Merge pull request #84 from sw-security-web-app/SCRUM-85

[SCRUM-85] 새 비밀번호 발급 메소드 구현 및 변경

Author: tkv00

src/main/java/example/demo/domain/member/mail/MailServiceImpl.java

@@ -83,7 +83,7 @@ private MimeMessage createTemporaryPassword(String mail){
         );
 
         String subject="[Vero AI]임시비밀번호";
-        String uuid=CreateRandom.createShortUuid();
+        String uuid=CreateRandom.createNewPassword();
         findMember.setPassword(passwordEncoder.encode(uuid));
         memberRepository.save(findMember);
         String body="<h3>"+"임시 비밀번호입니다."+"</h3>"+

src/main/java/example/demo/util/CreateRandom.java

@@ -9,6 +9,8 @@
 import java.util.UUID;
 
 public class CreateRandom {
+    //비밀번호용 특수문자
+    private static final char[] specialChars={'!', '@', '#', '$', '%'};
     public static String createShortUuid(){
         try {
             String uuidString = UUID.randomUUID().toString();
@@ -36,4 +38,31 @@ public static String createRandomNumber(){
         }
         return randomNum;
     }
+
+    public static String createNewPassword(){
+        try {
+            String uuidString = UUID.randomUUID().toString();
+            byte[] uuidStringBytes = uuidString.getBytes(StandardCharsets.UTF_8);
+
+            MessageDigest messageDigest = MessageDigest.getInstance("SHA-256");
+            byte[] hashBytes = messageDigest.digest(uuidStringBytes); // 해시 계산 수행
+
+            StringBuilder sb = new StringBuilder();
+            for (int j = 0; j < 4; j++) { // 앞 4바이트만 사용
+                sb.append(String.format("%02x", hashBytes[j]));
+            }
+
+            // 특수문자 배열
+            Random random = new Random();
+
+            // 특수문자 3개 추가
+            for (int i = 0; i < 3; i++) {
+                sb.insert(random.nextInt(sb.length()), specialChars[random.nextInt(specialChars.length)]);
+            }
+
+            return sb.toString();
+        } catch (NoSuchAlgorithmException e) {
+            throw new RestApiException(UtilErrorCode.INTERNAL_ERROR); // 예외 처리
+        }
+    }
 }