From 313144017124e4aed6c29c29a732344fbf76594c Mon Sep 17 00:00:00 2001 From: jade Date: Wed, 15 Jul 2026 15:26:39 +0900 Subject: [PATCH] =?UTF-8?q?fix:=20ToolPlanner=EC=97=90=EC=84=9C=20Spring?= =?UTF-8?q?=20Boot=EC=9D=98=20Properties=20=EB=8C=80=EC=86=8C=EB=AC=B8?= =?UTF-8?q?=EC=9E=90=20=EB=B3=80=ED=99=98(kebab-case)=20=EC=9D=B4=EC=8A=88?= =?UTF-8?q?=20=ED=95=B4=EA=B2=B0=EC=9D=84=20=EC=9C=84=ED=95=B4=20tenantId?= =?UTF-8?q?=20=EC=86=8C=EB=AC=B8=EC=9E=90=20=EC=A1=B0=ED=9A=8C=20=EC=B6=94?= =?UTF-8?q?=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../axhub/biz/mcp/gateway/service/ToolPlanner.java | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/axhub-gateway/src/main/java/io/shinhanlife/axhub/biz/mcp/gateway/service/ToolPlanner.java b/axhub-gateway/src/main/java/io/shinhanlife/axhub/biz/mcp/gateway/service/ToolPlanner.java index dfea1f7..cad228e 100644 --- a/axhub-gateway/src/main/java/io/shinhanlife/axhub/biz/mcp/gateway/service/ToolPlanner.java +++ b/axhub-gateway/src/main/java/io/shinhanlife/axhub/biz/mcp/gateway/service/ToolPlanner.java @@ -82,7 +82,14 @@ public class ToolPlanner { // 2-1. [신규] 도메인 그룹핑 기반 권한 검증 if (tenantId != null && toolMetadata.getCategoryKey() != null) { - List allowedDomains = securityProperties.getTenantDomains().get(tenantId); + String normalizedTenantId = tenantId.toLowerCase(); + List allowedDomains = securityProperties.getTenantDomains().get(normalizedTenantId); + + // 만약 대소문자 변환 후에도 없으면 원래 값으로 한 번 더 시도 (하위 호환성) + if (allowedDomains == null) { + allowedDomains = securityProperties.getTenantDomains().get(tenantId); + } + if (allowedDomains == null || (!allowedDomains.contains("ALL") && !allowedDomains.contains(toolMetadata.getCategoryKey()))) { log.warn(" [Planner] 권한 거부 - Tenant: {}, Request Domain: {}", tenantId, toolMetadata.getCategoryKey());