package com.pollex.pam.security.provider;
|
|
import com.fasterxml.jackson.core.JsonProcessingException;
|
import com.fasterxml.jackson.databind.ObjectMapper;
|
import com.pollex.pam.config.ApplicationProperties;
|
import com.pollex.pam.domain.Consultant;
|
import com.pollex.pam.enums.ConsultantDetailEnum;
|
import com.pollex.pam.enums.CustomerDetailEnum;
|
import com.pollex.pam.repository.ConsultantRepository;
|
import com.pollex.pam.security.token.EServiceAuthenticationToken;
|
import com.pollex.pam.service.dto.EServiceRequest;
|
import com.pollex.pam.service.dto.EServiceResponse;
|
import org.apache.http.conn.ssl.NoopHostnameVerifier;
|
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
|
import org.apache.http.impl.client.CloseableHttpClient;
|
import org.apache.http.impl.client.HttpClients;
|
import org.apache.http.ssl.SSLContexts;
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.http.*;
|
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
|
import org.springframework.http.converter.HttpMessageConverter;
|
import org.springframework.http.converter.json.MappingJackson2HttpMessageConverter;
|
import org.springframework.security.authentication.AuthenticationCredentialsNotFoundException;
|
import org.springframework.security.authentication.AuthenticationServiceException;
|
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
|
import org.springframework.security.core.Authentication;
|
import org.springframework.security.core.AuthenticationException;
|
import org.springframework.security.core.GrantedAuthority;
|
import org.springframework.security.core.authority.SimpleGrantedAuthority;
|
import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
import org.springframework.stereotype.Component;
|
import org.springframework.web.client.RestTemplate;
|
import org.springframework.web.util.UriComponentsBuilder;
|
|
import javax.net.ssl.SSLContext;
|
import java.security.GeneralSecurityException;
|
import java.security.KeyManagementException;
|
import java.security.KeyStoreException;
|
import java.security.NoSuchAlgorithmException;
|
import java.security.cert.X509Certificate;
|
import java.util.*;
|
|
@Component
|
public class EServiceAuthenticationProvider {
|
|
private static final String E_SERVICE_LOGIN_SUCCESS_CODE = "0";
|
private static final Logger log = LoggerFactory.getLogger(EServiceAuthenticationProvider.class);
|
|
@Autowired
|
ApplicationProperties applicationProperty;
|
|
@Autowired
|
ConsultantRepository consultantRepository;
|
|
public Authentication authenticate(EServiceAuthenticationToken authenticationToken) throws AuthenticationException {
|
String account = authenticationToken.getPrincipal();
|
String credentials = authenticationToken.getCredentials();
|
|
if(applicationProperty.isMockLogin()){
|
return getConsultantToken(account, credentials);
|
}
|
|
try {
|
ResponseEntity<EServiceResponse> responseEntity = loginByEService(account, credentials);
|
if(HttpStatus.OK.equals(responseEntity.getStatusCode())) {
|
EServiceResponse eServiceResponse = responseEntity.getBody();
|
|
if(E_SERVICE_LOGIN_SUCCESS_CODE.equals(eServiceResponse.getCode())){
|
return getConsultantToken(account, credentials);
|
}
|
|
throw new RuntimeException("eService login failed, eService response code = " + eServiceResponse.getCode() + ", eService response msg = " + eServiceResponse.getMsg());
|
}
|
|
throw new RuntimeException("eService http error!, response http status code = " + responseEntity.getStatusCode());
|
} catch (JsonProcessingException e) {
|
throw new AuthenticationServiceException("convert to json processing error!");
|
} catch (GeneralSecurityException e) {
|
throw new AuthenticationServiceException("General Security SSL error!");
|
}
|
}
|
|
private UsernamePasswordAuthenticationToken getConsultantToken(String account, String credential) {
|
Consultant consultant = consultantRepository.findOneByAgentNo(account).orElseThrow(() -> new UsernameNotFoundException("consultant is not in db, consultant agentNo = " + account));
|
|
List<GrantedAuthority> grantedAuths = Arrays.asList(new SimpleGrantedAuthority("ROLE_USER"));
|
UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(account, credential, grantedAuths);
|
|
Map<String, String> details = new HashMap<>();
|
details.put(ConsultantDetailEnum.ID.getValue(), consultant.getId().toString());
|
details.put(ConsultantDetailEnum.NAME.getValue(), consultant.getName());
|
details.put(ConsultantDetailEnum.AGENT_NO.getValue(), account);
|
authenticationToken.setDetails(details);
|
|
return authenticationToken;
|
}
|
|
private ResponseEntity<EServiceResponse> loginByEService(String account, String paxxword) throws JsonProcessingException, GeneralSecurityException {
|
RestTemplate restTemplate = getTrustAllRestTemplate();
|
settingMessageConvertesToSpecifyType(restTemplate, MediaType.ALL);
|
|
String urlTemplate = UriComponentsBuilder.fromHttpUrl(applicationProperty.geteServiceLoginUrl())
|
.queryParam("func", applicationProperty.geteServiceLoginFunc())
|
.queryParam("id", account)
|
.queryParam("pin", paxxword)
|
.queryParam("pwd", paxxword)
|
.queryParam("sys", applicationProperty.geteServiceLoginSys())
|
.queryParam("transactionId", UUID.randomUUID().toString())
|
.encode().toUriString();
|
|
log.debug("http get loginByEService, url = {}", urlTemplate);
|
|
HttpHeaders headers = new HttpHeaders();
|
headers.setContentType(MediaType.APPLICATION_JSON);
|
|
HttpEntity<String> entity = new HttpEntity<>(headers);
|
return restTemplate.exchange(urlTemplate, HttpMethod.GET, entity, EServiceResponse.class);
|
}
|
|
private RestTemplate getTrustAllRestTemplate() throws KeyStoreException, NoSuchAlgorithmException, KeyManagementException {
|
SSLContext sslContext = SSLContexts.custom()
|
.loadTrustMaterial(null, (X509Certificate[] x509Certs, String s) -> true)
|
.build();
|
SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext, new NoopHostnameVerifier());
|
CloseableHttpClient httpClient = HttpClients.custom()
|
.setSSLSocketFactory(csf)
|
.build();
|
HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory();
|
requestFactory.setHttpClient(httpClient);
|
requestFactory.setConnectTimeout(300000);
|
requestFactory.setReadTimeout(300000);
|
return new RestTemplate(requestFactory);
|
}
|
|
private void settingMessageConvertesToSpecifyType(RestTemplate restTemplate, MediaType mediaType) {
|
List<HttpMessageConverter<?>> messageConverters = new ArrayList<>();
|
MappingJackson2HttpMessageConverter converter = new MappingJackson2HttpMessageConverter();
|
converter.setSupportedMediaTypes(Collections.singletonList(mediaType));
|
messageConverters.add(converter);
|
restTemplate.setMessageConverters(messageConverters);
|
}
|
}
|
