[Feat]: S3 이미지 업로드 구현 (#160)

* [Feat]: 이미지 파일 접근 허용

* [Rename]: LocalFileService

* [Feat]: S3FileService

* [Feat]: s3 관련 main.tf 설정

* [Test]: S3FileServiceTest

Author: eunchan96

.gitignore

@@ -43,6 +43,7 @@ src/main/generated/
 k6-tests/results
 *.pem
 *.key
+uploads/
 
 ### env ###
 .env

build.gradle.kts

@@ -34,6 +34,10 @@ dependencies {
     implementation("org.springframework.boot:spring-boot-starter-webflux")
     implementation("org.springframework.boot:spring-boot-starter-data-elasticsearch")
 
+    // AWS S3
+    implementation(platform("software.amazon.awssdk:bom:2.33.6"))
+    implementation("software.amazon.awssdk:s3")
+//    implementation("io.awspring.cloud:spring-cloud-aws-starter-s3:3.3.1") // S3Template 사용 시
 
     // 스프링부트 추가 기능
     implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:2.7.0")

src/main/java/com/backend/domain/member/service/MemberService.java

@@ -9,7 +9,7 @@
 import com.backend.domain.member.dto.MemberInfoResponseDto;
 import com.backend.domain.member.entity.Member;
 import com.backend.domain.member.repository.MemberRepository;
-import com.backend.domain.product.service.FileService;
+import com.backend.global.file.service.LocalFileService;
 import com.backend.global.exception.ServiceException;
 import com.backend.global.response.RsData;
 import com.backend.global.security.JwtUtil;
@@ -31,7 +31,7 @@ public class MemberService {
     private final PasswordEncoder passwordEncoder;
     private final JwtUtil jwtUtil;
     private final RedisUtil redisUtil;
-    private final FileService fileService;
+    private final LocalFileService fileService;
 
     public RsData<MemberSignUpResponseDto> signup(MemberSignUpRequestDto memberSignUpRequestDto) {
         checkEmailDuplication(memberSignUpRequestDto.email());

src/main/java/com/backend/domain/product/service/ProductImageService.java

@@ -4,6 +4,7 @@
 import com.backend.domain.product.entity.ProductImage;
 import com.backend.domain.product.exception.ProductException;
 import com.backend.domain.product.repository.ProductImageRepository;
+import com.backend.global.file.service.LocalFileService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Service;
 import org.springframework.web.multipart.MultipartFile;
@@ -14,7 +15,7 @@
 @Service
 @RequiredArgsConstructor
 public class ProductImageService {
-    private final FileService fileService;
+    private final LocalFileService fileService;
     private final ProductImageRepository productImageRepository;
 
     // ======================================= public methods ======================================= //

src/main/java/com/backend/global/aws/s3/AwsS3Config.java

@@ -0,0 +1,19 @@
+package com.backend.global.aws.s3;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Profile;
+import software.amazon.awssdk.regions.Region;
+import software.amazon.awssdk.services.s3.S3Client;
+
+@Configuration
+@Profile("prod")
+public class AwsS3Config {
+    @Bean
+    public S3Client s3Client() {
+        return S3Client.builder()
+            .region(Region.AP_NORTHEAST_2)
+            // credentials 지정 안 함 → EC2 IAM Role 자동 사용
+            .build();
+    }
+}

src/main/java/com/backend/global/file/service/FileService.java

@@ -0,0 +1,15 @@
+package com.backend.global.file.service;
+
+import org.springframework.web.multipart.MultipartFile;
+
+public interface FileService {
+    String uploadFile(MultipartFile file, String directory);
+    void deleteFile(String fileUrl);
+
+    default String getFileExtension(String filename) {
+        if (filename == null || !filename.contains(".")) {
+            return "";
+        }
+        return filename.substring(filename.lastIndexOf("."));
+    }
+}

src/main/java/com/backend/domain/product/service/FileService.java renamed to src/main/java/com/backend/global/file/service/LocalFileService.java

@@ -1,8 +1,9 @@
-package com.backend.domain.product.service;
+package com.backend.global.file.service;
 
 import com.backend.domain.product.exception.ProductException;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Profile;
 import org.springframework.stereotype.Service;
 import org.springframework.web.multipart.MultipartFile;
 
@@ -14,7 +15,8 @@
 
 @Slf4j
 @Service
-public class FileService {
+@Profile("!prod")
+public class LocalFileService implements FileService {
     @Value("${file.upload.path}")
     private String uploadPath;
 
