[滲透] 密碼加上AES加解密, todo : 171149

jack

2023-08-02 96411b293738e86f76879bb8072dec2b5a7fd3de

[滲透] 密碼加上AES加解密, todo : 171149

 pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java

@@ -25,6 +25,7 @@
import com.pollex.pam.business.aop.logging.audit.AuditLoggingInject;
import com.pollex.pam.business.security.token.EServiceAuthenticationToken;
import com.pollex.pam.business.service.ConsultantService;
import com.pollex.pam.business.service.util.AesUtil;
import com.pollex.pam.business.web.errors.OtpLoginFailException;
import com.pollex.pam.business.web.vm.EServiceLoginVM;
import com.pollex.pam.security.jwt.JWTFilter;
@@ -52,6 +53,7 @@
            @RequestBody EServiceLoginVM eServiceLoginVM
            , HttpServletResponse response, HttpServletRequest request,
            @PathVariable String imgCode){
    	
        HttpSession session = request.getSession();
        String sessionImpCode = (String) session.getAttribute("img_code");
        
@@ -64,10 +66,9 @@
            throw new OtpLoginFailException("驗證碼輸入錯誤");
        }
        session.setAttribute("img_code", null);
    	
        EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken(
        EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken(
            eServiceLoginVM.getUsername(),
            eServiceLoginVM.getPassword()
            AesUtil.aesDecode(eServiceLoginVM.getPassword())
        );

        Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authenticationToken);