weblogic 테스트 시작
This commit is contained in:
Rinjae
@@ -0,0 +1,302 @@
|
||||
package com.eactive.ext.kjb.sso;
|
||||
|
||||
import com.eactive.ext.kjb.common.KjbProperty;
|
||||
import com.initech.eam.api.*;
|
||||
import com.initech.eam.base.APIException;
|
||||
import com.initech.eam.base.EmptyResultException;
|
||||
import com.initech.eam.nls.CookieManager;
|
||||
import com.initech.eam.smartenforcer.SECode;
|
||||
import lombok.Getter;
|
||||
import lombok.extern.slf4j.Slf4j;
|
||||
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import java.util.Collections;
|
||||
import java.util.Iterator;
|
||||
import java.util.Properties;
|
||||
import java.util.Vector;
|
||||
|
||||
@Slf4j
|
||||
public class KjbSsoModule {
|
||||
private static KjbSsoModule instance;
|
||||
|
||||
private KjbProperty prop;
|
||||
private final NXContext context;
|
||||
@Getter
|
||||
private final Vector<String> providerList;
|
||||
|
||||
|
||||
/***[SERVICE CONFIGURATION]***********************************************************************/
|
||||
private final String SERVICE_NAME = "eapim-admin";
|
||||
@Getter
|
||||
private final String ascpUrl;
|
||||
|
||||
/***[SSO CONFIGURATION]**]***********************************************************************/
|
||||
private final String NLS_URL = "http://sso.kjbank.com";
|
||||
private final String NLS_PORT = "13890";
|
||||
private final String NLS_LOGIN_URL = NLS_URL + ":" + NLS_PORT + "/nls3/clientLogin.jsp";
|
||||
private final String NLS_LOGOUT_URL= NLS_URL + ":" + NLS_PORT + "/nls3/NCLogout.jsp";
|
||||
private final String NLS_ERROR_URL = NLS_URL + ":" + NLS_PORT + "/nls3/error.jsp";
|
||||
|
||||
/***[SSO ND LIST 운영]**]***********************************************************************/
|
||||
private final static String ND_URL1 = "http://sso.kjbank.com:5480";
|
||||
private final static Vector PROVIDER_LIST = new Vector();
|
||||
private final static int COOKIE_SESSTION_TIME_OUT = 3000000;
|
||||
|
||||
// 인증 타입 (ID/PW 방식 : 1, 인증서 : 3)
|
||||
private final String TOA = "1";
|
||||
private final String PROVIDER_DOMAIN = "sso.kjbank.com";
|
||||
private final String SSO_DOMAIN = ".kjbank.com";
|
||||
private final String COOKIE_PADDING = "_V42";
|
||||
|
||||
private static final int timeout = 15000;
|
||||
|
||||
|
||||
public synchronized static KjbSsoModule getInstance(KjbProperty kjbProperty) {
|
||||
if (instance == null) {
|
||||
instance = new KjbSsoModule(kjbProperty);
|
||||
}
|
||||
return instance;
|
||||
}
|
||||
|
||||
private KjbSsoModule(KjbProperty kjbProperty) {
|
||||
this.prop = kjbProperty;
|
||||
|
||||
context = new NXContext(Collections.singletonList(ND_URL1), timeout);
|
||||
|
||||
ascpUrl = prop.getUrl() + prop.getSsoAscpUri();
|
||||
|
||||
this.providerList = new Vector<>();
|
||||
providerList.add(PROVIDER_DOMAIN);
|
||||
|
||||
CookieManager.setEncStatus(true);
|
||||
SECode.setCookiePadding(COOKIE_PADDING);
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* 통합 SSO ID 조회
|
||||
* @param request
|
||||
* @return
|
||||
*/
|
||||
public String getSsoId(HttpServletRequest request) {
|
||||
String sso_id = null;
|
||||
sso_id = CookieManager.getCookieValue(SECode.USER_ID, request);
|
||||
return sso_id;
|
||||
}
|
||||
|
||||
public String getSystemAccount(String sso_id) {
|
||||
NXUserAPI userAPI = null;
|
||||
String retValue = null;
|
||||
|
||||
try {
|
||||
userAPI = new NXUserAPI(context);
|
||||
log.info("##############################################");
|
||||
log.info("sso_id 2: "+sso_id);
|
||||
log.info("SERVICE_NAME : "+ SERVICE_NAME);
|
||||
log.info("##############################################");
|
||||
NXAccount account = userAPI.getUserAccount(sso_id, SERVICE_NAME);
|
||||
log.info(account.toString());
|
||||
retValue = account.getAccountName();
|
||||
log.info("retValue = " + retValue);
|
