<p><br></p><p><br></p><p><br></p><p>고객사 중에 google otp 연동을 해달라는 곳이 있어서 찾아보고 입맛에 맞게 좀 변경하였다.</p><p><br></p><p><br></p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;"><div><span style="color: #569cd6;">import</span>&nbsp;java.security.InvalidKeyException;</div><div><span style="color: #569cd6;">import</span>&nbsp;java.security.NoSuchAlgorithmException;</div><div><span style="color: #569cd6;">import</span>&nbsp;java.security.SecureRandom;</div><br><div><span style="color: #569cd6;">import</span>&nbsp;javax.crypto.Mac;</div><div><span style="color: #569cd6;">import</span>&nbsp;javax.crypto.spec.SecretKeySpec;</div><br><div><span style="color: #569cd6;">import</span>&nbsp;org.apache.commons.codec.binary.Base32;</div><br><div><span style="color: #569cd6;">import</span>&nbsp;lombok.Builder;</div><br><div><span style="color: #6a9955;">/**</span></div><div><span style="color: #6a9955;">&nbsp;*&nbsp;</span><span style="color: #569cd6;">@author</span><span style="color: #6a9955;">&nbsp;nwkim</span></div><div><span style="color: #6a9955;">&nbsp;*</span></div><div><span style="color: #6a9955;">&nbsp;*&nbsp;</span><span style="color: #569cd6;">@see</span><span style="color: #6a9955;">&nbsp;https://github.com/tomsure/Exchange-V2.0/blob/master/chainExchange/java-exchange/gbx/Chain_English/src/com/ruizton/util/GoogleAuthenticator.java</span></div><div><span style="color: #6a9955;">&nbsp;*&nbsp;</span><span style="color: #569cd6;">@see</span><span style="color: #6a9955;">&nbsp;http://code.google.com/p/google-authenticator&nbsp;</span></div><div><span style="color: #6a9955;">&nbsp;*&nbsp;</span><span style="color: #569cd6;">@see</span><span style="color: #6a9955;">&nbsp;http://tools.ietf.org/id/draft-mraihi-totp-timebased-06.txt&nbsp;</span></div><div><span style="color: #6a9955;">&nbsp;*/</span></div><div>@<span style="color: #4ec9b0;">Builder</span></div><div><span style="color: #569cd6;">public</span>&nbsp;<span style="color: #569cd6;">class</span>&nbsp;<span style="color: #4ec9b0;">GoogleOTPHelper</span>&nbsp;{</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">public</span>&nbsp;<span style="color: #569cd6;">static</span>&nbsp;<span style="color: #569cd6;">final</span>&nbsp;<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #9cdcfe;">SECRET_SIZE</span>&nbsp;=&nbsp;<span style="color: #b5cea8;">10</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">public</span>&nbsp;<span style="color: #569cd6;">static</span>&nbsp;<span style="color: #569cd6;">final</span>&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">SEED</span>&nbsp;=&nbsp;<span style="color: #ce9178;">"g8GjEvTbW5oVSV7avLBdw3HqGlUDNzKFI7izOF8GwLDVKs2m0QN7vxRs2im8MDaNCWGmcD2rvcZx"</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">public</span>&nbsp;<span style="color: #569cd6;">static</span>&nbsp;<span style="color: #569cd6;">final</span>&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">RANDOM_NUMBER_ALGORITHM</span>&nbsp;=&nbsp;<span style="color: #ce9178;">"SHA1PRNG"</span>;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">private</span>&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">keyHeader</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">private</span>&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">encodedKey</span>;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">public</span>&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #dcdcaa;">generate</span>()&nbsp;<span style="color: #569cd6;">throws</span>&nbsp;<span style="color: #4ec9b0;">NoSuchAlgorithmException</span>&nbsp;{</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">SecureRandom</span>&nbsp;<span style="color: #9cdcfe;">sr</span>&nbsp;=&nbsp;<span style="color: #569cd6;">null</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;sr&nbsp;=&nbsp;<span style="color: #9cdcfe;">SecureRandom</span>.