From 3b0671286dd280c0172352e6f3d116ecd7051efe Mon Sep 17 00:00:00 2001 From: jack <jack.su@pollex.com.tw> Date: 星期二, 08 八月 2023 15:27:31 +0800 Subject: [PATCH] [UPDATE] 顧問登入如果密碼解密失敗直接拋錯給前端 --- pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java | 8 +++++++- 1 files changed, 7 insertions(+), 1 deletions(-) diff --git a/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java b/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java index fc49c7d..796e2dd 100644 --- a/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java +++ b/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java @@ -54,6 +54,11 @@ , HttpServletResponse response, HttpServletRequest request, @PathVariable String imgCode){ + String paswword = AesUtil.aesDecode(eServiceLoginVM.getPassword()); + if(!StringUtils.hasText(paswword)) { + throw new OtpLoginFailException("撖Ⅳ閫�撖仃���"); + } + HttpSession session = request.getSession(); String sessionImpCode = (String) session.getAttribute("img_code"); @@ -65,10 +70,11 @@ if(!imgCode.equals(sessionImpCode)) { throw new OtpLoginFailException("撽�Ⅳ頛詨�隤�"); } + session.setAttribute("img_code", null); EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken( eServiceLoginVM.getUsername(), - AesUtil.aesDecode(eServiceLoginVM.getPassword()) + paswword ); Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authenticationToken); -- Gitblit v1.8.0