+

+		<!-- 해외접속IP 차단 -->

+			<groupId>com.maxmind.geoip2</groupId>

+			<artifactId>geoip2</artifactId>

+			<version>2.15.0</version>

+		<!-- valkey -->

+package itn.com.cmm.interceptor;

+

+import itn.let.mjo.block.service.MjonBlockService;

+import org.slf4j.Logger;

+import org.slf4j.LoggerFactory;

+import org.springframework.beans.factory.annotation.Autowired;

+import org.springframework.stereotype.Component;

+import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

+

+import javax.servlet.http.HttpServletRequest;

+import javax.servlet.http.HttpServletResponse;

+import java.io.*;

+

+@Component

+public class GeoIpBlockInterceptor extends HandlerInterceptorAdapter {

+

+    private static final Logger LOGGER = LoggerFactory.getLogger(GeoIpBlockInterceptor.class);

+

+    @Autowired

+    private MjonBlockService mjonBlockService;

+

+    @Override

+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

+

+        if (Boolean.TRUE.equals(request.getAttribute("GEOIP_CHECKED"))) {

+            Boolean isAlreadyBlocked = (Boolean) request.getAttribute("GEOIP_BLOCKED");

+            if (Boolean.TRUE.equals(isAlreadyBlocked)) {

+                redirectToAccessBlock(request, response);

+                return false;

+            }

+            return true;

+        }

+

+        request.setAttribute("GEOIP_CHECKED", true);

+

+        String clientIp = getClientIp(request);

+

+        LOGGER.warn(

+                "[GEOIP TEST] " +

+                        "RemoteAddr={}, X-Forwarded-For={}, Proxy-Client-IP={}, " +

+                        "X-Real-IP={}, ResolvedClientIp={}",

+                request.getRemoteAddr(),

+                request.getHeader("X-Forwarded-For"),

+                request.getHeader("Proxy-Client-IP"),

+                request.getHeader("X-Real-IP"),

+                clientIp

+        );

+

+        //clientIp = "51.159.125.179";

+        if ("127.0.0.1".equals(clientIp) || "0:0:0:0:0:0:0:1".equals(clientIp) || "::1".equals(clientIp)) {

+            request.setAttribute("GEOIP_BLOCKED", false);

+            return true;

+        }

+

+        // 해외 접속 검사 및 로그 적재

+        boolean isBlocked = mjonBlockService.checkAndLogGeoIpBlock(clientIp, request.getRequestURI());

+        request.setAttribute("GEOIP_BLOCKED", isBlocked);

+

+        if (isBlocked) {

+            redirectToAccessBlock(request, response);

+            return false;

+        }

+

+        return true;

+    }

+

+    private void redirectToAccessBlock(HttpServletRequest request, HttpServletResponse response) throws Exception {

+        response.reset();

+        response.setStatus(HttpServletResponse.SC_OK);

+        response.setContentType("text/html;charset=UTF-8");

+        response.setCharacterEncoding("UTF-8");

+

+        PrintWriter writer = response.getWriter();

+

+        StringBuilder sb = new StringBuilder();

+        sb.append("<!DOCTYPE html>");

+        sb.append("<html lang='ko'>");

+        sb.append("<head>");

+        sb.append("<meta charset='UTF-8'>");

+        sb.append("<meta name='viewport' content='width=device-width, initial-scale=1.0'>");

+        sb.append("<title>국외 IP 접속 제한 안내</title>");

+        sb.append("<style>");

+        sb.append("html, body { margin: 0 !important; padding: 0 !important; width: 100% !important; height: 100% !important; overflow: hidden !important; }");

+        sb.append(".geoip-full-mask { position: fixed !important; top: 0 !important; left: 0 !important; width: 100vw !important; height: 100vh !important; background-color: #eee !important; z-index: 99999999 !important; display: flex !important; justify-content: center !important; align-items: center !important; }");

