From 5f270934260948ba0ea94ece2b9934aff527df8d Mon Sep 17 00:00:00 2001 From: jack <jack.su@pollex.com.tw> Date: 星期五, 01 九月 2023 10:36:47 +0800 Subject: [PATCH] [UPDATE] 移除測試用程式碼 --- pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java | 41 +++++++++++++++++++++++------------------ 1 files changed, 23 insertions(+), 18 deletions(-) diff --git a/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java b/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java index 5fe8dc6..8b2d0e5 100644 --- a/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java +++ b/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java @@ -1,15 +1,10 @@ package com.pollex.pam.web.rest; -import com.pollex.pam.business.aop.logging.audit.AuditLoggingInject; -import com.pollex.pam.business.service.ConsultantService; -import com.pollex.pam.security.jwt.JWTFilter; -import com.pollex.pam.security.jwt.TokenProvider; +import static com.pollex.pam.business.aop.logging.audit.AuditLoggingType.CONSULTANT_LOGIN; -import io.undertow.util.BadRequestException; - -import com.pollex.pam.business.security.token.EServiceAuthenticationToken; -import com.pollex.pam.business.web.errors.OtpLoginFailException; -import com.pollex.pam.business.web.vm.EServiceLoginVM; +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import javax.servlet.http.HttpSession; import org.slf4j.Logger; import org.slf4j.LoggerFactory; @@ -27,11 +22,14 @@ import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RestController; -import static com.pollex.pam.business.aop.logging.audit.AuditLoggingType.CONSULTANT_LOGIN; - -import javax.servlet.http.HttpServletRequest; -import javax.servlet.http.HttpServletResponse; -import javax.servlet.http.HttpSession; +import com.pollex.pam.business.aop.logging.audit.AuditLoggingInject; +import com.pollex.pam.business.security.token.EServiceAuthenticationToken; +import com.pollex.pam.business.service.ConsultantService; +import com.pollex.pam.business.service.util.AesUtil; +import com.pollex.pam.business.web.errors.OtpLoginFailException; +import com.pollex.pam.business.web.vm.EServiceLoginVM; +import com.pollex.pam.security.jwt.JWTFilter; +import com.pollex.pam.security.jwt.TokenProvider; @RestController @RequestMapping("/api/eService") @@ -54,7 +52,14 @@ public ResponseEntity<UserJWTController.JWTToken> authorize( @RequestBody EServiceLoginVM eServiceLoginVM , HttpServletResponse response, HttpServletRequest request, - @PathVariable String imgCode) throws BadRequestException { + @PathVariable String imgCode) throws Exception{ + + + String paswword = AesUtil.aesDecode(eServiceLoginVM.getPassword()); + if(!StringUtils.hasText(paswword)) { + throw new OtpLoginFailException("撖Ⅳ閫�撖仃���"); + } + HttpSession session = request.getSession(); String sessionImpCode = (String) session.getAttribute("img_code"); @@ -67,10 +72,10 @@ throw new OtpLoginFailException("撽�Ⅳ頛詨�隤�"); } - - EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken( + session.setAttribute("img_code", null); + EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken( eServiceLoginVM.getUsername(), - eServiceLoginVM.getPassword() + paswword ); Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authenticationToken); -- Gitblit v1.8.0