From bff6196f774692a5b68f9f37b114baf9f423d619 Mon Sep 17 00:00:00 2001 From: brausjonas Date: Mon, 8 May 2023 13:49:07 +0200 Subject: [PATCH] Make User Session IDS expire --- backend/database.mv.db | Bin 32768 -> 40960 bytes backend/database.trace.db | 24 ++++++++++++++++++ .../backend/anwprj/DataBaseHandler.java | 2 +- .../anwprj/Users/UserSessionIDHandler.java | 13 ++++++++++ .../anwprj/controller/UserController.java | 2 +- 5 files changed, 39 insertions(+), 2 deletions(-) diff --git a/backend/database.mv.db b/backend/database.mv.db index 1b555f71fd562c4f6f51e0e8884eb446498000f9..a0b7d0415b3ffec2eb4c17d10472f681593d87d6 100644 GIT binary patch literal 40960 zcmeHQ%WoUU9VRKsW@I}~)ArN?-N;UCr7W?tv%53Plb7VuVk^hb&T}9J?OD z;J#;n^UcoV_x-*ZuT->>x7qXWRdl{>Z+xFrfU2q`|L*?wy$Z%9f0MY|6;SebiQ6YZ z1z;3n%~FZ0mBQZcmfNR^+$Xzx8@=u5{&17@{kvqh0(_{t22>Yw@=qcl5s(N-1SA3y z0f~S_Kq4R!kO)WwBmxqFFA#wh>HmL$=*w421SA3y0f~S_Kq4R!kO)WwBmxoviGW1l z@gNWf`Gp8TD{Yb})W7BKR18cv4=Ns&0&J59{R%GaxOd1N6$ZEyOkzM-gwYuTgCYzAi(m~Eb>Ac!G6~(mX5gxRQ70zWpoNPDR-p$& zP&6#pbX7!mJm`5KL`5U8kng&B(IBqx0?Va4o`x|FPn$^fpzqQx)R1NtP1g)f9}&6} zVABfxB2qN~g3u@;6GBZ_=?)?mR#8|)p{HYjtRfCw&Cpc6NL-Jo8q$lQt|L{q@P*#) zo$_6+ymf!C-`geSz$>@*H#cv(oBO2h_TA3I9r8HuDGk}ve^9>3RUjl_Mnwi)Y`8wP z_TkGzH&f%+dv6G{#a*XPi_iXXW@J|HIsriD7dRlp@bxLQpbl( z*4&+o)yDa4rIkL}>tBz4wq5`3 zw!1~vH{NjfuH4yjH#W0cJE7pM`rm*y|O+UhhLnpSO-Ep7h4=jT5?zm%M` z)04T}+{*k<=5mXY9=ldWi^?ZMS$KCcHR#cc68zyQ)KG1lC zv3&S}4m8$h!w=QBQez4B@ifMU%vjSUV~wTR;?hWXII`SWci7lutQ6VG#!88?nud^{ zF_sOTIM5knL4qu`CPLOCAZu*+oA@)pAU4)y#?paY{24GUXZj^**|8nag~4KQ2gTry zUQt!3Baja6#+QA@LclBpsySeyo(E^?cqU3O`m}Udk~T3k7=2I}dWt>R{VLn^cF1;T*WKQu zLn^AZ-FqdIsydp67{z9dHinEwVDvfh?r*T<_qT)IYVS^Y*lI)uuWQ38lb6}^wDqUG z!021VsCJoWf^6;3Ze#47Vi2CBM|%^No){ssq7@@)4hns1)Ip8DRwS0!@>br=<2=k8 z1)vvzS}@cC&%#_@;j zJMux8yl7TC)c-GjR{S`(a5fqZ&M%xgU3_lw%-P&a$}6|pPDiP&J9fwER&O*{>xu^S zC1vT{J9&OqxzTpkm1aX}UF#^$t!BH^R+jAg+LF??S3Alj0DRL7UCSjd!m1B0DJyn+ zMY*H~o@QW+1iEg9zOF(D41z7)3k)j=0EU*K>K>s)2{FO|6JntN7(mAacy5SjI`k#Y z)&)g5_emi(rDoSwoVwDntE-N(bp1wkwOLy#FGUu%mo6_xa4j|KOG>lVajsIUuR1Mf zo#w2rRBtPFr(xfq7Tay5S$F72v~yc&JKw$Gv})PJ+PB*sXRRx)bZuLOW}~imow^CT zI%Q3|R-@7A+A7VRW8*r)&JqKsbz^n4#Eob)*V~&*IHNG-OjZxE7O;0VgL1z!frcjG!bY0 zq{>@0>Ih=1-nFW>)72fP(XApIcB>98a1A>(fZ#}Zvs}IAINxdASgTUoMDF8qc3Sm= zFCPAxu+(om_PBHhPA@LMGG%d2mfMMn6OI(;C0d;S7T?wZbvMH0#Of|KY9_R5PPeWj zy{m(oO{=rf=&Ds*t!p(5>t=PdEaML>(~!i)IHn92moHPqAH?m`1odY!lMVuWxWX(` zg#UR6!gc%hi2-b@2v$@NjbDqg@j=8!