LifeCenterInterCeptor.java 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237
  1. package com.lemon.lifecenter.common;
  2. import java.io.IOException;
  3. import java.io.PrintWriter;
  4. import javax.servlet.http.HttpServletRequest;
  5. import javax.servlet.http.HttpServletResponse;
  6. import org.slf4j.Logger;
  7. import org.slf4j.LoggerFactory;
  8. import org.springframework.beans.factory.annotation.Autowired;
  9. import org.springframework.stereotype.Component;
  10. import org.springframework.web.servlet.ModelAndView;
  11. import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
  12. import com.lemon.lifecenter.dto.RoleDTO;
  13. import com.lemon.lifecenter.service.RoleService;
  14. @Component
  15. public class LifeCenterInterCeptor extends HandlerInterceptorAdapter {
  16. @Autowired
  17. private LifeCenterConfigVO config;
  18. @Autowired
  19. private RoleService roleService;
  20. private final Logger logger = LoggerFactory.getLogger(this.getClass());
  21. @Override
  22. public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws IOException {
  23. logger.info( "--------------------- InterCeptor Start --------------------- " );
  24. String url = request.getRequestURI().toString();
  25. String port = String.valueOf(request.getServerPort());
  26. Object session = request.getSession().getAttribute( "sesId" );
  27. Object groupIdx = request.getSession().getAttribute( "sesGroupIdx" );
  28. Object sesMId = request.getSession().getAttribute( "sesMId" );
  29. Object sesPasswordChange = request.getSession().getAttribute( "sesPasswordChange" );
  30. Object sesAcceptCheck = request.getSession().getAttribute( "sesAcceptCheck" );
  31. logger.info( "|------------------------------------------------------------------|" );
  32. logger.info( "| URL : " + url + " | IP : " + LifeCenterFunction.getRemoteAddr(request) + " | Port : " + port );
  33. logger.info( "|------------------------------------------------------------------|" );
  34. logger.info( " sesMobileId : " + sesMId + " sesWebId : " + session + " groupIdx : " + groupIdx );
  35. if ( url.contains( "/error" ) || url.contains( "/nonface/wait" ) || url.contains( "/mobile/call" ) ||
  36. url.contains( "/store" ) || url.contains( "/favicon.ico" ) || url.contains( "/mobile/getAppVersion" ) ||
  37. url.contains("/lifeCenter/api") ) {
  38. return true;
  39. }
  40. if( url.contains( "/mobile" ) ) {
  41. if( !url.equals( "/mobile/login" ) && !url.equals( "/mobile/check" ) ) {
  42. if( sesMId == null ) {
  43. response.sendRedirect( "/mobile/login" );
  44. return false;
  45. } else {
  46. logger.info( "IP : " + LifeCenterFunction.getRemoteAddr( request ) + " ID : " + sesMId.toString() + " URL : " + url + " Port : " + port );
  47. Object sesMAcceptCheck = request.getSession().getAttribute( "sesMAcceptCheck" );
  48. // System.err.println( "sesMAcceptCheck : " + sesMAcceptCheck );
  49. if( sesMAcceptCheck != null && sesMAcceptCheck.equals( "Y" ) ) {
  50. if( !url.equals( "/mobile/accept/list" ) ) {
  51. logger.info( "약관 동의 페이지로 이동" );
  52. if( !url.equals( "/mobile/accept/insert" ) && !url.equals( "/mobile/login/logout" ) ) {
  53. LifeCenterFunction.scriptMessage( response, "location.href='/mobile/accept/list';" );
  54. return false;
  55. }
  56. } else {
  57. // LifeCenterFunction.scriptMessage( response, "alertBox({ txt: '약관 동의 후 서비스 이용이 가능합니다.', callBack : function(){ } });" );
  58. }
  59. } else {
  60. if( url.equals( "/mobile/accept/list" ) ) {
  61. response.sendRedirect( "/mobile/menu" );
  62. }
  63. }
  64. }
  65. } else if( url.equals( "/mobile/login" ) ) {
  66. if( sesMId != null ) {
  67. response.sendRedirect( "/mobile/menu" );
  68. return false;
  69. }
  70. }
  71. } else {
  72. if( !url.equals( "/login/staff" ) && !url.equals( "/login/admin" ) && !url.equals( "/login/check" ) ) {
  73. if( session == null ) {
  74. response.sendRedirect( "/login/staff" );
  75. return false;
  76. } else {
  77. logger.info( "IP : " + LifeCenterFunction.getRemoteAddr( request ) + " ID : " + session.toString() + " URL : " + url + " Port : " + port );
  78. /*
  79. * 현재경로에대해 권한 체크
  80. */
  81. RoleDTO roleDTO = new RoleDTO();
  82. roleDTO.setMenuPath( url );
  83. int roleCount = roleService.selectNowPathRoleCheckTotal( roleDTO );
