From d39218d56f5d1c96667035e969d414aa8a2fb81e Mon Sep 17 00:00:00 2001 From: jack <jack.su@pollex.com.tw> Date: 星期二, 08 八月 2023 17:20:37 +0800 Subject: [PATCH] [UPDATE] 更新前端aes加密密碼的實作 --- pamapi/src/main/java/com/pollex/pam/web/rest/TestLoginResource.java | 61 +++++++++++------------------- 1 files changed, 22 insertions(+), 39 deletions(-) diff --git a/pamapi/src/main/java/com/pollex/pam/web/rest/TestLoginResource.java b/pamapi/src/main/java/com/pollex/pam/web/rest/TestLoginResource.java index f9b11dc..8c12c37 100644 --- a/pamapi/src/main/java/com/pollex/pam/web/rest/TestLoginResource.java +++ b/pamapi/src/main/java/com/pollex/pam/web/rest/TestLoginResource.java @@ -1,17 +1,10 @@ package com.pollex.pam.web.rest; -import com.fasterxml.jackson.databind.ObjectMapper; import com.pollex.pam.config.ApplicationProperties; -import com.pollex.pam.security.jwt.JWTFilter; import com.pollex.pam.security.jwt.TokenProvider; -import com.pollex.pam.security.token.EServiceAuthenticationToken; -import com.pollex.pam.security.token.OtpAuthenticationToken; -import com.pollex.pam.service.LoginService; import com.pollex.pam.service.OtpWebService; -import com.pollex.pam.service.dto.EServiceRequest; -import com.pollex.pam.service.dto.EServiceResponse; -import com.pollex.pam.service.dto.OtpResponseDTO; -import com.pollex.pam.web.rest.vm.OtpAccount; +import com.pollex.pam.business.service.dto.EServiceResponse; +import com.pollex.pam.business.service.dto.OtpResponseDTO; import org.apache.http.conn.ssl.NoopHostnameVerifier; import org.apache.http.conn.ssl.SSLConnectionSocketFactory; import org.apache.http.impl.client.CloseableHttpClient; @@ -25,15 +18,11 @@ import org.springframework.http.converter.HttpMessageConverter; import org.springframework.http.converter.json.MappingJackson2HttpMessageConverter; import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; -import org.springframework.security.core.Authentication; -import org.springframework.security.core.context.SecurityContextHolder; import org.springframework.web.bind.annotation.*; import org.springframework.web.client.RestTemplate; -import tw.com.softleader.otp.ws.OtpWebServicePortBindingStub; +import org.springframework.web.util.UriComponentsBuilder; import javax.net.ssl.SSLContext; -import javax.xml.rpc.ServiceException; -import java.rmi.RemoteException; import java.security.KeyManagementException; import java.security.KeyStoreException; import java.security.NoSuchAlgorithmException; @@ -41,6 +30,7 @@ import java.util.ArrayList; import java.util.Collections; import java.util.List; +import java.util.UUID; // todo嚗����login�靘蹂蝙��get��撘�嚗��歇��OtpResource��ServiceResource嚗蜓閬����� @@ -50,9 +40,6 @@ public class TestLoginResource { private final static Logger log = LoggerFactory.getLogger(TestLoginResource.class); - - @Autowired - LoginService loginService; @Autowired ApplicationProperties applicationProperty; @@ -67,48 +54,44 @@ TokenProvider tokenProvider; @GetMapping("/bySMS") - public ResponseEntity<OtpResponseDTO> sendOtpBySMS(@RequestParam("phone") String phone) throws ServiceException, RemoteException { + public ResponseEntity<OtpResponseDTO> sendOtpBySMS(@RequestParam("phone") String phone) { final OtpResponseDTO otpResponseDTO = otpWebService.sendByPhone(phone); return new ResponseEntity<>(otpResponseDTO, HttpStatus.OK); } @GetMapping("/byEmail") - public ResponseEntity<OtpResponseDTO> sendOtpByEmail(@RequestParam("email") String email) throws RemoteException, ServiceException { + public ResponseEntity<OtpResponseDTO> sendOtpByEmail(@RequestParam("email") String email) { final OtpResponseDTO otpResponseDTO = otpWebService.sendByEmail(email); return new ResponseEntity<>(otpResponseDTO, HttpStatus.OK); } @GetMapping("/verifyOtp") - public ResponseEntity<OtpResponseDTO> verifyOtp(@RequestParam("account") String account, @RequestParam("indexKey") String indexKey, @RequestParam("otpCode") String otpCode) throws ServiceException, RemoteException { - OtpWebServicePortBindingStub stub = otpWebService.getOtpWebServicePortBindingStub(); - log.info("call OtpService verifyOTP, systemType = {}, service password = {}, indexKey = {}, paxxword = {}", - applicationProperty.getOtpWebServiceSystemType(), applicationProperty.getOtpWebServicePassword(), indexKey, otpCode); - - String[] result = - stub.verifyOtp(applicationProperty.getOtpWebServicePassword(), applicationProperty.getOtpWebServiceSystemType(), indexKey, otpCode); - - return new ResponseEntity<>(new OtpResponseDTO(result), HttpStatus.OK); + public ResponseEntity<OtpResponseDTO> verifyOtp(@RequestParam("account") String account, @RequestParam("indexKey") String indexKey, @RequestParam("otpCode") String otpCode) { + final OtpResponseDTO otpResponseDTO = otpWebService.verifyOTP(indexKey, otpCode); + return new ResponseEntity<>(otpResponseDTO, HttpStatus.OK); } @GetMapping("/byEService") public ResponseEntity<EServiceResponse> loginByEService(@RequestParam("account") String account, @RequestParam("password") String password) throws Exception { - EServiceRequest dto = new EServiceRequest(); - dto.setFunc("ValidateUserLogin"); - dto.setId(account); - dto.setPin(password); - dto.setPwd(password); - dto.setSys("epos"); - - String dtoJson = new ObjectMapper().writeValueAsString(dto); - RestTemplate restTemplate = getTrustAllRestTemplate(); settingMessageConvertesToSpecifyType(restTemplate, MediaType.ALL); + + String urlTemplate = UriComponentsBuilder.fromHttpUrl(applicationProperty.geteServiceLoginUrl()) + .queryParam("func", applicationProperty.geteServiceLoginFunc()) + .queryParam("id", account) + .queryParam("pin", password) + .queryParam("pwd", password) + .queryParam("sys", applicationProperty.geteServiceLoginSys()) + .queryParam("transactionId", UUID.randomUUID().toString()) + .encode().toUriString(); + + log.debug("http get loginByEService, url = {}", urlTemplate); HttpHeaders headers = new HttpHeaders(); headers.setContentType(MediaType.APPLICATION_JSON); - HttpEntity<String> entity = new HttpEntity<>(dtoJson, headers); - return restTemplate.exchange(applicationProperty.geteServiceLoginUrl(), HttpMethod.POST, entity, EServiceResponse.class); + HttpEntity<String> entity = new HttpEntity<>(headers); + return restTemplate.exchange(urlTemplate, HttpMethod.GET, entity, EServiceResponse.class); } private void settingMessageConvertesToSpecifyType(RestTemplate restTemplate, MediaType mediaType) { -- Gitblit v1.8.0