+        sb.append(".geoip-card-box { width: 620px !important; min-height: 260px !important; padding: 35px 40px 50px 40px !important; background-color: #fff !important; border: 15px solid #d8d8d8 !important; box-sizing: border-box !important; }");

+        sb.append(".geoip-card-box h1 { color: #222 !important; font-size: 24px !important; text-align: center !important; border-bottom: 1px solid #a8a8a8 !important; padding: 0 0 20px 0 !important; font-weight: 600 !important; margin-top: 0 !important; word-break: keep-all !important; font-family: 'Noto Sans KR', sans-serif !important; }");

+        sb.append(".geoip-card-box p { text-align: center !important; margin: 20px 0 0 0 !important; font-size: 16px !important; font-weight: 400 !important; color: #555 !important; line-height: 28px !important; word-break: keep-all !important; font-family: 'Noto Sans KR', sans-serif !important; }");

+        sb.append("</style>");

+        sb.append("</head>");

+        sb.append("<body>");

+        sb.append("<div class='geoip-full-mask'>");

+        sb.append("    <div class='geoip-card-box'>");

+        sb.append("        <h1>국외 IP 접속 제한 안내</h1>");

+        sb.append("        <p>문자온은 보안 정책에 따라 국내에서만 서비스를 이용하실 수 있습니다.<br><br>국외 IP로 확인되어 접속이 제한되었습니다.<br>국내 네트워크 환경에서 다시 접속해 주시기 바랍니다.</p>");

+        sb.append("    </div>");

+        sb.append("</div>");

+        sb.append("</body>");

+        sb.append("</html>");

+

+        writer.write(sb.toString());

+        writer.flush();

+

+        writer.flush();

+    }

+

+    private String getClientIp(HttpServletRequest request) {

+        String ip = request.getHeader("X-Forwarded-For");

+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {

+            ip = request.getHeader("Proxy-Client-IP");

+        }

+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {

+            ip = request.getHeader("X-Real-IP");

+        }

+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {

+            ip = request.getRemoteAddr();

+        }

+        if (ip != null && ip.contains(",")) {

+            ip = ip.split(",")[0].trim();

+        }

+        return ip;

+    }

+}(No newline at end of file)

+package itn.com.cmm.interceptor;

+

+import itn.com.cmm.util.ClientRequestUtil;

+import itn.let.sym.log.access.UserAccessLogService;

+import itn.let.sym.log.access.UserAccessLogVO;

+import itn.let.sym.mnu.mpm.service.EgovMenuManageService;

+import itn.let.utl.sim.service.EgovClntInfo;

+import org.slf4j.Logger;

+import org.slf4j.LoggerFactory;

+import org.springframework.stereotype.Component;

+import org.springframework.web.method.HandlerMethod;

+import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

+

+import javax.annotation.Resource;

+import javax.servlet.DispatcherType;

+import javax.servlet.http.HttpServletRequest;

+import javax.servlet.http.HttpServletResponse;

+

+@Component

+public class UserAccessLogInterceptor extends HandlerInterceptorAdapter {

+

+    private static final Logger LOGGER = LoggerFactory.getLogger(UserAccessLogInterceptor.class);

+

+    private static final String LOGGED_ATTRIBUTE = UserAccessLogInterceptor.class.getName() + ".LOGGED";

+

+

+    @Resource(name = "userAccessLogService")

+    private UserAccessLogService userAccessLogService;

+    @Resource(name = "meunManageService")

+    private EgovMenuManageService menuManageService;

+

+    @Override

+    public void afterCompletion(

+            HttpServletRequest request,

+            HttpServletResponse response,

+            Object handler,

+            Exception ex

+    ) throws Exception {

+

+        try {

+            if (request.getDispatcherType() != DispatcherType.REQUEST) {

+                return;

+            }

+

+            if (!(handler instanceof HandlerMethod)) {

+                return;

+            }

+

+            if (Boolean.TRUE.equals(request.getAttribute(LOGGED_ATTRIBUTE))) {

+                return;

+            }

+            String requestUri = request.getRequestURI();

