From 22a5ad3acef0bfb8353dac64d4cbe0d52f6d2a07 Mon Sep 17 00:00:00 2001 From: jack <jack.su@pollex.com.tw> Date: 星期五, 01 九月 2023 10:16:41 +0800 Subject: [PATCH] [UPDATE] 解決弱點Use of hard-coded cryptographic key , 把key移到設定檔 --- pamapi/src/main/resources/config/application-uat.yml | 26 ++++++++++++++++++++------ 1 files changed, 20 insertions(+), 6 deletions(-) diff --git a/pamapi/src/main/resources/config/application-uat.yml b/pamapi/src/main/resources/config/application-uat.yml index ede29e1..03875c1 100644 --- a/pamapi/src/main/resources/config/application-uat.yml +++ b/pamapi/src/main/resources/config/application-uat.yml @@ -32,11 +32,9 @@ indent-output: true datasource: type: com.zaxxer.hikari.HikariDataSource - url: jdbc:postgresql://VTWLIFELDPOS01:5006/omo?currentSchema=omo - username: omo_svc - password: omo_svc-100784c hikari: poolName: Hikari + jndi-name: java:jboss/jdbc/pam jpa: database-platform: tech.jhipster.domain.util.FixedPostgreSQL10Dialect liquibase: @@ -111,9 +109,25 @@ application: mock-login: false - otp-web-service-url: https://vtwlifeopensysuat.pru.intranet.asia:443/pcalife-otp/ws/otpWebService?wsdl + otp-web-service-url: https://vtwlifeopensysuat.pru.intranet.asia/pcalife-otp/ws/otpWebService?wsdl otp-web-service-password: es20!%Pass - otp-web-service-system-type: epos - e-service-login-url: https://eserviceuat.pcalife.com.tw/sso/chatbotValidate + otp-web-service-system-type: omo + e-service-login-url: https://onlineuat.pcalife.com.tw/sso/chatbotValidate e-service-login-func: ValidateUsrLogin e-service-login-sys: epos + front-end-domain: 'https://onlineuat.pcalife.com.tw/pam/#' + sms: + send-notify-msg: true + url: https://vtwlifeopensysuat.pru.intranet.asia/MesgQueueMgmnt/rest/smsSendMsgResource + source-code: ePos + sender: POS + sms-type: '0017' + subject: '慦�像��' + email: + send-notify-msg: true + url: https://vtwlifeopensysuat.pru.intranet.asia/tsgw/mq/mqSendMail + function-id: epos + sender-email: noreply@pcalife.com.tw + method: 'PAM_EMAIL_SERVICE' + file-folder-path: /sfs_omo/AgentPhoto/ + aes-key: PAMKEY1234567890 -- Gitblit v1.8.0