||||
} catch (Exception e) {
|
||||
log.error("KjbSsoModule Exception", e);
|
||||
}
|
||||
return retValue;
|
||||
}
|
||||
|
||||
/**
|
||||
* 통합 SSO 로그인페이지 이동
|
||||
* @param response
|
||||
* @param uurl
|
||||
* @throws Exception
|
||||
*/
|
||||
public void goLoginPage(HttpServletResponse response, String uurl)
|
||||
throws Exception {
|
||||
CookieManager.addCookie(SECode.USER_URL, uurl, ".kjbank.com", response);
|
||||
CookieManager.addCookie(SECode.R_TOA, TOA, ".kjbank.com", response);
|
||||
response.sendRedirect(NLS_LOGIN_URL + "?UURL=" + uurl);
|
||||
}
|
||||
|
||||
/**
|
||||
* 통합 SSO 로그인페이지 이동
|
||||
* @param response
|
||||
* @throws Exception
|
||||
*/
|
||||
public void goLoginPage(HttpServletResponse response) throws Exception {
|
||||
CookieManager.addCookie(SECode.USER_URL, ascpUrl, SSO_DOMAIN, response);
|
||||
CookieManager.addCookie(SECode.R_TOA, TOA, SSO_DOMAIN, response);
|
||||
response.sendRedirect(NLS_LOGIN_URL);
|
||||
}
|
||||
|
||||
/**
|
||||
* 통합인증 세션을 체크 하기 위하여 사용되는 API
|
||||
* @param request
|
||||
* @param response
|
||||
* @return
|
||||
*/
|
||||
public String getEamSessionCheck(HttpServletRequest request,HttpServletResponse response){
|
||||
String retCode = "";
|
||||
try {
|
||||
retCode = CookieManager.verifyNexessCookie(request, response, 10, COOKIE_SESSTION_TIME_OUT,PROVIDER_LIST);
|
||||
} catch(Exception npe) {
|
||||
npe.printStackTrace();
|
||||
}
|
||||
return retCode;
|
||||
}
|
||||
|
||||
/**
|
||||
* ND API를 사용해서 쿠키검증하는것(현재 표준에서는 사용안함, 근데 해도 되기는 함)
|
||||
* @param request
|
||||
* @param response
|
||||
* @return
|
||||
*/
|
||||
public String getEamSessionCheck2(HttpServletRequest request,HttpServletResponse response)
|
||||
{
|
||||
String retCode = "";
|
||||
try {
|
||||
NXNLSAPI nxNLSAPI = new NXNLSAPI(context);
|
||||
retCode = nxNLSAPI.readNexessCookie(request, response, 0, 0);
|
||||
} catch(Exception npe) {
|
||||
log.error("KjbSsoModule-getEamSessionCheck2 Exception", npe);
|
||||
}
|
||||
return retCode;
|
||||
}
|
||||
|
||||
/**
|
||||
* SSO 에러페이지 URL
|
||||
* @param response
|
||||
* @param error_code
|
||||
* @throws Exception
|
||||
*/
|
||||
public void goErrorPage(HttpServletResponse response, int error_code)throws Exception {
|
||||
CookieManager.removeNexessCookie(SSO_DOMAIN, response);
|
||||
CookieManager.addCookie(SECode.USER_URL, ascpUrl, SSO_DOMAIN, response);
|
||||
response.sendRedirect(NLS_ERROR_URL + "?errorCode=" + error_code);
|
||||
}
|
||||
|
||||
/**
|
||||
* 사용자 기본정보 가져오기.
|
||||
* @param userid
|
||||
* @return Properties
|
||||
*/
|
||||
public Properties getUserInfos(String userid) throws Exception {
|
||||
NXUserAPI userAPI = new NXUserAPI(context);
|
||||
Properties propt = null;
|
||||
|
||||
if (userid==null || userid.length() <= 0)
|
||||
return propt;
|
||||
|
||||
try {
|
||||
NXUserInfo userInfo = userAPI.getUserInfo(userid);
|
||||
propt = new Properties();
|
||||
propt.setProperty("USERID", userInfo.getUserId());
|
||||
propt.setProperty("EMAIL", userInfo.getEmail());
|
||||
propt.setProperty("ENABLE", String.valueOf(userInfo.getEnable()));
|
||||
propt.setProperty("STARTVALID", userInfo.getStartValid());
|
||||
propt.setProperty("ENDVALID", userInfo.getEndValid());
|
||||
propt.setProperty("NAME", userInfo.getName());
|
||||
propt.setProperty("ENCPASSWD", userInfo.getEncpasswd());
|
||||
propt.setProperty("LASTPASSWDCHANGE", userInfo.getLastpasswdchange());
|
||||
propt.setProperty("LastLoginIP", userInfo.getLastLoginIp());
|
||||
propt.setProperty("LastLoginTime", userInfo.getLastLoginTime());
|
||||
propt.setProperty("LastLoginAuthLevel", userInfo.getLastLoginAuthLevel());
|
||||
|
||||
} catch (Exception e) {
|
||||
log.error("KjbSsoModule-getUserInfos Exception", e);
|
||||
throw e;
|
||||
}
|
||||
|
||||
return propt;
|
||||
}
|
||||
|
||||
/**
|
||||
* 사용자의 기본정보 중에서 입력된 키 값만 가지고 온다.