<span style="color: #dcdcaa;">getInstance</span>(RANDOM_NUMBER_ALGORITHM);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #9cdcfe;">sr</span>.<span style="color: #dcdcaa;">setSeed</span>(<span style="color: #9cdcfe;">SEED</span>.<span style="color: #dcdcaa;">getBytes</span>());</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">byte</span>[]&nbsp;<span style="color: #9cdcfe;">buffer</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">sr</span>.<span style="color: #dcdcaa;">generateSeed</span>(SECRET_SIZE);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">Base32</span>&nbsp;<span style="color: #9cdcfe;">codec</span>&nbsp;=&nbsp;<span style="color: #c586c0;">new</span>&nbsp;<span style="color: #dcdcaa;">Base32</span>();</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">byte</span>[]&nbsp;<span style="color: #9cdcfe;">bEncodedKey</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">codec</span>.<span style="color: #dcdcaa;">encode</span>(buffer);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">this</span>.<span style="color: #9cdcfe;">encodedKey</span>&nbsp;=&nbsp;<span style="color: #c586c0;">new</span>&nbsp;<span style="color: #dcdcaa;">String</span>(bEncodedKey);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">return</span>&nbsp;<span style="color: #569cd6;">this</span>.<span style="color: #9cdcfe;">encodedKey</span>;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">public</span>&nbsp;<span style="color: #569cd6;">static</span>&nbsp;<span style="color: #4ec9b0;">boolean</span>&nbsp;<span style="color: #dcdcaa;">checkCode</span>(<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">userCode</span>,&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">encodedKey</span>)&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">long</span>&nbsp;<span style="color: #9cdcfe;">otpnum</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">Integer</span>.<span style="color: #dcdcaa;">parseInt</span>(userCode);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;Google&nbsp;OTP의&nbsp;주기는&nbsp;30초,&nbsp;라고&nbsp;써있지만&nbsp;이상하게&nbsp;엄청&nbsp;길다&nbsp;체크해보니&nbsp;3분인듯</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;시간을&nbsp;좀&nbsp;조정해서&nbsp;줄여보고&nbsp;싶은데&nbsp;생각처럼&nbsp;안된다</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">long</span>&nbsp;<span style="color: #9cdcfe;">wave</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">System</span>.<span style="color: #dcdcaa;">currentTimeMillis</span>()&nbsp;/&nbsp;<span style="color: #b5cea8;">30000</span>;&nbsp;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #9cdcfe;">System</span>.<span style="color: #9cdcfe;">out</span>.<span style="color: #dcdcaa;">println</span>(<span style="color: #ce9178;">"@@@@wave&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"</span>&nbsp;+&nbsp;wave);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">boolean</span>&nbsp;<span style="color: #9cdcfe;">result</span>&nbsp;=&nbsp;<span style="color: #569cd6;">false</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">try</span>&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">Base32</span>&nbsp;<span style="color: #9cdcfe;">codec</span>&nbsp;=&nbsp;<span style="color: #c586c0;">new</span>&nbsp;<span style="color: #dcdcaa;">Base32</span>();</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">byte</span>[]&nbsp;<span style="color: #9cdcfe;">decodedKey</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">codec</span>.