#9gGk#z4$!7Q9AgO6z!D!x%Gq zA0)LR?kcqqW|^1iqiQ46P{u&&@$o=g#&1*cG`tHN(vRa^@>eMD@;c>T=;s*zgUMmhJ|#a-!38g#VA@ z&rpxaW9I)87A*itQ{~1yfEjbdT14rpdZ<|mM~tZdYbJaWT?-&;mjF^p`pV<&@%aDW zW&B^p{~xc|VUk$s3B-kE{C`mJGDb5Z5lHH;puR>LS!m(lNNR5tcxtJQ*nL8w}-{=%t+RIP@g;HGu4V~QO# z6Os7SnSt?h}is>L#8fWynhg(TWQA&OWCd^owis>j#%9($BxVYG5L@X7} z@`+g1kRA(gIW4s>;b9@28)c^AVhB|zgwd(;FU!=L%vh|Bmu+Jd8*3eItj~;1l+c1S z7UD6G$hPS#xyC$e9hE5_jx6HF`dMUE7=^oHN*ZVel^OE`NT5!|#QY$Z8S?|+;vl)A zt2)lejA_^_|K2A|Zanv&Z!@{^{QTQA2zDhm|6+%Q!{$H#G26-?iGV~vA|Mfv2uK7Z z0#hLn>+jR}dlLW8tfNnKQ@1P+9xrr0?r9PKA09GOH(kvCpJH&F*q#i1$G!7d=Xm`8 zZ!-QbvP9r#Sv%4IR`FTaWOqP z%cjdY+(T@-0BMl*eir9&7k*IubUrhQ0tgOV6FYD!GW>Uf3>WhfIDwlkxNsoN%w{EU zo_WG$7APBElk<)@v{?K9Wq9CNp7Yp;h5v8F@f{S$cQXEe zG|g&Y{XY=P|D)zC3X=Io8g^2BKV1t58!S#kSKb@@?jxO~{{P&|b6?73!kl9obkVZw z$7|WeY=}oxN*?BvEj#^>AD^<8J?V1Nx;NNAM%`dKdr!~K-kX9G8;N7ZXf71Uqr2kKwPPv8~Da$q7;#HX^ zTEk8H|MA#;I+xcjEsW>HL2J=mKr#Nyh(& z#i-2xKdS6B$wDG3J(8-hM#&#BQgtPw4Ov7ge^yR! zU_i(piGV~vA|Mfv2+SOTSpT2;-x=pQjsI)(f4W1SG1enK)=3fnAD-XI{QslQ=V z%+oxUjROyJ|Nqa&^#48X|NGMam;V2Z{eSZi|KEI?{eQ1u_;gP6k8&6DxwF&x|AGiG zB@r;-DM}(h5&>cz1g4%lHW84p7U`hkP}bt8RDWvh5m%UCtVJT6rHeMi!rAHcwO2B% t#ZPBGMw1Cj1SA3y0f~S_VAcr4{(tI!XPoEM|A)x8u!jab;h7vP{tt`T(+vOs literal 32768 zcmeHQJ#*X0873*q;_2*jCX+Oo%mk)=XY0anu)6>jV09n~TAWCsaD@)%XtOJNm{Eo7j~D_o`pP3fc%aa(IZtjT)X+<=^BZ?6e3w zCBp9T;2GNm-~gVozrPotHiM}SNdcy63R4$SWEshhp~RRfhJ(td!_yPynv(}S%tD*O ztOYPrO)ifd=k(YfIxnj-{w=qUM)s+JebB;@eVUWB4=39kDUcQzNFxK4sL@>~Xmd|h z<*9)KPo6iBP7S1ife0Ccq=j~jpdMLBQwYMnmLceo$Ur?ZknmpV+b3hqQ>VRBH3s^; zf%?=yJuuKwNYXwnkFKGxL1gTx3LJ!$cNN*@2Y!ln4YA;^{sE*!4+eG=C71gabl7qu ze3+}>+_9w6-hOSTRWDUaU2E6s_N-3n?xz2Ilv<6F)N1#vdsaufXSJ=4*|Qo_?UB^5 zn&$paPcpkwt6@Qh?>&;b){pkBc75i0kKk&%eV)>n)dnTH(dZjB)9Ndh)$G@(N%}QQ zR&}gfbwo)?YTxfk?fspda%e=iXLfoYTGkKS`@1!;jaw8YTkXd3#J0I>m8AN%*)i)- zFX@5VdDLp(yG!J)h{hnFdvF=FH^?!0}>Slc#S|&(Hw5JbD_p%yOSL+%v>Q=v@ zP^GV+y4g2Pwb_?zdaZ%$I%#ON`NoWTSfXb|4Y8mRH@EHrV3T_Bg-@uqGRHqpAsbTo=D)oM?+0gqcs_AvLR@WNM z=3M{v;hnw|qprK(wK`!