Z-Archive » Maybank Projects » M2U UPASS Project

/*

 * Copyright TFOS 2009

 * date                description ---

 * 20090420        include max_used feature

 */

package my.com.upass.tac;

import java.util.Calendar;

import java.util.Date;

import java.util.GregorianCalendar;

import my.com.upass.ConfigBean;

import my.com.upass.Constants;

import my.com.upass.pojo.TacBean;

import org.apache.log4j.Logger;

public class TacController {

        private static final Logger logger = Logger.getLogger(TacController.class);

        private int timeOut = 60000;

        private int maxError = 3;

        private int maxUse = 3;

        private int lifespanTimeout = 3600;

        private int repeatTimeout = 180;

        private TacBean tacBeanObject;

        private ConfigBean config;

        public TacController(TacBean tacBeanObject, ConfigBean config) throws Exception {

                this.tacBeanObject = tacBeanObject;

                this.config = config;

                init();

        }

        private void init() {

                try {

                        maxError = config.getTACMaxTryError();

                        maxUse = config.getTACMaxUse();

                        timeOut = config.getTACTTimeOut();

                        repeatTimeout = config.getTACRepeatTimeOut();

                        lifespanTimeout = config.getTACLifeSpanTimeOut();

                } catch (Exception e) {

                        logger.error("ERR: TAC_CONTROLLER: Property entry not found..", e);

                }

        }

        public void setObject(TacBean tacBeanObject) {

                this.tacBeanObject = tacBeanObject;

        }

        public TacBean getUpdatedObject() {

                return (TacBean) tacBeanObject;

        }

        // /////////////////////////////////////////////////////////////////////

        // Public Generate TAC

        // Valid State : SET to Constants.PASSWD_STATUS_ENABLE

        //

        // 20090603:

        // if SessionID = null, then continue

        // if SessionID <> null, if in same session, check REPEAT_TIMEOUT

        //

        // /////////////////////////////////////////////////////////////////////

        public String GenerateTac(String sessionID, String nonce) {

                String s = null;

                boolean isSession = false;

                boolean isSameSession = true;

                boolean isFirstTimeRequest = true;

                // determine if from same_session and null_session

                if (sessionID != null) {

                        isSession = true;

                        s = tacBeanObject.getSessionId();

                        if (!sessionID.equals(s)) { // new session

                                isSameSession = false;

                                tacBeanObject.setSessionId(sessionID);

                        }

                }

                tacBeanObject.setNonce(nonce);

                // determine if first time TAC request

                isFirstTimeRequest = (tacBeanObject.getDateCreated() == null) ? true : false;

                // logger.info(

                // "+isFirstTimeRequest:" + isFirstTimeRequest +

                // "| +isSession:" + isSession +

                // "| +isSameSession:" + isSameSession + "[" + s + "][" + sessionID + "]");

                if ((!isSession || isSameSession) && !isFirstTimeRequest) {

                        Calendar expiryDate = new GregorianCalendar();

                        expiryDate.setTime(tacBeanObject.getDateCreated());

                        expiryDate.add(Calendar.SECOND, +repeatTimeout);

                        Date ed = expiryDate.getTime();

                        if (ed.after(new Date())) {

                                return "***" + Constants.ERR_TAC_ALREADY_EXIST;

                        }

                }

                TacCrypto tac = new TacCrypto(tacBeanObject);

                String sTac = tac.getTac();

                String offset = tac.getOffset();

                Date timestamp = tac.getTimeStamp();

                // logger.info( "+" + sTac + " | " + offset + " | " + timestamp);

                tacBeanObject.setCipherText(offset);

                tacBeanObject.setDateCreated(timestamp);

                tacBeanObject.setDateFirstUsed(null);

                tacBeanObject.setState(Constants.PASSWD_STATUS_ENABLE);

                tacBeanObject.setUseCount(0); // 20090420 :: cater for max use

                return sTac;