<span style="color: #dcdcaa;">decode</span>(encodedKey);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #9cdcfe;">window</span>&nbsp;=&nbsp;<span style="color: #b5cea8;">3</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">for</span>&nbsp;(<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #9cdcfe;">i</span>&nbsp;=&nbsp;-window;&nbsp;i&nbsp;&lt;=&nbsp;window;&nbsp;++i)&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">long</span>&nbsp;<span style="color: #9cdcfe;">hash</span>&nbsp;=&nbsp;<span style="color: #dcdcaa;">verify_code</span>(decodedKey,&nbsp;wave&nbsp;+&nbsp;i);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">if</span>&nbsp;(hash&nbsp;==&nbsp;otpnum)</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;result&nbsp;=&nbsp;<span style="color: #569cd6;">true</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;<span style="color: #c586c0;">catch</span>&nbsp;(<span style="color: #4ec9b0;">InvalidKeyException</span>&nbsp;|&nbsp;<span style="color: #4ec9b0;">NoSuchAlgorithmException</span>&nbsp;<span style="color: #9cdcfe;">e</span>)&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #9cdcfe;">e</span>.<span style="color: #dcdcaa;">printStackTrace</span>();</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">return</span>&nbsp;result;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">private</span>&nbsp;<span style="color: #569cd6;">static</span>&nbsp;<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #dcdcaa;">verify_code</span>(<span style="color: #4ec9b0;">byte</span>[]&nbsp;<span style="color: #9cdcfe;">key</span>,&nbsp;<span style="color: #4ec9b0;">long</span>&nbsp;<span style="color: #9cdcfe;">t</span>)&nbsp;<span style="color: #569cd6;">throws</span>&nbsp;<span style="color: #4ec9b0;">NoSuchAlgorithmException</span>,&nbsp;<span style="color: #4ec9b0;">InvalidKeyException</span>&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">byte</span>[]&nbsp;<span style="color: #9cdcfe;">data</span>&nbsp;=&nbsp;<span style="color: #c586c0;">new</span>&nbsp;<span style="color: #4ec9b0;">byte</span>[<span style="color: #b5cea8;">8</span>];</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">long</span>&nbsp;<span style="color: #9cdcfe;">value</span>&nbsp;=&nbsp;t;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">for</span>&nbsp;(<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #9cdcfe;">i</span>&nbsp;=&nbsp;<span style="color: #b5cea8;">8</span>;&nbsp;i--&nbsp;&gt;&nbsp;<span style="color: #b5cea8;">0</span>;&nbsp;value&nbsp;&gt;&gt;&gt;=&nbsp;<span style="color: #b5cea8;">8</span>)&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;data[i]&nbsp;=&nbsp;(<span style="color: #4ec9b0;">byte</span>)&nbsp;value;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">SecretKeySpec</span>&nbsp;<span style="color: #9cdcfe;">signKey</span>&nbsp;=&nbsp;<span style="color: #c586c0;">new</span>&nbsp;<span style="color: #dcdcaa;">SecretKeySpec</span>(key,&nbsp;<span style="color: #ce9178;">"HmacSHA1"</span>);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">Mac</span>&nbsp;<span style="color: #9cdcfe;">mac</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">Mac</span>.<span style="color: #dcdcaa;">getInstance</span>(<span style="color: #ce9178;">"HmacSHA1"</span>);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #9cdcfe;">mac</span>.<span style="color: #dcdcaa;">init</span>(signKey);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">byte</span>[]&nbsp;<span style="color: #9cdcfe;">hash</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">mac</span>.<span style="color: #dcdcaa;">doFinal</span>(data);</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #9cdcfe;">offset</span>&nbsp;=&nbsp;hash[<span style="color: #b5cea8;">20</span>&nbsp;-&nbsp;<span style="color: #b5cea8;">1</span>]&nbsp;&amp;&nbsp;<span style="color: #b5cea8;">0xF</span>;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;We're&nbsp;using&nbsp;a&nbsp;long&nbsp;because&nbsp;Java&nbsp;hasn't&nbsp;got&nbsp;unsigned&nbsp;int.