diff --git a/WebContent/sso/app01.jsp b/WebContent/sso/app01.jsp new file mode 100644 index 0000000..e75459c --- /dev/null +++ b/WebContent/sso/app01.jsp @@ -0,0 +1,48 @@ +<%@ page language="java" contentType="text/html; charset=EUC-KR" + pageEncoding="EUC-KR"%> + + +<% + String user_id = (String)session.getAttribute("SSO_ID"); + String app_id = (String)session.getAttribute("APP_ID"); + String ext_info = (String)session.getAttribute("EXT_INFO"); + String retCode = (String)session.getAttribute("RET_CODE"); + +%> + + + +Insert title here + + +

Single Sign On [<%=user_id %>]

+ + [ 업무시스템 - (SAMPLE_APP)] + + + + + + + + + + + + + + + + + + + + + + + + +
* 사용자ID<%=user_id%>
* SERVICE_NAME<%=app_id%>
* 확장정보<%=ext_info%>
* 인증토큰 상태retCode = [<%=retCode%>] (1000:누락, 1001:시간, 1002:비정상)
+
+ + \ No newline at end of file diff --git a/WebContent/sso/config.jsp b/WebContent/sso/config.jsp new file mode 100644 index 0000000..653d772 --- /dev/null +++ b/WebContent/sso/config.jsp @@ -0,0 +1,295 @@ +<%@ page + import="sun.misc.*, + java.util.*, + java.math.*, + java.net.*, + com.initech.eam.nls.*, + com.initech.eam.api.*, + com.initech.eam.base.*, + com.initech.eam.nls.command.*, + com.initech.eam.smartenforcer.*, + examples.api.*" +%> +<%@page import="com.initech.eam.nls.CookieManager"%> +<%! +/**[INISAFE NEXESS JAVA AGENT]********************************************************************** +* �뾽臾댁떆�뒪�뀥 �꽕�젙 �궗�빆 (�뾽臾� �솚寃쎌뿉 留욊쾶 蹂�寃�) +***************************************************************************************************/ + + +/***[SERVICE CONFIGURATION]***********************************************************************/ + private String SERVICE_NAME = "Web"; + private String SERVER_URL = "http://test.kjbank.com"; + private String SERVER_PORT = "8080"; + private String ASCP_URL = SERVER_URL + ":" + SERVER_PORT + "/se/login_exec.jsp"; +/*************************************************************************************************/ + + +/***[SSO CONFIGURATION]**]***********************************************************************/ + private String NLS_URL = "http://sso.kjbank.com"; + private String NLS_PORT = "13890"; + private String NLS_LOGIN_URL = NLS_URL + ":" + NLS_PORT + "/nls3/clientLogin.jsp"; + private String NLS_LOGOUT_URL= NLS_URL + ":" + NLS_PORT + "/nls3/NCLogout.jsp"; + private String NLS_ERROR_URL = NLS_URL + ":" + NLS_PORT + "/nls3/error.jsp"; + +/***[SSO ND LIST �슫�쁺]**]***********************************************************************/ + private static String ND_URL1 = "http://sso.kjbank.com:5480"; + + + private static Vector PROVIDER_LIST = new Vector(); + + private static final int COOKIE_SESSTION_TIME_OUT = 3000000; + + // �씤利� ����엯 (ID/PW 諛⑹떇 : 1, �씤利앹꽌 : 3) + private String TOA = "1"; + private String SSO_DOMAIN = ".kjbank.com"; + + private static final int timeout = 15000; + private static NXContext context = null; + static{ + List serverurlList = new ArrayList(); + serverurlList.add(ND_URL1); + + context = new NXContext(serverurlList,timeout); + CookieManager.setEncStatus(true); + + PROVIDER_LIST.add("sso.kjbank.com"); + SECode.setCookiePadding("_V42"); + } + + // by Kang + public NXContext getContext() + { + NXContext context = null; + try + { + List serverurlList = new ArrayList(); + serverurlList.add(ND_URL1); + context = new NXContext(serverurlList); + CookieManager.setEncStatus(true); + + PROVIDER_LIST.add("sso.kjbank.com"); + //NLS3 web.xml�쓽 CookiePadding 媛믨낵 媛숈븘�빞 �븳�떎. �븞洹몃읆 寃�利� �럹�씪�궓 + SECode.setCookiePadding("_V42"); + } + catch (Exception e) + { + e.printStackTrace(); + } + return context; + } + + // �넻�빀 SSO ID 議고쉶 + public String getSsoId(HttpServletRequest request) { + String sso_id = null; + sso_id = CookieManager.getCookieValue(SECode.USER_ID, request); + return