  84. if( roleCount > 0 ) {
  85. Object sesGroupIdx = request.getSession().getAttribute( "sesGroupIdx" );
  86. roleDTO.setGroupIdx( Integer.valueOf( sesGroupIdx.toString() ) );
  87. roleDTO = roleService.selectNowPathRoleCheckData( roleDTO );
  88. String menuType = roleDTO.getMenuType();
  89. boolean roleFlag = true;
  90. if( menuType.equals( "C" ) ) {
  91. if( roleDTO.getCreateYn().equals( "N" ) ) {
  92. roleFlag = false;
  93. }
  94. } else if( menuType.equals( "R" ) ) {
  95. if( roleDTO.getReadYn().equals( "N" ) ) {
  96. roleFlag = false;
  97. }
  98. } else if( menuType.equals( "U" ) ) {
  99. if( roleDTO.getUpdateYn().equals( "N" ) ) {
  100. roleFlag = false;
  101. }
  102. } else if( menuType.equals( "" ) ) {
  103. if( roleDTO.getDeleteYn().equals( "N" ) ) {
  104. roleFlag = false;
  105. }
  106. }
  107. if( roleFlag == false ) {
  108. logger.error( "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" );
  109. logger.error( "현재 경로에 대한 권한이 없습니다 . IP : " + LifeCenterFunction.getRemoteAddr( request ) + " ID : " + session.toString() + " URL : " + url + " Port : " + port );
  110. logger.error( "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" );
  111. // System.err.println( "XMLHttpRequest".equals( request.getHeader( "x-requested-with" ) ) );
  112. // Ajax 요청인지 확인
  113. if( "XMLHttpRequest".equals( request.getHeader( "x-requested-with" ) ) == true ) {
  114. response.sendError( 999 );
  115. } else {
  116. response.sendError( 403 );
  117. }
  118. return false;
  119. }
  120. }
  121. /*
  122. * 약관 동의 체크, 비밀번호 초기화 체크
  123. */
  124. if( sesAcceptCheck != null && sesAcceptCheck.equals( "Y" ) ) {
  125. if( !url.equals( "/accept/list" ) ) {
  126. logger.info( "약관 동의 페이지로 이동" );
  127. if( !url.equals( "/accept/insert" ) && !url.equals( "/login/logout" ) ) {
  128. LifeCenterFunction.scriptMessage( response, "location.href='/accept/list';" );
  129. return false;
  130. }
  131. } else {
  132. // LifeCenterFunction.scriptMessage( response, "alertBox({ txt: '약관 동의 후 서비스 이용이 가능합니다.', callBack : function(){ } });" );
  133. }
  134. } else {
  135. if( url.equals( "/accept/list" ) ) {
  136. response.sendRedirect( "/" );
  137. }
  138. if( sesPasswordChange != null ) {
  139. if( sesPasswordChange.equals( "REQUIRED" ) ) {
  140. if( !url.equals( "/staff/myinfo" ) ) {
  141. logger.info( "비밀번호 변경 필요 -> 비밀번호 변경 페이지로 이동" );
  142. if( !url.equals( "/common/passwordCheck" ) && !url.equals( "/staff/myinfo/update" ) && !url.equals( "/login/logout" ) ) {
  143. LifeCenterFunction.scriptMessage( response, "location.href='/staff/myinfo';" );
  144. return false;
  145. }
  146. } else {
  147. LifeCenterFunction.scriptMessage( response, "alertBox({ txt: '비밀번호 보안 규정 변경으로 인하여 의무적으로 비밀번호 1회 변경 진행 후 서비스 이용이 가능합니다.', callBack : function(){ } });" );
  148. }
  149. } else if( sesPasswordChange.equals( "RESET" ) ) {
  150. if( !url.equals( "/staff/myinfo" ) ) {
  151. logger.info( "초기화 비밀번호로 로그인 -> 비밀번호 변경 페이지로 이동" );
  152. if( !url.equals( "/common/passwordCheck" ) && !url.equals( "/staff/myinfo/update" ) && !url.equals( "/login/logout" ) ) {
  153. LifeCenterFunction.scriptMessage( response, "location.href='/staff/myinfo';" );
  154. return false;
  155. }
  156. } else {
  157. LifeCenterFunction.scriptMessage( response, "alertBox({ txt: '초기화 비밀번호로 로그인시 비밀번호 변경 후 서비스 이용이 가능합니다.', callBack : function(){ } });" );
  158. }
  159. }
  160. }
  161. }
  162. }
  163. } else if( url.equals( "/login/staff" ) || url.equals( "/login/admin" ) ) {
  164. if( session != null ) {
  165. if( groupIdx.equals( "1" ) ) {
  166. response.sendRedirect( "/center/list" );
  167. } else {
  168. response.sendRedirect( "/patient/list" );
  169. }
  170. return false;
  171. }
  172. }
  173. }
  174. return true;
  175. }
  176. @Override
  177. public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
  178. ModelAndView modelAndView) {
  179. //logger.info("Method Executed Time : postHandle");
  180. }
  181. @Override
  182. public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler,
  183. Exception ex) {
  184. //logger.info("Method Completed Time : afterCompletion");
  185. logger.info( "--------------------- InterCeptor afterCompletion ---------------------" );
  186. }
  187. }