</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">long</span>&nbsp;<span style="color: #9cdcfe;">truncatedHash</span>&nbsp;=&nbsp;<span style="color: #b5cea8;">0</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">for</span>&nbsp;(<span style="color: #4ec9b0;">int</span>&nbsp;<span style="color: #9cdcfe;">i</span>&nbsp;=&nbsp;<span style="color: #b5cea8;">0</span>;&nbsp;i&nbsp;&lt;&nbsp;<span style="color: #b5cea8;">4</span>;&nbsp;++i)&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;truncatedHash&nbsp;&lt;&lt;=&nbsp;<span style="color: #b5cea8;">8</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;We&nbsp;are&nbsp;dealing&nbsp;with&nbsp;signed&nbsp;bytes:</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;we&nbsp;just&nbsp;keep&nbsp;the&nbsp;first&nbsp;byte.</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;truncatedHash&nbsp;|=&nbsp;(hash[offset&nbsp;+&nbsp;i]&nbsp;&amp;&nbsp;<span style="color: #b5cea8;">0xFF</span>);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;truncatedHash&nbsp;&amp;=&nbsp;<span style="color: #b5cea8;">0x7FFFFFFF</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;truncatedHash&nbsp;%=&nbsp;<span style="color: #b5cea8;">1000000</span>;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">return</span>&nbsp;(<span style="color: #4ec9b0;">int</span>)&nbsp;truncatedHash;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #569cd6;">public</span>&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #dcdcaa;">getQRBarcodeURL</span>()&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;QR코드&nbsp;주소&nbsp;생성</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">format2</span>&nbsp;=&nbsp;<span style="color: #ce9178;">"http://chart.apis.google.com/chart?cht=qr&amp;chs=200x200&amp;chl=otpauth://totp/%s%%3Fsecret%%3D%s&amp;chld=H|0"</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">return</span>&nbsp;<span style="color: #9cdcfe;">String</span>.<span style="color: #dcdcaa;">format</span>(format2,&nbsp;<span style="color: #569cd6;">this</span>.<span style="color: #9cdcfe;">keyHeader</span>,&nbsp;<span style="color: #569cd6;">this</span>.<span style="color: #9cdcfe;">encodedKey</span>);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>}</div><br><br><div><span style="color: #6a9955;">//&nbsp;생성&nbsp;방법</span></div><div><span style="color: #6a9955;">//&nbsp;seckey&nbsp;별도로&nbsp;db에&nbsp;저장?</span></div><div><span style="color: #4ec9b0;">GoogleOTPHelper</span>&nbsp;<span style="color: #9cdcfe;">optHelper</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">GoogleOTPHelper</span>.<span style="color: #dcdcaa;">builder</span>().<span style="color: #dcdcaa;">keyHeader</span>(empNo).<span style="color: #dcdcaa;">build</span>();</div><div><span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">seckey</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">optHelper</span>.<span style="color: #dcdcaa;">generate</span>();</div><div><span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">url</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">optHelper</span>.<span style="color: #dcdcaa;">getQRBarcodeURL</span>();</div><br><div><span style="color: #6a9955;">//검증&nbsp;방법</span></div><div><span style="color: #4ec9b0;">String</span>&nbsp;<span style="color: #9cdcfe;">realOTP</span>&nbsp;=&nbsp;<span style="color: #9cdcfe;">otp</span>.<span style="color: #dcdcaa;">replaceAll</span>(<span style="color: #ce9178;">"&nbsp;"</span>,&nbsp;<span style="color: #ce9178;">""</span>);</div><div><span style="color: #c586c0;">if</span>(!<span style="color: #9cdcfe;">GoogleOTPHelper</span>.<span style="color: #dcdcaa;">checkCode</span>(realOTP,&nbsp;<span style="color: #9cdcfe;">user</span>.<span style="color: #dcdcaa;">getOtpKey</span>()))&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">//&nbsp;otp&nbsp;틀림</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #9cdcfe;">formAuthFailureHandler</span>.<span style="color: #dcdcaa;">onAuthenticationFailure</span>(request,&nbsp;response,&nbsp;<span style="color: #569cd6;">null</span>);</div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">return</span>;</div><div>}</div><br></div><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p>


2차 인증, TOTP, 구글 OTP 사용방법