{8np$w%DPL0ZanW=ZPl2h|1?lh<~4&l^kNPdvz&}HyF zhZj|3aF>C9kyY+81b(98ss{feyNpp!i@wOd+o&w`AQCQ)8hQ|_t0%tD$csG);e#zi z@N6IK+&)g^W>FdEa`_Ly$N6#K>l7Xr0$-;v>O@|ScxTUkL9#ym;++jH@mKMk{qc?8 z7rwCu^mHwEb9=&0CVT$R&~}~-?IYGXcy6D3@c76+IIK9MqdEQ^$I%afOnH?Z@+ybMH+b_i$K0#*JqM}P3@DHF zu+{B#rIOj$ElFJy*wr0|2f*V7gt~@7Z3Ewtw$1LgbcZq^kczA8GSZRaDz2kDiUaMz z7(oLA5sWnoDEMifhdhO829*sP>$-;(gziXilUDl{IANck;e`1XUYZMLnljOv4W(~2 zG}2eFjQU2i+3cG@2Mx;v=S2tlmg0lWR;SxLo7nA`S#s@~t(_&lR^;66nceP(_dDRF z&C^Km$apTRv)k%+Tld?sH@CTU8+^52@TTS@I6=?4DSDg@j%Baw8N#T{@x^zcvHx;L zV+;NdBOOtTf@8jb|F6=V*+x4uHK(BeSq5AL{VxgnpLHxU8#7LQd%o`Uf33Xvw|s8% zRgwkg`^HK%U+`uwSS=oTIGZ>Bkq?wC(=HYal!SWPd6f$oCkeglIVs4PI@}9|4EhN- zHZAjUDF`IKB}&!m>ffu(iv_{ND2|L*8G{HY$0D7Dk3qobL&5t@jM-jjnExl{(JRPvkZZp#cV1AQ^Z)etX+r;BU8|0(5DU`_?tIQu!2j2N zw${w$zni-XMplp7p*z|cJ+7eHLrneDYIr{qE!)5Y2QV!^WiP9`XJZx1 zO8J?6SS5I%F_n;HIhrnK&zDn~?byh$ljV$bxxw;sdcsb`*O!P5b>|CmLxc9I_5E(R?|6@9zbdkD*VORA85~dFWKojPrN#6otx) zp>Ktih#P!9r)t=mEmIU<5Bg$|i`g)Yg=yHdlrlq?sTYD0b>-z3%j3L}*YbLv)faslB2B6(U+NkN5>hPBGZN6APU%$-oecND&(W^zma!2J`x7D+l(CF!0-s*}F~ z)yWUC3B!_j0EiQ~2t*->k4n0(Vh|k5O*86KBBBNW5mG~Ar!QJ7 zrJ4@;S!!o2j`4t>*xDeZ1P#bk9CKBL*sEAe0&8L9b+NI^lIWVH#`>7f4EQ3hhoS|plgyS z8Yno3qJiKP{2{|NZ14v@0CB7bThPg_{VLdsAAx{CKp-Fx5C{kazSaoL#gNB7sFu+G zDag&*Kt3mDenm0P|I;zzK%aU1|2bm8<2pa(680_epYs*d%gnJzm zLoafUSmY$Ds1C?rfIM2{oELTmAn@znhDIS~z_DRVFvVI?vo%k1D1#kW*9_MwLXZ?f zuBR5MMhI49*okOak$M9~N7N{CLSE$bt;nh1tsP}z ze53Wqf`^oPCWB73Ga5eT{RyWsz(Whej$L@3VJZ_0Tivd~KoSf$u`wGu?6&{B{~$|| zU6@`KvDl|X6u>pSjRZX=Eyo6ZZ%B*=+rVAW{m z_k~QwpO=o7P9zVfm~-jqryw0Y2sa)&2{$R- zm#;7}zlfSx|1YhKWm|DC1+Z8EKr8@|SaCI*V7Ba&lGd-mgB9!lh5uA~@thp7{@-h_ y!MuVrHM_>KSpRP>wj$dXB(JdbcConnection.java:122) + at org.h2.util.JdbcUtils.getConnection(JdbcUtils.java:288) + at org.h2.server.web.WebServer.getConnection(WebServer.java:808) + at org.h2.server.web.WebApp.login(WebApp.java:1033) + at org.h2.server.web.WebApp.process(WebApp.java:226) + at org.h2.server.web.WebApp.processRequest(WebApp.java:176) + at org.h2.server.web.WebThread.process(WebThread.java:152) + at org.h2.server.web.WebThread.run(WebThread.java:101) + at java.base/java.lang.Thread.run(Thread.java:1623) +Caused by: org.h2.jdbc.JdbcSQLInvalidAuthorizationSpecException: Falscher Benutzername oder Passwort +Wrong user name or password [28000-214] + at org.h2.message.DbException.getJdbcSQLException(DbException.java:510) + at org.h2.message.DbException.getJdbcSQLException(DbException.java:477) + ... 