Skip to content
Snippets Groups Projects
Commit f1c3a73d authored by Azzahid Adhitya's avatar Azzahid Adhitya
Browse files

add information to token

parent e6b9bc06
Branches
No related merge requests found
...@@ -28,6 +28,8 @@ import javax.servlet.RequestDispatcher; ...@@ -28,6 +28,8 @@ import javax.servlet.RequestDispatcher;
public class LoginServlet extends HttpServlet { public class LoginServlet extends HttpServlet {
private static final long serialVersionUID = 1L; private static final long serialVersionUID = 1L;
public String userid; public String userid;
public String agent = "";
public String userIP = "";
@Override @Override
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
...@@ -37,6 +39,8 @@ public class LoginServlet extends HttpServlet { ...@@ -37,6 +39,8 @@ public class LoginServlet extends HttpServlet {
String pass = request.getParameter("password"); String pass = request.getParameter("password");
String token = ""; String token = "";
String message = ""; String message = "";
agent = request.getParameter("userAgent").toString();
userIP = request.getRemoteAddr();
/*if(user != null && pass != null && !user.equals("") && !pass.equals("")){ /*if(user != null && pass != null && !user.equals("") && !pass.equals("")){
try { try {
//creating connection with the database //creating connection with the database
...@@ -79,14 +83,14 @@ public class LoginServlet extends HttpServlet { ...@@ -79,14 +83,14 @@ public class LoginServlet extends HttpServlet {
} }
response.addHeader("token", token); response.addHeader("token", token);
response.addHeader("message",message); response.addHeader("message",message);
response.addIntHeader("expiryTime", 3); response.addIntHeader("expiryTime", 30);
response.flushBuffer(); response.flushBuffer();
} }
public String getToken(){ public String getToken(){
Random random = new SecureRandom(); Random random = new SecureRandom();
String token = new BigInteger(130, random).toString(32); String token = new BigInteger(130, random).toString(32);
token = token + '#' + agent + '#' + userIP;
return token; return token;
} }
......
...@@ -13,6 +13,7 @@ ...@@ -13,6 +13,7 @@
<% <%
String user = request.getParameter("username"); String user = request.getParameter("username");
String pass = request.getParameter("password"); String pass = request.getParameter("password");
String agent = request.getHeader("User-Agent");
String error = ""; String error = "";
if(user != null && pass != null && !user.equals("") && !pass.equals("")){ if(user != null && pass != null && !user.equals("") && !pass.equals("")){
...@@ -25,7 +26,7 @@ ...@@ -25,7 +26,7 @@
// Send POST output. // Send POST output.
connection.setRequestMethod("POST"); connection.setRequestMethod("POST");
java.io.DataOutputStream printout = new java.io.DataOutputStream(connection.getOutputStream ()); java.io.DataOutputStream printout = new java.io.DataOutputStream(connection.getOutputStream ());
String content = "username=" + user + "&password=" + pass; String content = "username=" + user + "&password=" + pass + "&userAgent=" + agent;
printout.writeBytes (content); printout.writeBytes (content);
printout.flush (); printout.flush ();
printout.close (); printout.close ();
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment