diff --git a/cardatabase/pom.xml b/cardatabase/pom.xml
index 01baaad..4958906 100644
--- a/cardatabase/pom.xml
+++ b/cardatabase/pom.xml
@@ -62,12 +62,13 @@ xsi:schemaLocation="https://maven.apache.org/POM/4.0.0 https://maven.apache.org/
 		</dependency>        
 		
 		
-		<!--  	메모리 DB 테스트목적
+		<!--  	메모리 DB 테스트목적 -->
 		<dependency>
 			<groupId>com.h2database</groupId>
 			<artifactId>h2</artifactId>
-			<scope>runtime</scope>
-		</dependency
+			<scope>test</scope>
+		</dependency>
+		<!--
 		<dependency>
 			<groupId></groupId>
 			<artifactId></artifactId>
diff --git a/cardatabase/src/main/java/com/packt/cardatabase/AuthEntryPoint.java b/cardatabase/src/main/java/com/packt/cardatabase/AuthEntryPoint.java
new file mode 100644
index 0000000..65ac431
--- /dev/null
+++ b/cardatabase/src/main/java/com/packt/cardatabase/AuthEntryPoint.java
@@ -0,0 +1,32 @@
+package com.packt.cardatabase;
+
+import java.io.IOException;
+import java.io.PrintWriter;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import org.springframework.http.MediaType;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.AuthenticationEntryPoint;
+import org.springframework.stereotype.Component;
+
+@Component
+public class AuthEntryPoint implements AuthenticationEntryPoint {
+
+	@Override
+	public void commence(
+			HttpServletRequest request,
+			HttpServletResponse response,
+			AuthenticationException authException)
+			throws IOException, ServletException{
+		
+		response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+		response.setContentType(MediaType.APPLICATION_JSON_VALUE);
+		PrintWriter writer = response.getWriter();
+		writer.println("Errorrr: " + authException.getMessage() );
+	}
+	
+	
+	
+}
diff --git a/cardatabase/src/main/java/com/packt/cardatabase/SecurityConfig.java b/cardatabase/src/main/java/com/packt/cardatabase/SecurityConfig.java
index e209189..f597d66 100644
--- a/cardatabase/src/main/java/com/packt/cardatabase/SecurityConfig.java
+++ b/cardatabase/src/main/java/com/packt/cardatabase/SecurityConfig.java
@@ -1,5 +1,7 @@
 package com.packt.cardatabase;
 
+import java.util.Arrays;
+
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
@@ -19,6 +21,9 @@ import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.CorsConfigurationSource;
+import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 
 import com.packt.cardatabase.service.UserDetailsServiceImpl;
 
@@ -30,6 +35,10 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 	
 	@Autowired
 	private AuthenticationFilter authenticationFilter;
+	
+	@Autowired
+	private AuthEntryPoint exceptionHandler;
+	
 	/*
     @SuppressWarnings("deprecation")
 	@Bean
@@ -56,7 +65,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 	
 	@Override
 	protected void configure(HttpSecurity http) throws Exception {
-		http.csrf().disable()
+		http.csrf().disable().cors().and()
 			.sessionManagement()
 			.sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
 			.authorizeRequests()
@@ -64,8 +73,43 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 			.antMatchers(HttpMethod.POST, "/login").permitAll()
 			// 다른 모든 요청은 보호됨
 			.anyRequest().authenticated().and()
+			.exceptionHandling()
+			.authenticationEntryPoint(exceptionHandler).and()
 			.addFilterBefore(authenticationFilter, UsernamePasswordAuthenticationFilter.class);
 		
 	}
+	
+	@Bean
+	CorsConfigurationSource corsConfigurationSource() {
+		UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+		CorsConfiguration config = new CorsConfiguration();
+		config.setAllowedOrigins(Arrays.asList("*"));
+		config.setAllowedMethods(Arrays.asList("*"));
+		config.setAllowedHeaders(Arrays.asList("*"));
+		config.setAllowCredentials(false);
+		config.applyPermitDefaultValues();
+		
+		//출처 http://localhost:3000 를 명시적으로 허용하려면
+		//config.setAllowedOrigins(Arrays.asList("http://localhost:3000"));
+		
+		source.registerCorsConfiguration("/**", config);
+		return source;
+	}
 