+            String menuNm = menuManageService.selectAnonymousMenuNmByUrl(requestUri);

+

+            if (menuNm == null) {

+                return;

+            }

+

+            request.setAttribute(LOGGED_ATTRIBUTE, Boolean.TRUE);

+

+            int statusCode = response.getStatus();

+

+            boolean success = ex == null && statusCode < HttpServletResponse.SC_BAD_REQUEST;

+

+            UserAccessLogVO userAccessLogVO = new UserAccessLogVO();

+            userAccessLogVO.setUserId(ClientRequestUtil.getUserId(request));

+            userAccessLogVO.setAccessIp(EgovClntInfo.getClntIP(request));

+            userAccessLogVO.setUri(requestUri);

+            userAccessLogVO.setMenuNm(menuNm);

+            userAccessLogVO.setResult(success ? "SUCCESS" : "FAIL");

+

+            userAccessLogService.insertUserAccessLog(userAccessLogVO);

+        } catch (Exception logException) {

+            LOGGER.error(

+                    "사용자 접근 로그 저장 중 오류가 발생했습니다. URI: {}",

+                    request.getRequestURI(),

+                    logException

+            );

+        } finally {

+            super.afterCompletion(request, response, handler, ex);

+        }

+    }

+}(No newline at end of file)

+package itn.com.cmm.util;

+

+import itn.com.cmm.LoginVO;

+

+import javax.servlet.http.HttpServletRequest;

+import javax.servlet.http.HttpSession;

+

+public class ClientRequestUtil {

+    private static final String ANONYMOUS = "ANONYMOUS";

+    private static final String LOGIN_VO_ATTRIBUTE = "LoginVO";

+

+    public static String getUserId(HttpServletRequest request) {

+        if (request == null) {

+            return ANONYMOUS;

+        }

+

+        HttpSession session = request.getSession(false);

+

+        if (session == null) {

+            return ANONYMOUS;

+        }

+

+        Object loginAttribute = session.getAttribute(LOGIN_VO_ATTRIBUTE);

+

+        if (!(loginAttribute instanceof LoginVO)) {

+            return ANONYMOUS;

+        }

+

+        LoginVO loginVO = (LoginVO) loginAttribute;

+

+        return loginVO.getId() == null || loginVO.getId().trim().isEmpty()

+                ? ANONYMOUS

+                : loginVO.getId();

+    }

+}

+	// 문자 내용 중 외부 URL 탐지용 정규식

+	private static final Pattern URL_PATTERN = Pattern.compile(

+			  "\\b((https?://|www\\.)[\\w가-힣\\-]+(\\.[\\w가-힣\\-]+)+(/[^\\s]*)?"

+			+ "|[\\w가-힣\\-]+(\\.[\\w가-힣\\-]+)*\\.[a-z]{2,24}\\b(/[^\\s]*)?)"

+			, Pattern.CASE_INSENSITIVE);

+

+		// SpamStatus: 스팸문자유무, DelayYn: 지연발송 여부

+

+			// 문자 내용 중 URL 탐지 (원본 텍스트: personalizedSmsTxt)

+			Matcher urlMatcher = URL_PATTERN.matcher(personalizedSmsTxt);

+			if (urlMatcher.find()) {

+				spmCnt++;

+				spmFilterTxt += urlMatcher.group() + ",";

+			}

+

+				mjonMsgVO.setSpamKeyword(spmFilterTxt.trim());

+

+	boolean isBlockedIp(String userIp) throws Exception;

+

+//

+

+	@Override

+	public boolean isBlockedIp(String userIp) throws Exception {

+		HackIpVO hackIpVO = new HackIpVO();

+		hackIpVO.setAccessIp(userIp);

+		hackIpVO.setBlockYn("Y");

+

+		return selectHackIpVO(hackIpVO) != null;

+	}

+

+    /**

+     * 작성자   : 조민수

+     * 작성일자 : 2026/07/24

+     * 공통 페이징 정보를 초기화한다.