|
||||
* @param userid
|
||||
* @param key
|
||||
* @return
|
||||
* @throws Exception
|
||||
*/
|
||||
public String getUserInfo(String userid, String key) throws Exception {
|
||||
if(userid==null|| userid.isEmpty()) return null;
|
||||
|
||||
String userInfo = "";
|
||||
|
||||
try{
|
||||
Properties propt = getUserInfos(userid);
|
||||
userInfo = propt.getProperty(key);
|
||||
} catch (Exception e) {
|
||||
log.error("KjbSsoModule-getUserInfos Exception", e);
|
||||
throw e;
|
||||
}
|
||||
return userInfo;
|
||||
}
|
||||
|
||||
/**
|
||||
* 사용자 확장정보 조회
|
||||
* return : Properties
|
||||
* 사용자가 존재하지 않거나 확장필드가 없다면 return null
|
||||
*/
|
||||
@SuppressWarnings("rawtypes")
|
||||
public Properties getUserExFields(String userid)
|
||||
throws Exception {
|
||||
NXUserAPI userAPI = new NXUserAPI(context);
|
||||
Properties prop = null;
|
||||
NXExternalFieldSet nxefs = null;
|
||||
|
||||
try {
|
||||
nxefs = userAPI.getUserExternalFields(userid);
|
||||
prop = new Properties();
|
||||
|
||||
if (nxefs != null) {
|
||||
Iterator iter = nxefs.iterator();
|
||||
while(iter.hasNext()) {
|
||||
NXExternalField nxef = (NXExternalField) iter.next();
|
||||
if(nxef.getName().equals("PASSINIT")){
|
||||
String sPassintVal = (String) nxef.getValue();
|
||||
prop.setProperty(nxef.getName(), sPassintVal.equals("") ? "0" : sPassintVal);
|
||||
}
|
||||
else
|
||||
prop.setProperty(nxef.getName(), (String) nxef.getValue());
|
||||
//System.out.println("확장 필드 " + nxef.getName() + " : " + nxef.getValue());
|
||||
}
|
||||
} else {
|
||||
// prop is null
|
||||
log.debug("KjbSsoModule-getUserExFields property is null");
|
||||
}
|
||||
} catch (EmptyResultException e) {
|
||||
// 사용자가 존재하지 않거나 확장필드가 없음
|
||||
} catch (APIException e) {
|
||||
throw e;
|
||||
//e.printStackTrace();
|
||||
}
|
||||
//System.out.println("getUserExFields:[" + prop + "]");
|
||||
return prop;
|
||||
}
|
||||
|
||||
/**
|
||||
* 사용자의 특정 확장 필드 정보 조회
|
||||
* return : String
|
||||
* 사용자가 존재하지 않거나 확장필드가 없다면 return null
|
||||
*/
|
||||
public String getUserExField(String userid, String exName)
|
||||
throws Exception {
|
||||
NXUserAPI userAPI = new NXUserAPI(context);
|
||||
NXExternalField nxef = null;
|
||||
String returnValue = null;
|
||||
|
||||
try {
|
||||
log.debug("KjbSsoModule-getUserExField userid : {}", userid);
|
||||
nxef = userAPI.getUserExternalField(userid, exName);
|
||||
log.debug("KjbSsoModule-getUserExField nxef === {}", nxef.getValue());
|
||||
returnValue = (String) nxef.getValue();
|
||||
} catch (EmptyResultException e) {
|
||||
// 사용자가 존재하지 않거나 확장필드가 없음
|
||||
} catch (Exception e) {
|
||||
log.error("KjbSsoModule-getUserExField Exception", e);
|
||||
throw e;
|
||||
}
|
||||
|
||||
return returnValue;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user