From 96411b293738e86f76879bb8072dec2b5a7fd3de Mon Sep 17 00:00:00 2001
From: jack <jack.su@pollex.com.tw>
Date: 星期三, 02 八月 2023 17:30:30 +0800
Subject: [PATCH] [滲透] 密碼加上AES加解密, todo : 171149
---
pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java | 7 ++++---
1 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java b/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java
index 8c9dd25..fc49c7d 100644
--- a/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java
+++ b/pamapi/src/main/java/com/pollex/pam/web/rest/EServiceResource.java
@@ -25,6 +25,7 @@
import com.pollex.pam.business.aop.logging.audit.AuditLoggingInject;
import com.pollex.pam.business.security.token.EServiceAuthenticationToken;
import com.pollex.pam.business.service.ConsultantService;
+import com.pollex.pam.business.service.util.AesUtil;
import com.pollex.pam.business.web.errors.OtpLoginFailException;
import com.pollex.pam.business.web.vm.EServiceLoginVM;
import com.pollex.pam.security.jwt.JWTFilter;
@@ -52,6 +53,7 @@
@RequestBody EServiceLoginVM eServiceLoginVM
, HttpServletResponse response, HttpServletRequest request,
@PathVariable String imgCode){
+
HttpSession session = request.getSession();
String sessionImpCode = (String) session.getAttribute("img_code");
@@ -64,10 +66,9 @@
throw new OtpLoginFailException("撽�Ⅳ頛詨�隤�");
}
session.setAttribute("img_code", null);
-
- EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken(
+ EServiceAuthenticationToken authenticationToken = new EServiceAuthenticationToken(
eServiceLoginVM.getUsername(),
- eServiceLoginVM.getPassword()
+ AesUtil.aesDecode(eServiceLoginVM.getPassword())
);
Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authenticationToken);
--
Gitblit v1.8.0