주소로 들어오는 길목을 차단하여 감시
+                .excludePathPatterns("/api/analytics/**", "/static/**", "/favicon.ico"); // 통계 조회 API 자체는 중복 카운팅 차단
     }
 }
\ No newline at end of file