test: 리뷰 관리 기능 테스트 코드 작성

src/main/java/com/codeit/team5/mopl/config/SecurityConfig.java

@@ -80,6 +80,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                         .requestMatchers("/api/follows/**").authenticated()
                         .requestMatchers("/api/notifications/**").authenticated()
                         .requestMatchers("/api/sse/**").authenticated()
+                        .requestMatchers("/api/reviews/**").authenticated()
 
                         .requestMatchers(HttpMethod.POST, "/api/auth/reset-password").permitAll()
                         .requestMatchers("/api/auth/sign-in").permitAll()

src/main/java/com/codeit/team5/mopl/review/controller/ReviewController.java

@@ -0,0 +1,97 @@
+package com.codeit.team5.mopl.review.controller;
+
+import com.codeit.team5.mopl.auth.security.details.MoplPrincipal;
+import com.codeit.team5.mopl.auth.security.details.MoplUserDetails;
+import com.codeit.team5.mopl.global.dto.CursorResponse;
+import com.codeit.team5.mopl.review.controller.api.ReviewApi;
+import com.codeit.team5.mopl.review.dto.request.ReviewCreateRequest;
+import com.codeit.team5.mopl.review.dto.request.ReviewUpdateRequest;
+import com.codeit.team5.mopl.review.dto.response.ReviewResponse;
+import com.codeit.team5.mopl.review.service.ReviewService;
+import jakarta.validation.Valid;
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import java.util.UUID;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.validation.annotation.Validated;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PatchMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequiredArgsConstructor
+@Validated
+@Slf4j
+@RequestMapping("/api/reviews")
+public class ReviewController implements ReviewApi {
+
+    private final ReviewService reviewService;
+
+    @Override
+    @GetMapping
+    public ResponseEntity<CursorResponse<ReviewResponse>> getReviews(
+        @RequestParam UUID contentId,
+        @RequestParam(required = false) String cursor,
+        @RequestParam(required = false) UUID idAfter,
+        @RequestParam(defaultValue = "20") @Min(1) @Max(100) int limit,
+        @RequestParam(defaultValue = "DESCENDING") String sortDirection,
+        @RequestParam(defaultValue = "createdAt") String sortBy) {
+
+        log.info("리뷰 목록 조회: GET /api/reviews, contentId={}", contentId);
+
+        CursorResponse<ReviewResponse> response = reviewService.getReviews(
+            contentId, cursor, idAfter, limit, sortDirection, sortBy);
+
+        return ResponseEntity.ok(response);
+    }
+
+    @Override
+    @PostMapping
+    public ResponseEntity<ReviewResponse> createReview(
+        @AuthenticationPrincipal MoplPrincipal moplPrincipal,
+        @RequestBody @Valid ReviewCreateRequest request) {
+
+        log.info("리뷰 생성: POST /api/reviews, authorId={}", moplPrincipal.getId());
+
+        ReviewResponse response = reviewService.createReview(moplPrincipal.getId(), request);
+
+        return ResponseEntity.status(HttpStatus.CREATED).body(response);
+    }
+
+    @Override
+    @PatchMapping("/{reviewId}")
+    public ResponseEntity<ReviewResponse> updateReview(
+        @AuthenticationPrincipal MoplPrincipal moplPrincipal,
+        @PathVariable UUID reviewId,
+        @RequestBody @Valid ReviewUpdateRequest request) {
+
+        log.info("리뷰 수정: PATCH /api/reviews/{}, authorId={}", reviewId, moplPrincipal.getId());
+
+        ReviewResponse response = reviewService.updateReview(reviewId, moplPrincipal.getId(), request);
+
+        return ResponseEntity.ok(response);
+    }
+
+    @Override
+    @DeleteMapping("/{reviewId}")
+    public ResponseEntity<Void> deleteReview(
+        @AuthenticationPrincipal MoplUserDetails userDetails,
+        @PathVariable UUID reviewId) {
+
+        log.info("리뷰 삭제: DELETE /api/reviews/{}, authorId={}", reviewId, userDetails.getId());
+
+        reviewService.deleteReview(reviewId, userDetails.getId());
+
+        return ResponseEntity.noContent().build();
+    }
+}

