[update] 若顧問停用時，將無法登入 (文案待確認)

wayne

2022-02-18 ae4db5435180c44b37f521c463b17f2023ac1d8c

 pamapi/src/main/java/com/pollex/pam/security/provider/OtpAuthenticationProvider.java

@@ -1,16 +1,14 @@
package com.pollex.pam.security.provider;

import com.pollex.pam.web.rest.errors.CustomerNotRegisteredException;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.authentication.AuthenticationCredentialsNotFoundException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.stereotype.Component;

import com.pollex.pam.domain.Customer;
import com.pollex.pam.domain.OtpTmp;
import com.pollex.pam.enums.OtpTmpStatusEnum;
import com.pollex.pam.repository.CustomerRepository;
import com.pollex.pam.security.token.OtpAuthenticationToken;
import com.pollex.pam.service.CustomerAuthService;
@@ -25,13 +23,13 @@

    @Autowired
    CustomerAuthService customerAuthService;
    

    @Autowired
    CustomerRepository customerRepository;
    

    @Autowired
    OtpTmpService otpTmpService;
    

    @Autowired
    OtpUtilService otpUtilService;

@@ -41,26 +39,15 @@
        String indexKey = otpAccount.getIndexKey();
        String otpCode = otpAuthenticationToken.getCredentials();

        otpUtilService.verifyOtp(indexKey, otpCode);
        
       setVerrifiedOtpTmp(account, indexKey);
    	
        otpUtilService.verifyOtp(account, indexKey, otpCode);
       Customer customer = customerRepository.findOneByEmailEqualsOrPhoneEquals(account)
                      .orElse(null);
    	

       if (customer == null) {
          throw new AuthenticationCredentialsNotFoundException("");
          throw new CustomerNotRegisteredException();
       }
    	

       return customerAuthService.buildCustomerAuthToken(customer, otpCode, indexKey);

    }

    private void setVerrifiedOtpTmp(String account, String indexKey) {
       OtpTmp otpTmp = otpTmpService.findByAccountAndIndexKey(account, indexKey);
       otpTmp.setStatus(OtpTmpStatusEnum.VERRIFIED);
       otpTmpService.save(otpTmp);
   }

		
}