fix: 구글 시트 403 응답 처리 및 권한 부여 보강

src/main/java/gg/agit/konect/domain/club/event/SheetSyncFailedEvent.java

@@ -0,0 +1,28 @@
+package gg.agit.konect.domain.club.event;
+
+import java.time.LocalDateTime;
+
+public record SheetSyncFailedEvent(
+    Integer clubId,
+    String spreadsheetId,
+    boolean accessDenied,
+    String reason,
+    LocalDateTime occurredAt
+) {
+
+    public static SheetSyncFailedEvent accessDenied(
+        Integer clubId,
+        String spreadsheetId,
+        String reason
+    ) {
+        return new SheetSyncFailedEvent(clubId, spreadsheetId, true, reason, LocalDateTime.now());
+    }
+
+    public static SheetSyncFailedEvent unexpected(
+        Integer clubId,
+        String spreadsheetId,
+        String reason
+    ) {
+        return new SheetSyncFailedEvent(clubId, spreadsheetId, false, reason, LocalDateTime.now());
+    }
+}

src/main/java/gg/agit/konect/domain/club/service/ClubSheetIntegratedService.java

@@ -10,6 +10,7 @@
 public class ClubSheetIntegratedService {
 
     private final ClubPermissionValidator clubPermissionValidator;
+    private final GoogleSheetPermissionService googleSheetPermissionService;
     private final SheetHeaderMapper sheetHeaderMapper;
     private final ClubMemberSheetService clubMemberSheetService;
     private final SheetImportService sheetImportService;
@@ -22,6 +23,9 @@ public SheetImportResponse analyzeAndImportPreMembers(
         clubPermissionValidator.validateManagerAccess(clubId, requesterId);
 
         String spreadsheetId = SpreadsheetUrlParser.extractId(spreadsheetUrl);
+        // Best-effort: OAuth 미연결/권한 부여 실패여도 이미 수동 공유된 시트는 그대로 읽을 수 있다.
+        googleSheetPermissionService.tryGrantServiceAccountWriterAccess(requesterId, spreadsheetId);
+
         SheetHeaderMapper.SheetAnalysisResult analysis =
             sheetHeaderMapper.analyzeAllSheets(spreadsheetId);
 

src/main/java/gg/agit/konect/domain/club/service/GoogleDrivePermissionHelper.java

@@ -0,0 +1,34 @@
+package gg.agit.konect.domain.club.service;
+
+final class GoogleDrivePermissionHelper {
+
+    private static final int ROLE_RANK_NONE = 0;
+    private static final int ROLE_RANK_READER = 1;
+    private static final int ROLE_RANK_COMMENTER = 2;
+    private static final int ROLE_RANK_WRITER = 3;
+
+    private GoogleDrivePermissionHelper() {}
+
+    enum PermissionApplyStatus {
+        CREATED,
+        UPGRADED,
+        UNCHANGED
+    }
+
+    static boolean hasRequiredRole(String currentRole, String targetRole) {
+        return roleRank(currentRole) >= roleRank(targetRole);
+    }
+
+    private static int roleRank(String role) {
+        if (role == null) {
+            return ROLE_RANK_NONE;
+        }
+
+        return switch (role) {
+            case "reader" -> ROLE_RANK_READER;
+            case "commenter" -> ROLE_RANK_COMMENTER;
+            case "writer", "fileOrganizer", "organizer", "owner" -> ROLE_RANK_WRITER;
+            default -> ROLE_RANK_NONE;
+        };
+    }
+}

src/main/java/gg/agit/konect/domain/club/service/GoogleSheetApiExceptionHelper.java

@@ -0,0 +1,95 @@
+package gg.agit.konect.domain.club.service;
+
+import java.io.IOException;
+import java.util.List;
+import java.util.Set;
+
+import com.google.api.client.googleapis.json.GoogleJsonError;
+import com.google.api.client.googleapis.json.GoogleJsonResponseException;
+import com.google.api.client.http.HttpResponseException;
+
+import gg.agit.konect.global.code.ApiResponseCode;
+import gg.agit.konect.global.exception.CustomException;
+
+public final class GoogleSheetApiExceptionHelper {
+
+    private static final Set<String> ACCESS_DENIED_REASONS = Set.of(
+        "accessDenied",
+        "forbidden",
+        "insufficientFilePermissions",
+        "insufficientPermissions",
+        "notAuthorized",
+        "required"
+    );
+    private static final Set<String> AUTH_FAILURE_REASONS = Set.of(
+        "authError",
+        "invalidCredentials",
+        "unauthorized"
+    );
+    private static final int HTTP_STATUS_FORBIDDEN = 403;
+    private static final int HTTP_STATUS_UNAUTHORIZED = 401;
+    private static final int HTTP_STATUS_NOT_FOUND = 404;
+
+    private GoogleSheetApiExceptionHelper() {}
+
+    public static boolean isAccessDenied(IOException exception) {
+        if (exception instanceof GoogleJsonResponseException responseException) {
+            if (responseException.getStatusCode() != HTTP_STATUS_FORBIDDEN) {
+                return false;
+            }
+            return hasReason(responseException, ACCESS_DENIED_REASONS);
+        }
+        return getStatusCode(exception) == HTTP_STATUS_FORBIDDEN;
+    }
+
+    public static boolean isAuthFailure(IOException exception) {
+        if (exception instanceof GoogleJsonResponseException responseException) {
+            if (responseException.getStatusCode() != HTTP_STATUS_UNAUTHORIZED) {
+                return false;
+            }
+            return hasReason(responseException, AUTH_FAILURE_REASONS)
+                || !hasKnownReasons(responseException);
+        }
+        return getStatusCode(exception) == HTTP_STATUS_UNAUTHORIZED;
+    }
+
+    public static boolean isNotFound(IOException exception) {
+        return getStatusCode(exception) == HTTP_STATUS_NOT_FOUND;
+    }
+
+    public static CustomException accessDenied() {
+        return CustomException.of(ApiResponseCode.FORBIDDEN_GOOGLE_SHEET_ACCESS);
+    }
+
+    private static boolean hasReason(
+        GoogleJsonResponseException exception,
+        Set<String> expectedReasons
+    ) {
+        return getReasons(exception).stream()
+            .anyMatch(expectedReasons::contains);
+    }
+
+    private static boolean hasKnownReasons(GoogleJsonResponseException exception) {
+        return !getReasons(exception).isEmpty();
+    }
+
+    private static List<String> getReasons(GoogleJsonResponseException exception) {
+        if (exception.getDetails() == null || exception.getDetails().getErrors() == null) {
+            return List.of();
+        }
+        return exception.getDetails().getErrors().stream()
+            .map(GoogleJsonError.ErrorInfo::getReason)
+            .filter(reason -> reason != null && !reason.isBlank())
+            .toList();
+    }
+
+    private static int getStatusCode(IOException exception) {
+        if (exception instanceof GoogleJsonResponseException responseException) {
+            return responseException.getStatusCode();
+        }
+        if (exception instanceof HttpResponseException responseException) {
+            return responseException.getStatusCode();
+        }
+        return -1;
+    }
+}