src/main/java/com/codeit/team5/mopl/review/controller/api/ReviewApi.java

@@ -0,0 +1,106 @@
+package com.codeit.team5.mopl.review.controller.api;
+
+import com.codeit.team5.mopl.auth.security.details.MoplPrincipal;
+import com.codeit.team5.mopl.auth.security.details.MoplUserDetails;
+import com.codeit.team5.mopl.global.dto.CursorResponse;
+import com.codeit.team5.mopl.global.dto.suggestion.ErrorResponseSuggestion;
+import com.codeit.team5.mopl.review.dto.request.ReviewCreateRequest;
+import com.codeit.team5.mopl.review.dto.request.ReviewUpdateRequest;
+import com.codeit.team5.mopl.review.dto.response.ReviewResponse;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import jakarta.validation.constraints.Max;
+import jakarta.validation.constraints.Min;
+import java.util.UUID;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestParam;
+
+@Tag(name = "리뷰 관리", description = "리뷰 API")
+public interface ReviewApi {
+
+    @Operation(operationId = "getReviews", summary = "리뷰 목록 조회 (커서 페이지네이션)")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "조회 성공"),
+        @ApiResponse(responseCode = "400", description = "잘못된 요청",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "401", description = "인증 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "500", description = "서버 내부 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class)))
+    })
+    ResponseEntity<CursorResponse<ReviewResponse>> getReviews(
+        @Parameter(description = "콘텐츠 ID", required = true)
+        @RequestParam UUID contentId,
+        @Parameter(description = "커서")
+        @RequestParam(required = false) String cursor,
+        @Parameter(description = "보조 커서")
+        @RequestParam(required = false) UUID idAfter,
+        @Parameter(description = "한 번에 가져올 개수")
+        @RequestParam(defaultValue = "20") @Min(1) @Max(100) int limit,
+        @Parameter(description = "정렬 방향 (ASCENDING, DESCENDING)")
+        @RequestParam(defaultValue = "DESCENDING") String sortDirection,
+        @Parameter(description = "정렬 기준 (createdAt, rating)")
+        @RequestParam(defaultValue = "createdAt") String sortBy);
+
+    @Operation(operationId = "createReview", summary = "리뷰 생성",
+        description = "생성한 리뷰는 API 요청자 본인의 리뷰로 생성됩니다.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "201", description = "생성 성공"),
+        @ApiResponse(responseCode = "400", description = "잘못된 요청",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "401", description = "인증 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "409", description = "이미 리뷰 작성함",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "500", description = "서버 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class)))
+    })
+    ResponseEntity<ReviewResponse> createReview(
+        @Parameter(hidden = true) MoplPrincipal moplPrincipal,
+        @RequestBody @Valid ReviewCreateRequest request);
+
+    @Operation(operationId = "updateReview", summary = "리뷰 수정")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "수정 성공"),
+        @ApiResponse(responseCode = "400", description = "잘못된 요청",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "401", description = "인증 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "403", description = "권한 없음",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "404", description = "리뷰 없음",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "500", description = "서버 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class)))
+    })
+    ResponseEntity<ReviewResponse> updateReview(
+        @Parameter(hidden = true) MoplPrincipal moplPrincipal,
+        @Parameter(description = "리뷰 ID", required = true)
+        @PathVariable UUID reviewId,
+        @RequestBody @Valid ReviewUpdateRequest request);
+
+    @Operation(operationId = "deleteReview", summary = "리뷰 삭제")
+    @ApiResponses({
+        @ApiResponse(responseCode = "204", description = "삭제 성공"),
+        @ApiResponse(responseCode = "401", description = "인증 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "403", description = "권한 없음",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "404", description = "리뷰 없음",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class))),
+        @ApiResponse(responseCode = "500", description = "서버 오류",
+            content = @Content(schema = @Schema(implementation = ErrorResponseSuggestion.class)))
+    })
+    ResponseEntity<Void> deleteReview(
+        @Parameter(hidden = true) MoplUserDetails userDetails,
+        @Parameter(description = "리뷰 ID", required = true)
+        @PathVariable UUID reviewId);
+}

