Z-Archive » Maybank Projects » M2U UPASS Project

/**

 * Copyright (c) 2010 Penril Datability (M) Sdn Bhd All rights reserved.

 *

 * This software is copyrighted. Under the copyright laws, this software

 * may not be copied, in whole or in part, without prior written consent

 * of Penril Datability (M) Sdn Bhd or its assignees. This software is

 * provided under the terms of a license between Penril Datability (M)

 * Sdn Bhd and the recipient, and its use is subject to the terms of that

 * license.

 */

package my.com.upass.services;

import java.util.Date;

import my.com.upass.Constants;

import my.com.upass.dao.DAOFactoryProvider;

import my.com.upass.dao.UserDAO;

import my.com.upass.dao.UserTokenDAO;

import my.com.upass.factory.UPassFactory;

import my.com.upass.pojo.MinimalUserBean;

import my.com.upass.pojo.UserBean;

import my.com.upass.pojo.UserTokenBean;

import my.com.upass.secure.metric.SecureMetricTokenControllerImpl;

import my.com.upass.vasco.TokenController;

/**

 * PROGRAMMER: Danniell

 * CHANGE-NO:

 * TASK-NO:

 * DATE CREATED: Dec 28, 2011

 * TAG AS:

 * REASON(S):

 * MODIFICATION:

 */

/**

 * <Class description>

 */

public class VerifyTokenService

{

        public int verifyToken (String userAlias, String inPassword)

        {

                int rc = Constants.ERR_SYSTEM_NOT_READY;

                UserTokenBean tb = new UserTokenBean();

                try

                {

                        UserTokenDAO tokenDao = DAOFactoryProvider.getDAOFactory ()

                                        .getUserTokenDAO (UPassFactory.getTokenMode ());

                        switch (UPassFactory.getTokenMode ())

                        {

                                case GEMALTO:

                                case VASCO:

                                                tb = tokenDao.getTokenFromStoreByUserAlias (userAlias);

                                                if (tb == null)

                                                {

                                                        return Constants.ERR_USERALIAS_NOT_FOUND;

                                                }

                                                if (tb.getVstate () != Constants.TKN_STATE_ASSIGNED)

                                                {

                                                        return Constants.ERR_INVALID_STATE;

                                                }

                                                TokenController tc = UPassFactory.getTokenController (tb);

                                                rc = tc.verifyToken (inPassword, "", "");

                                                tb = (UserTokenBean) tc.getUpdatedObject ();

                                                // update first time used

                                                if (tb.getVdateFirstUsed () == null)

                                                {

                                                        tb.setVdateFirstUsed (new Date ());

                                                }

                                                // update last time used

                                                tb.setVdateLastUsed (new Date ());

                                                // update database

                                                boolean lrc = tokenDao.updateTokenToStore (tb);

                                                if (!lrc)

                                                {

                                                        return Constants.ERR_UNKNOWN;

                                                }

                                        break;

                                case SECUREMETRIC:

                                                UserDAO userDao = DAOFactoryProvider.getDAOFactory ().getUserDAO ();

                                                MinimalUserBean userBean = userDao.getUserFromStore (userAlias, null);

                                                if (userBean == null){        

                                                        return Constants.ERR_USERALIAS_NOT_FOUND;

                                                }

                                                else

                                                        {

                                                                TokenController tcSm = UPassFactory.getTokenController (tb);

                                                                rc = tcSm.verifyToken (inPassword, userAlias, "123456");

                                                                /*

                                                                 * Check whether exceed maximum tries

                                                                 * TODO: Check with SM to return specific error code when exceed maximum tries.

                                                                 */

                                                                if (Constants.ERR_SUCCESS != rc){

                                                                        SecureMetricTokenControllerImpl impl = new SecureMetricTokenControllerImpl(tb);

                                                                        UserTokenBean tokenUser = impl.getUserTokenByUserId(userAlias);

                                                                        int rc1 = impl.getTokenLocked(tokenUser.getVserialNumber());

                                                                        if (Constants.ERR_INVALID_CREDENTIAL == rc1){

                                                                                return Constants.ERR_EXCEED_MAX_TRIES;

                                                                        }

                                                                        //Masking invalid OTP validation, 

                                                                        if (Constants.OTPR_CORE_INVALID_OTP == rc){

                                                                                return Constants.ERR_INVALID_CREDENTIAL;

                                                                        }

                                                                }

                                                        }

                                        break;

                                default:

                                        break;

                        }        

                }

                catch (Exception e)

                {

                        e.printStackTrace ();

                }

                return rc;

        }

}