sso_id; + } + + public String getSystemAccount(String sso_id) { + NXContext context = null; + NXUserAPI userAPI = null; + String retValue = null; + + try { + context = getContext(); + userAPI = new NXUserAPI(context); + System.out.println("##############################################"); + System.out.println("sso_id 2: "+sso_id); + System.out.println("SERVICE_NAME : "+SERVICE_NAME); + System.out.println("##############################################"); + NXAccount account = userAPI.getUserAccount(sso_id, SERVICE_NAME); + System.out.println(account.toString()); + retValue = account.getAccountName(); + System.out.println("retValue = " + retValue); + } catch (Exception e) { + e.printStackTrace(); + } + return retValue; + } + + // �넻�빀 SSO 濡쒓렇�씤�럹�씠吏� �씠�룞 + public void goLoginPage(HttpServletResponse response, String uurl) + throws Exception { + com.initech.eam.nls.CookieManager.addCookie(SECode.USER_URL, uurl, SSO_DOMAIN, response); + com.initech.eam.nls.CookieManager.addCookie(SECode.R_TOA, TOA, SSO_DOMAIN, response); + response.sendRedirect(NLS_LOGIN_URL + "?UURL=" + uurl); + } + + // �넻�빀 SSO 濡쒓렇�씤�럹�씠吏� �씠�룞 + public void goLoginPage(HttpServletResponse response)throws Exception { + CookieManager.addCookie(SECode.USER_URL, ASCP_URL, SSO_DOMAIN, response); + CookieManager.addCookie(SECode.R_TOA, TOA, SSO_DOMAIN, response); + response.sendRedirect(NLS_LOGIN_URL); + } + + // �넻�빀�씤利� �꽭�뀡�쓣 泥댄겕 �븯湲� �쐞�븯�뿬 �궗�슜�릺�뒗 API + public String getEamSessionCheck(HttpServletRequest request,HttpServletResponse response){ + String retCode = ""; + try { + retCode = CookieManager.verifyNexessCookie(request, response, 10, COOKIE_SESSTION_TIME_OUT,PROVIDER_LIST); + } catch(Exception npe) { + npe.printStackTrace(); + } + return retCode; + } + + //ND API瑜� �궗�슜�빐�꽌 荑좏궎寃�利앺븯�뒗寃�(�쁽�옱 �몴以��뿉�꽌�뒗 �궗�슜�븞�븿, 洹쇰뜲 �빐�룄 �릺湲곕뒗 �븿) + public String getEamSessionCheck2(HttpServletRequest request,HttpServletResponse response) + { + String retCode = ""; + try { + NXNLSAPI nxNLSAPI = new NXNLSAPI(context); + retCode = nxNLSAPI.readNexessCookie(request, response, 0, 0); + } catch(Exception npe) { + npe.printStackTrace(); + } + return retCode; + } + + // SSO �뿉�윭�럹�씠吏� URL + public void goErrorPage(HttpServletResponse response, int error_code)throws Exception { + CookieManager.removeNexessCookie(SSO_DOMAIN, response); + CookieManager.addCookie(SECode.USER_URL, ASCP_URL, SSO_DOMAIN, response); + response.sendRedirect(NLS_ERROR_URL + "?errorCode=" + error_code); + } + + /** + * �궗�슜�옄 湲곕낯�젙蹂� 媛��졇�삤湲�. + * @param String userid + * @return Properties + */ + public Properties getUserInfos(String userid) throws Exception { + + NXContext context = null; + context = getContext(); + + NXUserAPI userAPI = new NXUserAPI(context); + Properties propt = null; + + if (userid==null || userid.length() <= 0) + return propt; + + try { + NXUserInfo userInfo = userAPI.getUserInfo(userid); + propt = new Properties(); + //System.out.println("userInfo.getName()=["+userInfo.getName()+"]"); + propt.setProperty("USERID", userInfo.getUserId()); + propt.setProperty("EMAIL", userInfo.getEmail()); + propt.setProperty("ENABLE", String.valueOf(userInfo.getEnable())); + propt.setProperty("STARTVALID", userInfo.getStartValid()); + propt.setProperty("ENDVALID", userInfo.getEndValid()); + propt.setProperty("NAME", userInfo.getName()); + propt.setProperty("ENCPASSWD", userInfo.getEncpasswd()); + propt.setProperty("LASTPASSWDCHANGE", userInfo.getLastpasswdchange()); + propt.setProperty("LastLoginIP", userInfo.getLastLoginIp()); + propt.setProperty("LastLoginTime", userInfo.getLastLoginTime()); + propt.setProperty("LastLoginAuthLevel", userInfo.getLastLoginAuthLevel()); + + } catch (EmptyResultException e) { + e.printStackTrace(); + } catch (APIException e) { + e.printStackTrace(); + } catch (Exception