+     *

+     * <p>사용 방법 및 적용 예시는 사내 Wiki의

+     * 'https://wiki.iten.co.kr/40.프로젝트:2026_base_프로젝트:0.참고자료:공용함수정보:pagination-util' 문서를 참고한다.</p>

+     *

+     * @param <T vo> BasePaginationVO를 상속한 VO

+     * @return 초기화된 PaginationInfo

+     */

+

+}

+package itn.com.utl.response;

+

+import lombok.Getter;

+import lombok.Setter;

+

+@Setter

+@Getter

+public class ApiResponse<T> {

+    private boolean success;

+    private String message;

+    private T data;

+

+    public static <T> ApiResponse<T> success() {return new ApiResponse<>(true, null, null);}

+

+    public static <T> ApiResponse<T> success(T data) {

+        return new ApiResponse<>(true, null, data);

+    }

+

+    public static <T> ApiResponse<T> success(T data, String message) {

+        return  new ApiResponse<>(true, message, data);

+    }

+

+    public static <T> ApiResponse<T> fail(String message) {

+        return new ApiResponse<>(false, message, null);

+    }

+

+    public ApiResponse() {}

+

+    public ApiResponse(boolean success, String message, T data) {

+        this.success = success;

+        this.message = message;

+        this.data = data;

+    }

+

+    public static <T> ApiResponse<T> successWithMessage(String message){

+        ApiResponse<T> res = new ApiResponse<>();

+        res.success = true;

+        res.message = message;

+        res.data = null;

+        return res;

+    }

+

+    @Override

+    public String toString() {

+        return "ApiResponse{" +

+                "success=" + success +

+                ", message='" + message + '\'' +

+                ", data=" + data +

+                '}';

+    }

+}

+

+package itn.com.utl.response;

+

+import egovframework.rte.ptl.mvc.tags.ui.pagination.PaginationInfo;

+import lombok.Getter;

+import lombok.NoArgsConstructor;

+import lombok.Setter;

+

+import java.util.List;

+import java.util.Map;

+

+@Getter

+@Setter

+@NoArgsConstructor

+public class PageResponse<T> {

+    private List<T> list;

+    private int totalItems;

+    private int totalPages;

+    private int currentPage;

+    private int size;

+    private Map<String, Object> extraData;

+    

+    public PageResponse(List<T> list, Map<String, Object> extraData, int currentPage, int totalItems, int totalPages, int size) {

+        this.list = list;

+        this.extraData = extraData;

+        this.currentPage = currentPage;

+        this.totalItems = totalItems;

+        this.totalPages = totalPages;

+        this.size = size;

+    }

+

+    public static <T> PageResponse<T> withList(List<T> list, PaginationInfo pageInfo) {

+        PageResponse<T> res = new PageResponse<>();

+        res.setList(list);

+        res.setPageInfo(pageInfo);

+        return res;

+    }

+

+    public static <T> PageResponse<T> withExtra(Map<String, Object> extraData, PaginationInfo pageInfo) {

+        PageResponse<T> res = new PageResponse<>();

+        res.setExtraData(extraData);

+        res.setPageInfo(pageInfo);

+        return res;

+    }

+

+    public static <T> PageResponse<T> withAll(List<T> list, Map<String, Object> extraData, PaginationInfo pageInfo) {

+        PageResponse<T> res = new PageResponse<>();

+        res.setList(list);

+        res.setExtraData(extraData);

+        res.setPageInfo(pageInfo);

+        return res;

+    }

+

+    private void setPageInfo(PaginationInfo pageInfo) {

+        this.currentPage = pageInfo.getCurrentPageNo();

+        this.totalItems = pageInfo.getTotalRecordCount();

+        this.totalPages = pageInfo.getTotalPageCount();

+        this.size = pageInfo.getRecordCountPerPage();

+    }

+}

+import itn.com.utl.page.PageableVO;

+public class MberCertLoginLogVO extends UserDefaultVO {

+	public StatusResponse insertCertPhone(MberCertPhoneVO mberCertPhoneVO, String moblphonNo,