src/main/java/com/codeit/team5/mopl/review/dto/request/ReviewCreateRequest.java

@@ -0,0 +1,26 @@
+package com.codeit.team5.mopl.review.dto.request;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import jakarta.validation.constraints.DecimalMax;
+import jakarta.validation.constraints.DecimalMin;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import java.util.UUID;
+
+@Schema(name = "ReviewCreateRequest", description = "리뷰 생성 요청")
+public record ReviewCreateRequest(
+    @Schema(description = "콘텐츠 ID", requiredMode = Schema.RequiredMode.REQUIRED)
+    @NotNull(message = "contentId는 필수입니다.")
+    UUID contentId,
+
+    @Schema(description = "리뷰 내용", requiredMode = Schema.RequiredMode.REQUIRED)
+    @NotBlank(message = "리뷰 내용은 필수입니다.")
+    String text,
+
+    @Schema(description = "평점 (0.0 ~ 5.0)", requiredMode = Schema.RequiredMode.REQUIRED)
+    @NotNull(message = "rating은 필수입니다.")
+    @DecimalMin(value = "0.0", message = "평점은 0.0 이상이어야 합니다.")
+    @DecimalMax(value = "5.0", message = "평점은 5.0 이하여야 합니다.")
+    Double rating
+) {
+}

src/main/java/com/codeit/team5/mopl/review/dto/request/ReviewUpdateRequest.java

@@ -0,0 +1,21 @@
+package com.codeit.team5.mopl.review.dto.request;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import jakarta.validation.constraints.DecimalMax;
+import jakarta.validation.constraints.DecimalMin;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+
+@Schema(name = "ReviewUpdateRequest", description = "리뷰 수정 요청")
+public record ReviewUpdateRequest(
+    @Schema(description = "리뷰 내용")
+    @NotBlank(message = "리뷰 내용은 필수입니다.")
+    String text,
+
+    @Schema(description = "평점 (0.0 ~ 5.0)")
+    @NotNull(message = "rating은 필수입니다.")
+    @DecimalMin(value = "0.0", message = "평점은 0.0 이상이어야 합니다.")
+    @DecimalMax(value = "5.0", message = "평점은 5.0 이하여야 합니다.")
+    Double rating
+) {
+}

src/main/java/com/codeit/team5/mopl/review/dto/response/ReviewResponse.java

@@ -0,0 +1,13 @@
+package com.codeit.team5.mopl.review.dto.response;
+
+import com.codeit.team5.mopl.user.dto.response.UserSummaryResponse;
+import java.util.UUID;
+
+public record ReviewResponse(
+    UUID id,
+    UUID contentId,
+    UserSummaryResponse author,
+    String text,
+    Double rating
+) {
+}