e) { + e.printStackTrace(); + } + return propt; + } + + /** + * �궗�슜�옄�쓽 湲곕낯�젙蹂� 以묒뿉�꽌 �엯�젰�맂 �궎 媛믩쭔 媛�吏�怨� �삩�떎. + * @param String userid + * @param String key + * @return String + */ + public String getUserInfo(String userid, String key) throws Exception { + if(userid==null||userid.length()<1) return null; + + String userInfo = ""; + + try{ + Properties propt = getUserInfos(userid); + userInfo = propt.getProperty(key); + } catch (Exception e) { + //throw e; + e.printStackTrace(); + } + return userInfo; + } + + /** + * �궗�슜�옄 �솗�옣�젙蹂� 議고쉶 + * return : Properties + * �궗�슜�옄媛� 議댁옱�븯吏� �븡嫄곕굹 �솗�옣�븘�뱶媛� �뾾�떎硫� return null + */ + public Properties getUserExFields(String userid) + throws Exception { + NXContext context = getContext(); + NXUserAPI userAPI = new NXUserAPI(context); + Properties prop = null; + NXExternalFieldSet nxefs = null; + + try { + nxefs = userAPI.getUserExternalFields(userid); + prop = new Properties(); + + if (nxefs != null) { + Iterator iter = nxefs.iterator(); + while(iter.hasNext()) { + NXExternalField nxef = (NXExternalField) iter.next(); + if(nxef.getName().equals("PASSINIT")){ + String sPassintVal = (String) nxef.getValue(); + prop.setProperty(nxef.getName(), sPassintVal.equals("") ? "0" : sPassintVal); + } + else + prop.setProperty(nxef.getName(), (String) nxef.getValue()); + //System.out.println("�솗�옣 �븘�뱶 " + nxef.getName() + " : " + nxef.getValue()); + } + } else { + // prop is null + } + } catch (EmptyResultException e) { + // �궗�슜�옄媛� 議댁옱�븯吏� �븡嫄곕굹 �솗�옣�븘�뱶媛� �뾾�쓬 + } catch (APIException e) { + throw e; + //e.printStackTrace(); + } + //System.out.println("getUserExFields:[" + prop + "]"); + return prop; + } + + /** + * �궗�슜�옄�쓽 �듅�젙 �솗�옣 �븘�뱶 �젙蹂� 議고쉶 + * return : String + * �궗�슜�옄媛� 議댁옱�븯吏� �븡嫄곕굹 �솗�옣�븘�뱶媛� �뾾�떎硫� return null + */ + public String getUserExField(String userid, String exName) + throws Exception { + NXContext context = getContext(); + NXUserAPI userAPI = new NXUserAPI(context); + NXExternalField nxef = null; + String returnValue = null; + + try { + +System.out.println("getUserExField==="+ userid ) ; + nxef = userAPI.getUserExternalField(userid, exName); +System.out.println("nxef==="+ (String) nxef.getValue() ) ; + returnValue = (String) nxef.getValue(); + } catch (EmptyResultException e) { + // �궗�슜�옄媛� 議댁옱�븯吏� �븡嫄곕굹 �솗�옣�븘�뱶媛� �뾾�쓬 + } catch (APIException e) { + throw e; + //e.printStackTrace(); + } catch (IllegalArgumentException e) { + throw e; + //e.printStackTrace(); + } + /* + System.out.println("getUserExField:[" + userid + ":" + + exName + ":" + returnValue+ "]"); + */ + return returnValue; + } + +%> diff --git a/WebContent/sso/login_exec.jsp b/WebContent/sso/login_exec.jsp new file mode 100644 index 0000000..a089483 --- /dev/null +++ b/WebContent/sso/login_exec.jsp @@ -0,0 +1,69 @@ +<%@ page language="java" contentType="text/html;charset=EUC-KR" %> +<%@ include file="./config.jsp" %> +<% + + String uurl = null; + String sso_id = null; + String service_id = null; + String ext_info = null; + String retCode = null; + //http://test.kjbank.com:8080/se/login_exec.jsp : 꼭 도메인으로 호출해야 된다. + //1.SSO ID 수신 + sso_id = getSsoId(request); + + // 2. UURL 수신 + uurl = request.getParameter("UURL"); + + if (sso_id == null) { + //uurl 이 없다면, 근데 여기서 uurl 은 뭘 체크하는거지? uurl 에 test.kjbank.com:8080/se/login_exec.jsp 를 넣는구나. + if (uurl == null) uurl = ASCP_URL; + + // 3. SSO 인증 정보가 없으면 통합 로그인 페이지로 이동 + goLoginPage(response, uurl); + return; + } else { + + //4.쿠키 유효성 확인 :0(정상) + retCode = getEamSessionCheck(request,response); + + if(!retCode.equals("0")){ + goErrorPage(response, Integer.parseInt(retCode)); + return; + } + /*********************************************************************************** + * < TO-DO > + * SSO 통합 인증이 완료되었으므로, 업무 시스템 로그인은 건너뛰도록 코드를 수정합니다. + * SSO 에서 제공한 사번은 sso_id 변수에 저장되어 있습니다. + * 시스템에서 필요로 하는 세션 정보를 세팅 코드를 여기에 작성합니다. + ************************************************************************************/ + + //5 확장 정보 조회 + ext_info = getUserExField(sso_id, "CELLPHONENO"); + service_id = SERVICE_NAME; + System.out.println ("SERVICE_NAME : " + service_id); + // + //6.