LS审批流程变更

GWY

2022-05-21 a3460549533111815e7f73d6cef601a58031525d

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
global class IdentityContextPlugin implements Process.Plugin {
    
    global Process.PluginDescribeResult describe() {
        Process.PluginDescribeResult result = new Process.PluginDescribeResult(); 
           result.Tag = 'Identity';
           result.Name = 'Identity Context Builder';
           result.description = 'Establishes Context for the current user to be used in Login Flows';
           result.inputParameters = new List<Process.PluginDescribeResult.InputParameter> {
              new Process.PluginDescribeResult.InputParameter('LoginFlow_UserAgent', Process.PluginDescribeResult.ParameterType.STRING, false),
              new Process.PluginDescribeResult.InputParameter('LoginFlow_LoginIpAddress', Process.PluginDescribeResult.ParameterType.STRING, false)
           };
       
           result.outputParameters = new List<Process.PluginDescribeResult.OutputParameter> {
               new Process.PluginDescribeResult.OutputParameter('User Id', Process.PluginDescribeResult.ParameterType.String),
               new Process.PluginDescribeResult.OutputParameter('User Type', Process.PluginDescribeResult.ParameterType.String),
               new Process.PluginDescribeResult.OutputParameter('AuthSession Id', Process.PluginDescribeResult.ParameterType.String),
               new Process.PluginDescribeResult.OutputParameter('IP Changed Since Login', Process.PluginDescribeResult.ParameterType.Boolean),
               new Process.PluginDescribeResult.OutputParameter('Is Trusted IP Address', Process.PluginDescribeResult.ParameterType.Boolean),
               new Process.PluginDescribeResult.OutputParameter('Has Registered Token', Process.PluginDescribeResult.ParameterType.Boolean),
               new Process.PluginDescribeResult.OutputParameter('Is iPhone', Process.PluginDescribeResult.ParameterType.Boolean),
               new Process.PluginDescribeResult.OutputParameter('Is iPad', Process.PluginDescribeResult.ParameterType.Boolean),
               new Process.PluginDescribeResult.OutputParameter('Is Android', Process.PluginDescribeResult.ParameterType.Boolean)
           };
           return result; 
    }
    
    global Process.PluginResult invoke(Process.PluginRequest request) {  
    
        
        Map<String, Object> result = new Map<String, Object>();
        Map<String,String> sessionAttributes;
        
        String userId =  UserInfo.getUserId();
        result.put('User Id', userId);
        
        List<TwoFactorInfo> twoFactors = [SELECT UserId, Type FROM TwoFactorInfo where userID = :userid];
        result.put('Has Registered Token', !TwoFactors.isEmpty());
        
        String userAgent = (String)request.inputParameters.get('LoginFlow_UserAgent');
        if (userAgent != null) {
            if (userAgent.contains('iPhone')) {
                result.put('Is iPhone', true);
            } else {
                result.put('Is iPhone', false);
            }
            if (userAgent.contains('iPad')) { 
                result.put('Is iPad', true);
            } else {
                result.put('Is iPad', false);
            }
            if (userAgent.contains('Android')) { 
                result.put('Is Android', true);
            } else {
                result.put('Is Android', false);
            }
        }
 
        if(!Test.isRunningTest())
            sessionAttributes = Auth.SessionManagement.getCurrentSession();
   
        if(sessionAttributes == null)
            return new Process.PluginResult(result);
            
        result.put('User Type', sessionAttributes.get('UserType'));
        result.put('AuthSession Id', sessionAttributes.get('SessionId'));
        String sourceIP = sessionAttributes.get('SourceIP');
        if(sourceIP != null)
        {
            result.put('Is Trusted IP Address', Auth.SessionManagement.inOrgNetworkRange(sourceIP));
            String loginIpAddress = (String)request.inputParameters.get('LoginFlow_LoginIpAddress');
            if ((sourceIP != null) && (loginIpAddress != null)) result.put('IP Changed Since Login', (sourceIP == loginIpAddress));
        }
       
        System.debug('Session Attributes: ' + sessionAttributes);
        System.debug('Context Builder Results: ' + result);
        
        return new Process.PluginResult(result);
    }
    
}