16 more diff --git a/backend/src/main/java/com/example/backend/anwprj/DataBaseHandler.java b/backend/src/main/java/com/example/backend/anwprj/DataBaseHandler.java index d521b5a..273ed67 100644 --- a/backend/src/main/java/com/example/backend/anwprj/DataBaseHandler.java +++ b/backend/src/main/java/com/example/backend/anwprj/DataBaseHandler.java @@ -26,7 +26,7 @@ public class DataBaseHandler { try { - connection = DriverManager.getConnection("jdbc:h2:./database", "adm", "12345"); + connection = DriverManager.getConnection("jdbc:h2:./database", "adm", "73bgjfdsfJ!934"); st = connection.createStatement(); } catch (SQLException e) { diff --git a/backend/src/main/java/com/example/backend/anwprj/Users/UserSessionIDHandler.java b/backend/src/main/java/com/example/backend/anwprj/Users/UserSessionIDHandler.java index 972a9ed..d7bad8d 100644 --- a/backend/src/main/java/com/example/backend/anwprj/Users/UserSessionIDHandler.java +++ b/backend/src/main/java/com/example/backend/anwprj/Users/UserSessionIDHandler.java @@ -20,6 +20,19 @@ public class UserSessionIDHandler new Random().nextBytes(array); String generatedString = new String(array, StandardCharsets.UTF_8); mapping.put(generatedString, user); + + new java.util.Timer().schedule(new java.util.TimerTask(){ + + @Override + public void run() + { + mapping.remove(generatedString); + System.out.println("test"); + return; + } + //value to be higher + }, 5000); + return generatedString; } diff --git a/backend/src/main/java/com/example/backend/anwprj/controller/UserController.java b/backend/src/main/java/com/example/backend/anwprj/controller/UserController.java index d7ba266..dd8c723 100644 --- a/backend/src/main/java/com/example/backend/anwprj/controller/UserController.java +++ b/backend/src/main/java/com/example/backend/anwprj/controller/UserController.java @@ -26,7 +26,7 @@ public class UserController return new ResponseEntity(UserSessionIDHandler.addUser(user.getMail(), user.getPassword()), HttpStatus.OK); } - return new ResponseEntity("", HttpStatus.BAD_REQUEST); + return new ResponseEntity(HttpStatus.BAD_REQUEST); } @CrossOrigin