src/main/java/com/codeit/team5/mopl/review/entity/Review.java

@@ -0,0 +1,58 @@
+package com.codeit.team5.mopl.review.entity;
+
+import com.codeit.team5.mopl.content.entity.Content;
+import com.codeit.team5.mopl.global.entity.BaseUpdatableEntity;
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.FetchType;
+import jakarta.persistence.JoinColumn;
+import jakarta.persistence.ManyToOne;
+import jakarta.persistence.Table;
+import jakarta.persistence.UniqueConstraint;
+import java.util.UUID;
+import lombok.AccessLevel;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+@Entity
+@Table(name = "reviews",
+    uniqueConstraints = @UniqueConstraint(columnNames = {"content_id", "user_id"}))
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class Review extends BaseUpdatableEntity {
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "content_id", nullable = false)
+    private Content content;
+
+    @Column(name = "user_id", nullable = false, columnDefinition = "uuid")
+    private UUID authorId;
+
+    @Column(columnDefinition = "TEXT", nullable = false)
+    private String text;
+
+    @Column(nullable = false)
+    private Double rating;
+
+    public static Review of(Content content, UUID authorId, String text, Double rating) {
+        return new Review(content, authorId, text, rating);
+    }
+
+    private Review(Content content, UUID authorId, String text, Double rating) {
+        this.content = content;
+        this.authorId = authorId;
+        this.text = text;
+        this.rating = rating;
+    }
+
+    public UUID getContentId() {
+        return content.getId();
+    }
+
+    public void update(String text, Double rating) {
+        if (text != null) {
+            this.text = text;
+        }
+        this.rating = rating;
+    }
+}

src/main/java/com/codeit/team5/mopl/review/exception/InvalidRatingException.java

@@ -0,0 +1,12 @@
+package com.codeit.team5.mopl.review.exception;
+
+import com.codeit.team5.mopl.global.exception.BusinessException;
+import org.springframework.http.HttpStatus;
+
+public class InvalidRatingException extends BusinessException {
+
+    public InvalidRatingException(Double rating) {
+
+        super(HttpStatus.BAD_REQUEST, "평점은 0.0 이상, 5.0 이하여야 합니다. rating: "+ rating);
+    }
+}

src/main/java/com/codeit/team5/mopl/review/exception/InvalidReviewSortByException.java

@@ -0,0 +1,11 @@
+package com.codeit.team5.mopl.review.exception;
+
+import com.codeit.team5.mopl.global.exception.BusinessException;
+import org.springframework.http.HttpStatus;
+
+public class InvalidReviewSortByException extends BusinessException {
+
+    public InvalidReviewSortByException(String sortBy) {
+        super(HttpStatus.BAD_REQUEST, "지원하지 않는 정렬 기준입니다 (createdAt 또는 rating): " + sortBy);
+    }
+}

src/main/java/com/codeit/team5/mopl/review/exception/ReviewAlreadyExistsException.java

@@ -0,0 +1,11 @@
+package com.codeit.team5.mopl.review.exception;
+
+import com.codeit.team5.mopl.global.exception.BusinessException;
+import org.springframework.http.HttpStatus;
+
+public class ReviewAlreadyExistsException extends BusinessException {
+
+    public ReviewAlreadyExistsException() {
+        super(HttpStatus.CONFLICT, "이미 해당 콘텐츠에 리뷰를 작성했습니다.");
+    }
+}

src/main/java/com/codeit/team5/mopl/review/exception/ReviewForbiddenException.java

@@ -0,0 +1,11 @@
+package com.codeit.team5.mopl.review.exception;
+
+import com.codeit.team5.mopl.global.exception.BusinessException;
+import org.springframework.http.HttpStatus;
+
+public class ReviewForbiddenException extends BusinessException {
+
+    public ReviewForbiddenException() {
+        super(HttpStatus.FORBIDDEN, "리뷰를 수정/삭제할 권한이 없습니다.");
+    }
+}

src/main/java/com/codeit/team5/mopl/review/exception/ReviewNotFoundException.java

@@ -0,0 +1,12 @@
+package com.codeit.team5.mopl.review.exception;
+
+import com.codeit.team5.mopl.global.exception.BusinessException;
+import java.util.UUID;
+import org.springframework.http.HttpStatus;
+
+public class ReviewNotFoundException extends BusinessException {
+
+    public ReviewNotFoundException(UUID id) {
+        super(HttpStatus.NOT_FOUND, "리뷰를 찾을 수 없습니다: id=" + id);
+    }
+}