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
+	
 }
diff --git a/cardatabase/src/main/java/com/packt/cardatabase/domain/OwnerRepository.java b/cardatabase/src/main/java/com/packt/cardatabase/domain/OwnerRepository.java
index 6e3e2c2..cfad71e 100644
--- a/cardatabase/src/main/java/com/packt/cardatabase/domain/OwnerRepository.java
+++ b/cardatabase/src/main/java/com/packt/cardatabase/domain/OwnerRepository.java
@@ -1,7 +1,11 @@
 package com.packt.cardatabase.domain;
 
+import java.util.Optional;
+
 import org.springframework.data.repository.*;
 
 public interface OwnerRepository extends CrudRepository<Owner, Long>{
+	Optional<Owner> findByFirstname(String firstName);
+	
 	
 }
\ No newline at end of file
diff --git a/cardatabase/src/test/java/com/packt/cardatabase/CarRestTest.java b/cardatabase/src/test/java/com/packt/cardatabase/CarRestTest.java
new file mode 100644
index 0000000..22eed8f
--- /dev/null
+++ b/cardatabase/src/test/java/com/packt/cardatabase/CarRestTest.java
@@ -0,0 +1,28 @@
+package com.packt.cardatabase;
+
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultHandlers.print;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.HttpHeaders;
+import org.springframework.test.web.servlet.MockMvc;
+
+@SpringBootTest
+@AutoConfigureMockMvc
+public class CarRestTest {
+	@Autowired
+    private MockMvc mockMvc;
+    
+	@Test
+	public void testAuthentication() throws Exception {
+		// Testing authentication with correct credentials
+        this.mockMvc.perform(post("/login").content("{\"username\":\"admin\", \"password\":\"admin\"}").
+        	header(HttpHeaders.CONTENT_TYPE, "application/json")).
+        	andDo(print()).andExpect(status().isOk());
+	}
+
+}
\ No newline at end of file
diff --git a/cardatabase/src/test/java/com/packt/cardatabase/CardatabaseApplicationTests.java b/cardatabase/src/test/java/com/packt/cardatabase/CardatabaseApplicationTests.java
index a0d08f2..cfd1d9a 100644
--- a/cardatabase/src/test/java/com/packt/cardatabase/CardatabaseApplicationTests.java
+++ b/cardatabase/src/test/java/com/packt/cardatabase/CardatabaseApplicationTests.java
@@ -1,13 +1,24 @@
 package com.packt.cardatabase;
 
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.DisplayName;
 import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.test.context.SpringBootTest;
 
+import com.packt.cardatabase.web.CarController;
+
 @SpringBootTest
 class CardatabaseApplicationTests {
+	
+	@Autowired
+	private CarController controller;
 
 	@Test
+	@DisplayName("First example test case")
 	void contextLoads() {
+		assertThat(controller).isNotNull();
 	}
 
 }
diff --git a/cardatabase/src/test/java/com/packt/cardatabase/OwnerRepositoryTest.java b/cardatabase/src/test/java/com/packt/cardatabase/OwnerRepositoryTest.java
new file mode 100644
index 0000000..05dc1d7
--- /dev/null
+++ b/cardatabase/src/test/java/com/packt/cardatabase/OwnerRepositoryTest.java
@@ -0,0 +1,31 @@
+package com.packt.cardatabase;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.orm.jpa.DataJpaTest;
+
+import com.packt.cardatabase.domain.Owner;
+import com.packt.cardatabase.domain.OwnerRepository;
+
+@DataJpaTest
+public class OwnerRepositoryTest {
+	@Autowired
+	private OwnerRepository repository;
+	
+	@Test
+	void saveOwner() {
+		repository.save(new Owner("Lucy", "Smith"));
+		assertThat(repository.findByFirstname("Lucy").isPresent()).isTrue();
+		
+	}
+	
+	@Test
+	void deleteOwners() {
+		repository.save(new Owner("Lisa", "Morrison"));
+		repository.deleteAll();
+		assertThat(repository.count()).isEqualTo(0);
+		
+	}
+
+}