Caffeine API 캐싱 + DB 인덱스 V10 + 약관 재동의 + a11y 폴리쉬 — POP-SPOT v2.19 · v2.20 (+v2.20.1/2)

// v2.19 — CacheConfig.java (신규). Caffeine 메모리 캠시 제조
@Configuration
@EnableCaching
public class CacheConfig {
  @Bean
  public CacheManager cacheManager() {
    CaffeineCacheManager manager = new CaffeineCacheManager(
        "topPopups", "popupDetail", "mapMarkers"
    );
    manager.setCaffeine(Caffeine.newBuilder()
        .maximumSize(1_000)
        .expireAfterWrite(Duration.ofMinutes(5))
        .recordStats()
    );
    return manager;
  }
}

// v2.19 / v2.20.1 — PopupStoreService.findTopByRegion()
@Cacheable(value = "topPopups", key = "#region + ':' + #limit")
public List<PopupStoreResponse> findTopByRegion(String region, int limit) {
  return repository.findVisibleTopByRegion(region, limit);
}

-- v2.19 — V10__indexes.sql
CREATE INDEX idx_popup_status_visible_end_date
  ON popup_store (status, visible, end_date)
  WHERE status IN ('ACTIVE','UPCOMING') AND visible = true;

CREATE INDEX idx_wishlist_user_popup
  ON wishlist (user_id, popup_id);

CREATE INDEX idx_notification_user_read
  ON notification (user_id, read_at);

// v2.19 — User 엔티티에 동의 버전 추적 컬럼 추가
@Column
private String agreedTermsVersion;
@Column
private String agreedPrivacyVersion;

// v2.19 — 프론트의 현재 약관 버전 상수
const CURRENT_TERMS = '2026-05-25';
const CURRENT_PRIVACY = '2026-05-25';

const needsReconfirm =
  user.agreedTermsVersion !== CURRENT_TERMS ||
  user.agreedPrivacyVersion !== CURRENT_PRIVACY;

{needsReconfirm && <ModalBlock>약관이 변경되었음. 재동의 필요</ModalBlock>}

// v2.19 — OAuthStateService.issueState(). CSRF 방어·Redis 기반 1회용
public String issueState() {
  byte[] bytes = new byte[32];
  secureRandom.nextBytes(bytes);
  String state = Base64.getUrlEncoder().withoutPadding().encodeToString(bytes);

  redisTemplate.opsForValue().set(
      "oauth:state:" + state, "valid",
      Duration.ofMinutes(5)
  );
  return state;
}

public boolean consumeState(String state) {
  Boolean deleted = redisTemplate.delete("oauth:state:" + state);
  return Boolean.TRUE.equals(deleted);
}

{/* v2.20 — signup 폼 내 honeypot 필드. 봇 탐지용 */}
<input
  type="text"
  name="company"
  tabIndex={-1}
  autoComplete="off"
  style={{
    position: 'absolute',
    left: '-9999px',
    width: '1px',
    height: '1px',
    opacity: 0,
  }}
/>

// v2.19 / v2.20.1 — PopupStoreService.findTopByRegion()
@Cacheable(value = "topPopups", key = "#region + ':' + #limit")
public List<PopupStoreResponse> findTopByRegion(String region, int limit) {
  return repository.findVisibleTopByRegion(region, limit);
}