[UPDATE] 解決弱點Insecure block cipher mode, AES CBC安全性上不足所以需要改為GCM模式來做加密

jack

2023-08-31 463c7f43eb7e530967683cdcacffcef786a4e817

 pamapi/src/main/java/com/pollex/pam/web/rest/OtpResource.java

@@ -89,6 +89,8 @@
          throw new OtpLoginFailException("驗證碼輸入錯誤");
       }
       
       session.setAttribute("img_code", null);
    	
       OtpResponseDTO otpResponse;
        if(applicationProperty.isMockLogin()) {
            otpResponse = getMockSendOtpResponse();
@@ -101,6 +103,7 @@
            return ResponseEntity.status(HttpStatus.BAD_REQUEST).body("can not support this login type, loginType = " + login.getLoginType().name());
        }
        otpTmpService.createOtpTmp(login.getAccount(), otpResponse.getIndexKey());
        
        return new ResponseEntity<>(otpResponse, HttpStatus.OK);
    }