Se agrega split para ips y se agrega cambio para cookies en https

parent dc7bfe3d
...@@ -52,7 +52,7 @@ public class InicioAction extends BaseContratoAction { ...@@ -52,7 +52,7 @@ public class InicioAction extends BaseContratoAction {
if (ipAddress == null || ipAddress.isEmpty()) { if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr(); ipAddress = request.getRemoteAddr();
} }
ipAddress = ipAddress.split(",")[0];
String userAgent = request.getHeader("User-Agent"); String userAgent = request.getHeader("User-Agent");
UsuarioDTO usuario = usuarioDAO.obtenerUsuario(autenticacion.getName()); UsuarioDTO usuario = usuarioDAO.obtenerUsuario(autenticacion.getName());
......
...@@ -36,6 +36,7 @@ public class CustomAuthenticationFailureHandler extends SimpleUrlAuthenticationF ...@@ -36,6 +36,7 @@ public class CustomAuthenticationFailureHandler extends SimpleUrlAuthenticationF
if (ipAddress == null || ipAddress.isEmpty()) { if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr(); ipAddress = request.getRemoteAddr();
} }
ipAddress = ipAddress.split(",")[0];
String username = request.getParameter("username"); String username = request.getParameter("username");
String userAgent = request.getHeader("User-Agent"); String userAgent = request.getHeader("User-Agent");
......
...@@ -27,7 +27,7 @@ public class CustomAuthenticationSuccessHandler extends SavedRequestAwareAuthent ...@@ -27,7 +27,7 @@ public class CustomAuthenticationSuccessHandler extends SavedRequestAwareAuthent
public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
Authentication authentication) throws ServletException, IOException { Authentication authentication) throws ServletException, IOException {
System.out.println("Login successful: " + authentication.getName() + " at " + LocalDateTime.now()); logger.info("Login successful: " + authentication.getName() + " at " + LocalDateTime.now());
usuarioDAO.actualizaEstadoSesion(0, authentication.getName()); usuarioDAO.actualizaEstadoSesion(0, authentication.getName());
...@@ -35,6 +35,7 @@ public class CustomAuthenticationSuccessHandler extends SavedRequestAwareAuthent ...@@ -35,6 +35,7 @@ public class CustomAuthenticationSuccessHandler extends SavedRequestAwareAuthent
if (ipAddress == null || ipAddress.isEmpty()) { if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr(); ipAddress = request.getRemoteAddr();
} }
ipAddress = ipAddress.split(",")[0];
String userAgent = request.getHeader("User-Agent"); String userAgent = request.getHeader("User-Agent");
......
package com.mx.dla.configuration; package com.mx.dla.configuration;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.Authentication; import org.springframework.security.core.Authentication;
import org.springframework.security.web.authentication.logout.LogoutSuccessHandler; import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
...@@ -18,6 +20,8 @@ public class CustomLogoutSuccessHandler implements LogoutSuccessHandler { ...@@ -18,6 +20,8 @@ public class CustomLogoutSuccessHandler implements LogoutSuccessHandler {
@Autowired @Autowired
private UsuarioDAO usuarioDAO; private UsuarioDAO usuarioDAO;
protected Logger logger = LoggerFactory.getLogger("app");
@Override @Override
public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response,
...@@ -27,11 +31,12 @@ public class CustomLogoutSuccessHandler implements LogoutSuccessHandler { ...@@ -27,11 +31,12 @@ public class CustomLogoutSuccessHandler implements LogoutSuccessHandler {
if (ipAddress == null || ipAddress.isEmpty()) { if (ipAddress == null || ipAddress.isEmpty()) {
ipAddress = request.getRemoteAddr(); ipAddress = request.getRemoteAddr();
} }
ipAddress = ipAddress.split(",")[0];
String userAgent = request.getHeader("User-Agent"); String userAgent = request.getHeader("User-Agent");
if (authentication != null) { if (authentication != null) {
System.out.println("Logout successful: " + authentication.getName() + " at " + LocalDateTime.now()); logger.info("Logout successful: " + authentication.getName() + " at " + LocalDateTime.now());
usuarioDAO.actualizaEstadoSesion(1, authentication.getName()); usuarioDAO.actualizaEstadoSesion(1, authentication.getName());
usuarioDAO.insertaBitacora("LogOut Exitoso", authentication.getName(), ipAddress, userAgent); usuarioDAO.insertaBitacora("LogOut Exitoso", authentication.getName(), ipAddress, userAgent);
} }
......
...@@ -37,7 +37,7 @@ public class SessionListener implements HttpSessionListener { ...@@ -37,7 +37,7 @@ public class SessionListener implements HttpSessionListener {
if (usuario != null) { if (usuario != null) {
String ipAdress = event.getSession().getAttribute("ipAdress").toString(); String ipAdress = event.getSession().getAttribute("ipAdress").toString();
String userAgent = event.getSession().getAttribute("userAgent").toString(); String userAgent = event.getSession().getAttribute("userAgent").toString();
System.out.println("Sesin destruida: " + usuario.getExpediente()); logger.info("Sesin destruida: " + usuario.getExpediente());
usuarioDAO.actualizaEstadoSesion(1, usuario.getExpediente()); usuarioDAO.actualizaEstadoSesion(1, usuario.getExpediente());
usuarioDAO.insertaBitacora("LogOut Exitoso Destroy", usuario.getExpediente(), ipAdress, userAgent); usuarioDAO.insertaBitacora("LogOut Exitoso Destroy", usuario.getExpediente(), ipAdress, userAgent);
} }
......
...@@ -57,6 +57,9 @@ ...@@ -57,6 +57,9 @@
<!-- Session --> <!-- Session -->
<session-config> <session-config>
<session-timeout>3</session-timeout> <session-timeout>3</session-timeout>
<cookie-config>
<secure>true</secure>
</cookie-config>
</session-config> </session-config>
<jsp-config> <jsp-config>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment