10 \ud68c \uc774\uc0c1 \ub85c\uadf8\uc778 \uc2e4\ud328 \ubc1c\uc0dd\uc2dc, 24\uc2dc\uac04\ub3d9\uc548 \ub85c\uadf8\uc778 \uc2dc\ub3c4\ub97c \ucc28\ub2e8\ud569\ub2c8\ub2e4.<\/p>\n
Brute Force(\ub79c\ub364 \ubb38\uc790\uc5f4 \uacf5\uaca9) \uc5d0 \ub300\uc751\ud569\ub2c8\ub2e4.<\/p>\n
Spring Boot OAuth2 Authorization Server<\/a> \ub97c \uae30\ucd08 \ud504\ub85c\uc81d\ud2b8\ub85c \ud569\ub2c8\ub2e4.<\/p>\n AuthenticationFailureListener.java<\/p>\n AuthenticationSuccessEventListener.java<\/p>\n LoginAttemptService.java<\/p>\n CustomUserDetailService.java<\/p>\n Spring Boot Brute Force(\ub79c\ub364 \ubb38\uc790\uc5f4 \uacf5\uaca9) \ub300\uc751 10 \ud68c \uc774\uc0c1 \ub85c\uadf8\uc778 \uc2e4\ud328 \ubc1c\uc0dd\uc2dc, 24\uc2dc\uac04\ub3d9\uc548 \ub85c\uadf8\uc778 \uc2dc\ub3c4\ub97c \ucc28\ub2e8\ud569\ub2c8\ub2e4. \ubaa9\ud45c Brute Force(\ub79c\ub364 \ubb38\uc790\uc5f4 \uacf5\uaca9) \uc5d0 \ub300\uc751\ud569\ub2c8\ub2e4. \uae30\ucd08 \ud504\ub85c\uc81d\ud2b8 Spring Boot OAuth2 Authorization Server \ub97c \uae30\ucd08 \ud504\ub85c\uc81d\ud2b8\ub85c \ud569\ub2c8\ub2e4. build.gradle \uc218\uc815 dependencies { \/\/ …… implementation 'com.google.guava:guava:20.0' \/\/ …… } \uc18c\uc2a4 \ucd94\uac00 AuthenticationFailureListener.java @RequiredArgsConstructor @Component public class AuthenticationFailureListener implements\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[],"class_list":["post-2472","post","type-post","status-publish","format-standard","hentry","category-spring-boot-2-5"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2472"}],"version-history":[{"count":2,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2472\/revisions"}],"predecessor-version":[{"id":2474,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2472\/revisions\/2474"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}build.gradle \uc218\uc815<\/h2>\n
dependencies {\n \/\/ ......\n implementation 'com.google.guava:guava:20.0'\n \/\/ ......\n}<\/code><\/pre>\n\uc18c\uc2a4 \ucd94\uac00<\/h2>\n
@RequiredArgsConstructor\n@Component\npublic class AuthenticationFailureListener implements\n ApplicationListener<AuthenticationFailureBadCredentialsEvent> {\n\n private final HttpServletRequest request;\n\n private final LoginAttemptService loginAttemptService;\n\n @Override\n public void onApplicationEvent(AuthenticationFailureBadCredentialsEvent e) {\n final String xfHeader = request.getHeader("X-Forwarded-For");\n if (xfHeader == null) {\n loginAttemptService.loginFailed(request.getRemoteAddr());\n } else {\n loginAttemptService.loginFailed(xfHeader.split(",")[0]);\n }\n }\n}<\/code><\/pre>\n@RequiredArgsConstructor\n@Component\npublic class AuthenticationSuccessEventListener implements\n ApplicationListener<AuthenticationSuccessEvent> {\n\n private final HttpServletRequest request;\n\n private final LoginAttemptService loginAttemptService;\n\n @Override\n public void onApplicationEvent(final AuthenticationSuccessEvent e) {\n final String xfHeader = request.getHeader("X-Forwarded-For");\n if (xfHeader == null) {\n loginAttemptService.loginSucceeded(request.getRemoteAddr());\n } else {\n loginAttemptService.loginSucceeded(xfHeader.split(",")[0]);\n }\n }\n}<\/code><\/pre>\n@Service\npublic class LoginAttemptService {\n\n private final int MAX_ATTEMPT = 10;\n private LoadingCache<String, Integer> attemptsCache;\n\n public LoginAttemptService() {\n super();\n attemptsCache = CacheBuilder.newBuilder().\n expireAfterWrite(1, TimeUnit.DAYS).build(new CacheLoader<String, Integer>() {\n public Integer load(String key) {\n return 0;\n }\n });\n }\n\n public void loginSucceeded(String key) {\n attemptsCache.invalidate(key);\n }\n\n public void loginFailed(String key) {\n int attempts = 0;\n try {\n attempts = attemptsCache.get(key);\n } catch (ExecutionException e) {\n attempts = 0;\n }\n attempts++;\n attemptsCache.put(key, attempts);\n }\n\n public boolean isBlocked(String key) {\n try {\n return attemptsCache.get(key) >= MAX_ATTEMPT;\n } catch (ExecutionException e) {\n return false;\n }\n }\n}<\/code><\/pre>\n@RequiredArgsConstructor\n@Service\npublic class CustomUserDetailService implements UserDetailsService {\n\n private final UserRepository userRepository;\n\n private final AccountStatusUserDetailsChecker detailsChecker = new AccountStatusUserDetailsChecker();\n\n private final LoginAttemptService loginAttemptService;\n\n private final HttpServletRequest request;\n\n @Override\n public UserDetails loadUserByUsername(String name) throws UsernameNotFoundException {\n String ip = getClientIP();\n if (loginAttemptService.isBlocked(ip)) {\n throw new UsernameNotFoundException("IP blocked");\n }\n\n User user = userRepository.findByUid(name).orElseThrow(() -> new UsernameNotFoundException("user is not exists"));\n detailsChecker.check(user);\n return user;\n }\n\n private String getClientIP() {\n String xfHeader = request.getHeader("X-Forwarded-For");\n if (xfHeader == null){\n return request.getRemoteAddr();\n }\n return xfHeader.split(",")[0];\n }\n}<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"