Hi Dell,
I did tests and the problem seems to be coming from the fact that another jar loaded from the webpath.infoview directory also has a Base64 class in it and is conflicting.
If I rename or remove the jsf-impl.jar file and re-start Tomcat, the custom.jsp runs without error, but there’s no knowing what part of BILaunchpad we broke by doing this so it is not a solution, but merely points out what the problem is.
You may have to find some other Base64 encoder and try using that jar rather than the commons-codec-1.4.jar as we have other areas of our application that uses commons-codec-1.3.jar and replacing this with the 1.4 version may also cause unknown problems.
Using a different library that does base64 encoding would help ensure that we do not change versions that are used in other parts of the product and would prevent possible overwriting of the jar.
If we change the version of an existing jar, then that becomes an unsupported scenario.
Made the following changes to your code and the page ran without errors, however we have no idea if the decryption would work properly as we don’t know if similar algorithms would be used, but its something you can look into:
<%@page import="com.sun.faces.util.*"%><html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>CRM Authentication Check and Redirect</title>
</head>
<body>
<%
//String openURL = "https://busobjprod.namasco.net:8443/BOE/BI";
String openURL = "http://localhost:8080/BOE/BI";
String userid = request.getParameter("userid");
if (userid == null)
{
//If the expected header variable is missing we will redirect to the manual logon page.
response.sendRedirect("/BOE/BI");
}
else
{
// Decrypt the incoming values
SecretKeySpec skeySpec = (SecretKeySpec) application.getAttribute("NAMASCOSECRET");
if (skeySpec == null) {
String secret64 = "xpgVbeA5q5tmvUq_qEbjxA";
byte[] test = secret64.getBytes();
byte[] raw = com.sun.faces.util.Base64.decode(test);
skeySpec = new SecretKeySpec(raw, "AES");
application.setAttribute("NAMASCOSECRET",skeySpec);
}
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.DECRYPT_MODE, skeySpec);
// convert incoming string to bytes
byte[] test2 = userid.getBytes();
String user = new String(cipher.doFinal(com.sun.faces.util.Base64.decode(test2)));
hope this helps
Let me know in case of any any queries.
Thanks,
Feroz
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.