@@ -49,13 +51,6 @@ public String uploadFile(MultipartFile file, String directory) {
         }
     }
 
-    private String getFileExtension(String filename) {
-        if (filename == null || !filename.contains(".")) {
-            return "";
-        }
-        return filename.substring(filename.lastIndexOf("."));
-    }
-
     public void deleteFile(String fileUrl) {
         try {
             if (!fileUrl.startsWith(baseUrl)) {

src/main/java/com/backend/global/file/service/S3FileService.java

@@ -0,0 +1,81 @@
+package com.backend.global.file.service;
+
+import com.backend.domain.product.exception.ProductException;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Profile;
+import org.springframework.stereotype.Service;
+import org.springframework.web.multipart.MultipartFile;
+import software.amazon.awssdk.core.sync.RequestBody;
+import software.amazon.awssdk.services.s3.S3Client;
+import software.amazon.awssdk.services.s3.model.DeleteObjectRequest;
+import software.amazon.awssdk.services.s3.model.PutObjectRequest;
+
+import java.util.HashMap;
+import java.util.Map;
+import java.util.UUID;
+
+@Slf4j
+@Service
+@Profile("prod")
+@RequiredArgsConstructor
+public class S3FileService implements FileService {
+    private final S3Client s3Client;
+
+    @Value("${file.upload.s3.bucket}")
+    private String bucketName;
+
+    @Value("${file.upload.s3.base-url}")
+    private String baseUrl;
+
+    @Override
+    public String uploadFile(MultipartFile file, String directory) {
+        try {
+            // 고유한 파일명 생성
+            String key = directory + "/" + UUID.randomUUID() + getFileExtension(file.getOriginalFilename());
+
+            // S3 키 생성
+            Map<String, String> metadata = new HashMap<>();
+            metadata.put("original-filename", file.getOriginalFilename());
+
+            // S3 업로드
+            PutObjectRequest request = PutObjectRequest.builder()
+                    .bucket(bucketName)
+                    .key(key)
+                    .contentType(file.getContentType())
+                    .contentLength(file.getSize())
+                    .metadata(metadata)
+//                    .acl(ObjectCannedACL.PUBLIC_READ) // 공개 읽기 권한 -> 버킷 정책으로 처리 (Terraform)
+                    .build();
+
+            s3Client.putObject(request, RequestBody.fromInputStream(file.getInputStream(), file.getSize()));
+
+            String fileUrl = baseUrl + "/" + key;
+            log.info("S3 파일 업로드 성공: {}", fileUrl);
+
+            return fileUrl;
+        } catch (Exception e) {
+            log.error("S3 파일 업로드 실패: {}", file.getOriginalFilename(), e);
+            throw ProductException.fileUploadFailed();
+        }
+    }
+
+    @Override
+    public void deleteFile(String fileUrl) {
+        try {
+            // URL에서 S3 키 추출
+            String key = fileUrl.replace(baseUrl + "/", "");
+
+            DeleteObjectRequest request = DeleteObjectRequest.builder()
+                    .bucket(bucketName)
+                    .key(key)
+                    .build();
+
+            s3Client.deleteObject(request);
+            log.info("S3 파일 삭제 성공: {}", fileUrl);
+        } catch (Exception e) {
+            log.error("S3 파일 삭제 실패: {}", fileUrl, e);
+        }
+    }
+}

src/main/java/com/backend/global/security/SecurityConfig.java

@@ -49,6 +49,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                                 "/api/*/products", "/api/*/products/{productId:\\d+}", "/api/*/products/es",
                                 "/api/*/products/members/{memberId:\\d+}", "/api/*/products/es/members/{memberId:\\d+}",
                                 "/api/v1/members/{memberId:\\d+}").permitAll()
+                        .requestMatchers("/uploads/**").permitAll()
                         .requestMatchers("/api/*/test-data/**").permitAll()
 
                         .anyRequest().authenticated()

src/main/resources/application-prod.yml

@@ -31,6 +31,9 @@ file:
   upload:
     path: /data
     base-url: https://api.bid-market.shop/uploads
+    s3:
+      bucket: team12-bid-market-bucket
+      base-url: https://team12-bid-market-bucket.s3.ap-northeast-2.amazonaws.com
 testdata:
   generation:
     enabled: false