new

app/Config/Filters.php

@@ -25,15 +25,16 @@ class Filters extends BaseFilters
      * or [filter_name => [classname1, classname2, ...]]
      */
     public array $aliases = [
-        'csrf'          => CSRF::class,
-        'toolbar'       => DebugToolbar::class,
-        'honeypot'      => Honeypot::class,
-        'invalidchars'  => InvalidChars::class,
+        'csrf' => CSRF::class,
+        'toolbar' => DebugToolbar::class,
+        'honeypot' => Honeypot::class,
+        'invalidchars' => InvalidChars::class,
         'secureheaders' => SecureHeaders::class,
-        'cors'          => Cors::class,
-        'forcehttps'    => ForceHTTPS::class,
-        'pagecache'     => PageCache::class,
-        'performance'   => PerformanceMetrics::class,
+        'cors' => Cors::class,
+        'forcehttps' => ForceHTTPS::class,
+        'pagecache' => PageCache::class,
+        'performance' => PerformanceMetrics::class,
+        'auth' => \App\Filters\AuthCheck::class,
     ];
 
     /**
@@ -75,6 +76,17 @@ class Filters extends BaseFilters
             // 'honeypot',
             // 'csrf',
             // 'invalidchars',
+            'auth' => [
+                'except' => [
+                    'login',        // GET /login
+                    'login/*',      // /login/* 모두                    
+                    'index.php/login',      // /index.php/login
+                    'index.php/login/*',    // /index.php/login/*
+                    'register',     // 회원가입 등
+                    'register/*',
+                    'api/*',        // 필요하면 API는 예외
+                ],
+            ],
         ],
         'after' => [
             // 'honeypot',