Se agrega split para ips y se agrega cambio para cookies en https

parent dc7bfe3d
......@@ -52,7 +52,7 @@ public class InicioAction extends BaseContratoAction {
if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr();
}
ipAddress = ipAddress.split(",")[0];
String userAgent = request.getHeader("User-Agent");
UsuarioDTO usuario = usuarioDAO.obtenerUsuario(autenticacion.getName());
......
......@@ -36,6 +36,7 @@ public class CustomAuthenticationFailureHandler extends SimpleUrlAuthenticationF
if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr();
}
ipAddress = ipAddress.split(",")[0];
String username = request.getParameter("username");
String userAgent = request.getHeader("User-Agent");
......
......@@ -27,7 +27,7 @@ public class CustomAuthenticationSuccessHandler extends SavedRequestAwareAuthent
public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
Authentication authentication) throws ServletException, IOException {
System.out.println("Login successful: " + authentication.getName() + " at " + LocalDateTime.now());
logger.info("Login successful: " + authentication.getName() + " at " + LocalDateTime.now());
usuarioDAO.actualizaEstadoSesion(0, authentication.getName());
......@@ -35,6 +35,7 @@ public class CustomAuthenticationSuccessHandler extends SavedRequestAwareAuthent
if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr();
}
ipAddress = ipAddress.split(",")[0];
String userAgent = request.getHeader("User-Agent");
......
package com.mx.dla.configuration;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.Authentication;
import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
......@@ -18,6 +20,8 @@ public class CustomLogoutSuccessHandler implements LogoutSuccessHandler {
@Autowired
private UsuarioDAO usuarioDAO;
protected Logger logger = LoggerFactory.getLogger("app");
@Override
public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response,
......@@ -27,11 +31,12 @@ public class CustomLogoutSuccessHandler implements LogoutSuccessHandler {
if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr();
}
ipAddress = ipAddress.split(",")[0];
String userAgent = request.getHeader("User-Agent");
if (authentication != null) {
System.out.println("Logout successful: " + authentication.getName() + " at " + LocalDateTime.now());
logger.info("Logout successful: " + authentication.getName() + " at " + LocalDateTime.now());
usuarioDAO.actualizaEstadoSesion(1, authentication.getName());
usuarioDAO.insertaBitacora("LogOut Exitoso", authentication.getName(), ipAddress, userAgent);
}
......
......@@ -37,7 +37,7 @@ public class SessionListener implements HttpSessionListener {
if (usuario != null) {
String ipAdress = event.getSession().getAttribute("ipAdress").toString();
String userAgent = event.getSession().getAttribute("userAgent").toString();
System.out.println("Sesin destruida: " + usuario.getExpediente());
logger.info("Sesin destruida: " + usuario.getExpediente());
usuarioDAO.actualizaEstadoSesion(1, usuario.getExpediente());
usuarioDAO.insertaBitacora("LogOut Exitoso Destroy", usuario.getExpediente(), ipAdress, userAgent);
}
......
......@@ -57,6 +57,9 @@
<!-- Session -->
<session-config>
<session-timeout>3</session-timeout>
<cookie-config>
<secure>true</secure>
</cookie-config>
</session-config>
<jsp-config>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment