[UPDATE] 解決弱點Use of hard-coded cryptographic key , 把key移到設定檔

jack

2023-09-01 22a5ad3acef0bfb8353dac64d4cbe0d52f6d2a07

 pamapi/src/main/resources/config/application-prod.yml

@@ -15,9 +15,9 @@

logging:
  level:
    ROOT: INFO
    tech.jhipster: INFO
    com.pollex.pam: INFO
    ROOT: DEBUG
    tech.jhipster: DEBUG
    com.pollex.pam: DEBUG

management:
  metrics:
@@ -132,24 +132,25 @@
# PROD環境待確認
application:
  mock-login: false
  otp-web-service-url: https://vtwlifeopensysuat.pru.intranet.asia/pcalife-otp/ws/otpWebService?wsdl
  otp-web-service-url: https://vtwlifeopensystem.pru.intranet.asia/pcalife-otp/ws/otpWebService?wsdl
  otp-web-service-password: es20!%Pass
  otp-web-service-system-type: omo
  e-service-login-url: https://eserviceuat.pcalife.com.tw/sso/chatbotValidate
  e-service-login-url: https://www.eservice.pcalife.com.tw/sso/chatbotValidate
  e-service-login-func: ValidateUsrLogin
  e-service-login-sys: epos
  front-end-domain: 'https://onlineuat.pcalife.com.tw/pam/#'
  front-end-domain: 'https://online.pcalife.com.tw/pam/#'
  sms:
    send-notify-msg: true
    url: https://vtwlifeopensysuat.pru.intranet.asia/MesgQueueMgmnt/rest/smsSendMsgResource
    url:  https://vtwlifeopensystem.pru.intranet.asia/MesgQueueMgmnt/rest/smsSendMsgResource
    source-code: ePos
    sender: POS
    sms-type: '0017'
    subject: '媒合平台通知'
  email:
    send-notify-msg: true
    url: https://vtwlifeopensysuat.pru.intranet.asia/tsgw/mq/mqSendMail
    url: https://vtwlifeopensystem.pru.intranet.asia/tsgw/mq/mqSendMail
    function-id: epos
    sender-email: noreply@pcalife.com.tw
    method: 'PAM_EMAIL_SERVICE'
  file-folder-path: /sfs_omo/AgentPhoto/
  aes-key: PAMKEY1234567890