        } // end generate

        // /////////////////////////////////////////////////////////////////////

        // Public Verify TAC

        // Valid State : Constants.PASSWD_STATUS_ENABLE

        // SET to PASSWD_STATUS_ONETIMEUSED

        // /////////////////////////////////////////////////////////////////////

        public int VerifyTac(String inTac) {

                return VerifyTac(inTac, null, null);

        }

        public int VerifyTac(String inTac, String sessionID) {

                return VerifyTac(inTac, null, null);

        }

        public int VerifyTac(String inTac, String sessionID, String nonce) {

                int rc = Constants.ERR_UNKNOWN;

                // if session ID present, it must matched

                if (sessionID != null) {

                        String s = tacBeanObject.getSessionId();

                        // s.trim();

                        if (!sessionID.equals(s)) {

                                return Constants.ERR_INVALID_SESSION;

                        }

                }

                tacBeanObject.setNonce(nonce); // nonce is not store in db, so must set here

                if (tacBeanObject.getCipherText() == null ||

                                tacBeanObject.getDateCreated() == null) {

                        return Constants.ERR_INVALID_STATE; // error

                }

                Date ts = new Date();

                tacBeanObject.setDateLastUsed(ts);

                if (tacBeanObject.getState() != Constants.PASSWD_STATUS_ENABLE) {

                        tacBeanObject.setErrorCount(tacBeanObject.getErrorCount() + 1);

                        return Constants.ERR_INVALID_STATE; // error

                }

                if (tacBeanObject.getErrorCount() > maxError - 1) {

                        tacBeanObject.setErrorCount(tacBeanObject.getErrorCount() + 1);

                        return Constants.ERR_EXCEED_MAX_TRIES; // error

                }

                // tacBeanObject.setTUseCount( tacBeanObject.getTUseCount() + 1 );

                if (maxUse > 0 & tacBeanObject.getUseCount() >= maxUse) {

                        return Constants.ERR_EXCEED_MAX_USE;

                }

                TacCrypto tac = new TacCrypto(tacBeanObject, inTac, timeOut);

                if (tacBeanObject.getDateFirstUsed() == null) {

                        tacBeanObject.setDateFirstUsed(ts);

                } else {

                        // check life span upon first usage

                        Calendar expiryDate = Calendar.getInstance();

                        expiryDate.add(Calendar.SECOND, +lifespanTimeout);

                        Date ed = expiryDate.getTime();

                        if (tacBeanObject.getDateCreated().after(ed)) {

                                // logger.info("lifespanTimeout after " + ed);

                                return Constants.ERR_PASSWD_EXPIRED;

                        }

                }

                if (tac.getIsValid()) {

                        tacBeanObject.setErrorCount(0); // reset error count

                        tacBeanObject.setUseCount(tacBeanObject.getUseCount() + 1); // add 1 to use_count

                        return Constants.ERR_SUCCESS;

                } else {

                        String sc = tac.getStatusCode();

                        if (sc.substring(0, 1).equals("1")) { // TAC mismatched

                                tacBeanObject.setErrorCount(tacBeanObject.getErrorCount() + 1);

                                return Constants.ERR_INVALID_CREDENTIAL; // don't waste time to chk further, return

                        }

                        if (sc.substring(1, 2).equals("1")) { // TAC expired

                                return Constants.ERR_PASSWD_EXPIRED;

                        }

                }

                return rc;

        }// end verify

        // //////////////////////////////////////////////////////////////////////

        // Public Disable TAC

        // Valid State : SET Constants.PASSWD_STATUS_DISABLE

        // Public Reset TAC

        // Valid State : SET Constants.PASSWD_STATUS_ENABLE

        // //////////////////////////////////////////////////////////////////////

        public int DisableTAC() {

                tacBeanObject.setState(Constants.PASSWD_STATUS_DISABLE);

                return Constants.ERR_SUCCESS;

        }

        public int ResetTAC() {

                tacBeanObject.setState(Constants.PASSWD_STATUS_ENABLE);

                tacBeanObject.setErrorCount(0);

                return Constants.ERR_SUCCESS;

        }

        public int SetSessionID(String sessionID) {

                tacBeanObject.setSessionId(sessionID);

                return Constants.ERR_SUCCESS;

        }

}// end class