[UPDATE] 顧問登入如果密碼解密失敗直接拋錯給前端

jack

2023-08-08 3b0671286dd280c0172352e6f3d116ecd7051efe

[UPDATE] 顧問登入如果密碼解密失敗直接拋錯給前端

 pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java

@@ -54,6 +54,11 @@
            , HttpServletResponse response, HttpServletRequest request,
            @PathVariable String imgCode){
        
        String paswword = AesUtil.aesDecode(eServiceLoginVM.getPassword());
        if(!StringUtils.hasText(paswword)) {
            throw new OtpLoginFailException("密碼解密失敗");
        }
    	
        HttpSession session = request.getSession();
        String sessionImpCode = (String) session.getAttribute("img_code");
        
@@ -65,10 +70,11 @@
        if(!imgCode.equals(sessionImpCode)) {
            throw new OtpLoginFailException("驗證碼輸入錯誤");
        }
    	
        session.setAttribute("img_code", null);
        EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken(
            eServiceLoginVM.getUsername(),
            AesUtil.aesDecode(eServiceLoginVM.getPassword())
            paswword
        );

        Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authenticationToken);