업무시스템에 읽을 사용자 아이디를 세션으로 생성 + /* 변경 전 + String EAM_ID = (String)session.getAttribute("SSO_ID"); + if(EAM_ID == null || EAM_ID.equals("")) { + session.setAttribute("SSO_ID", sso_id); + session.setAttribute("APP_ID", service_id); + session.setAttribute("EXT_INFO", ext_info); + session.setAttribute("RET_CODE", retCode); + } + */ + + + /*변경 후*/ + if(!sso_id.replace(" ", "").equals("")) { + session.setAttribute("SSO_ID", sso_id); + session.setAttribute("APP_ID", service_id); + session.setAttribute("EXT_INFO", ext_info); + session.setAttribute("RET_CODE", retCode); + } + + //7.업무시스템 페이지 호출(세션 페이지 또는 메인페이지 지정) --> 업무시스템에 맞게 URL 수정! + response.sendRedirect(SERVER_URL + ":" + SERVER_PORT + "/se/app01.jsp"); + } +%> + diff --git a/src/main/java/com/eactive/eai/rms/ext/kjb/sso/SsoController.java b/src/main/java/com/eactive/eai/rms/ext/kjb/sso/SsoController.java new file mode 100644 index 0000000..6a2a14c --- /dev/null +++ b/src/main/java/com/eactive/eai/rms/ext/kjb/sso/SsoController.java @@ -0,0 +1,68 @@ +package com.eactive.eai.rms.ext.kjb.sso; + +import com.eactive.eai.rms.data.entity.man.monitoringProperty.service.MonitoringPropertyService; +import com.eactive.ext.kjb.common.KjbProperty; +import com.eactive.ext.kjb.sso.ExtendedInfo; +import com.eactive.ext.kjb.sso.KjbSsoModule; +import com.eactive.ext.kjb.util.KjbPropertyInjector; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Controller; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestParam; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.util.Arrays; +import java.util.Properties; + +@Slf4j +@Controller +public class SsoController { + public static final String PROP_GORUP_ID = "Monitoring"; + + private final KjbPropertyInjector kjbPropertyInjector; + + private final KjbSsoModule ssoModule; + private final KjbProperty prop; + + + public SsoController(MonitoringPropertyService monitoringPropertyService) { + this.kjbPropertyInjector = new KjbPropertyInjector(monitoringPropertyService, PROP_GORUP_ID); + prop = kjbPropertyInjector.inject(new KjbProperty()); + this.ssoModule = KjbSsoModule.getInstance(prop); + } + + @RequestMapping(value = "/sso/login.do") + public String login(HttpServletRequest req, HttpServletResponse res, + @RequestParam("UURL") String uurl) throws Exception { + String ssoId = ssoModule.getSsoId(req); + + log.debug("ssoId : {}", ssoId); + log.debug("uurl : {}", uurl); + + if (StringUtils.isEmpty(uurl)) { + uurl = ssoModule.getAscpUrl(); + } + + if (ssoId == null) { + ssoModule.goLoginPage(res, uurl); + return null; + } else { + String retCode = ssoModule.getEamSessionCheck(req, res); + log.debug("retCode : {}", retCode); + + if ("0".equalsIgnoreCase(retCode)) { + ssoModule.goErrorPage(res, Integer.parseInt(retCode)); + return null; + } + + Properties extendedInfo = ssoModule.getUserExFields(ssoId); + extendedInfo.keySet().forEach( k -> { + log.debug("{} : {}", k, extendedInfo.get(k)); + }); + + return "redirect:/main.do"; + } + } +} diff --git a/src/main/java/com/eactive/ext/kjb/util/KjbPropertyInjector.java b/src/main/java/com/eactive/ext/kjb/util/KjbPropertyInjector.java index 8b4ac6c..b87061c 100644 --- a/src/main/java/com/eactive/ext/kjb/util/KjbPropertyInjector.java +++ b/src/main/java/com/eactive/ext/kjb/util/KjbPropertyInjector.java @@ -19,6 +19,10 @@ public class KjbPropertyInjector { this.groupId = groupId; } + public KjbProperty inject() { + return inject(new KjbProperty()); + } + public T inject(T property) { Class clazz = property.getClass();