+			String dept, String accessIp) throws Exception;

+	public StatusResponse deleteCertPhone(MberCertPhoneVO mberCertPhoneVO, String accessIp) throws Exception;

+

+	public List<MberCertPhoneVO> selectEligibleCertPhoneList(String userId);

+

+	public boolean isRegisteredAuthPhone(String userId, String phoneNo);

+

+	public boolean isEligibleCertPhone(String userId, String phoneNo);

+

+	public void resetMemberPhone(String mberId, String phoneNo, String accessIp) throws Exception;

+

+	private String phoneType;

+	public String getPhoneType() {

+		return phoneType;

+	}

+	public void setPhoneType(String phoneType) {

+		this.phoneType = phoneType;

+	}

+	@SuppressWarnings("unchecked")

+	public List<MberCertPhoneVO> selectEligibleCertPhoneList(String userId) {

+		return (List<MberCertPhoneVO>) list("mberCertPhoneVO.selectEligibleCertPhoneList", userId);

+	}

+

+	public int countRegisteredAuthPhone(MberCertPhoneVO mberCertPhoneVO) {

+		return (Integer) select("mberCertPhoneVO.countRegisteredAuthPhone", mberCertPhoneVO);

+	}

+

+	public int countEligibleCertPhone(MberCertPhoneVO mberCertPhoneVO) {

+		return (Integer) select("mberCertPhoneVO.countEligibleCertPhone", mberCertPhoneVO);

+	}

+

+	public int countAdditionalCertPhone(String userId) {

+		return (Integer) select("mberCertPhoneVO.countAdditionalCertPhone", userId);

+	}

+

+	public int deleteCertPhone(MberCertPhoneVO mberCertPhoneVO) {

+		return update("mberCertPhoneVO.deleteCertPhone", mberCertPhoneVO);

+	public int updateMberCertPhone(MberCertPhoneVO mberCertPhoneVO) {

+		return update("mberCertPhoneVO.updateMberCertPhone", mberCertPhoneVO);

+

+	public void resetMemberPhone(MberCertPhoneVO mberCertPhoneVO) {

+		update("certPhoneDAO.resetMemberPhone", mberCertPhoneVO);

+	}

+import org.springframework.transaction.annotation.Transactional;

+import itn.let.uat.uia.service.SecondAuthMethodLogConstants;

+import itn.let.uat.uia.service.SecondAuthMethodLogService;

+import itn.let.uat.uia.service.SecondAuthMethodLogVO;

+	@Resource(name = "secondAuthMethodLogService")

+	private SecondAuthMethodLogService secondAuthMethodLogService;

+	@Transactional(rollbackFor = Exception.class)

+	public StatusResponse insertCertPhone(MberCertPhoneVO mberCertPhoneVO, String moblphonNo, String dept, String accessIp) throws Exception {

+		int maxCount = "c".equalsIgnoreCase(dept) ? 4 : 3;

+		if (certPhoneDAO.countAdditionalCertPhone(mberCertPhoneVO.getMberId()) >= maxCount - 1) {

+			return new StatusResponse(HttpStatus.CONFLICT,

+					"인증 휴대폰번호는 최대 " + maxCount + "개까지 등록할 수 있습니다.", LocalDateTime.now());

+		if (!isEligibleCertPhone(mberCertPhoneVO.getMberId(), mberCertPhoneVO.getMbtlnum())) {

+			return new StatusResponse(HttpStatus.BAD_REQUEST,

+					"승인 완료된 발신번호가 아닙니다.", LocalDateTime.now());

+		}

+		MberCertPhoneVO mberCertPhoneListVO = certPhoneDAO.findByCertPhoneInfo(mberCertPhoneVO);

+		if(mberCertPhoneListVO != null) {

+			return new StatusResponse(HttpStatus.CONFLICT, "중복 번호입니다.", LocalDateTime.now());

+		}

+		if (mberCertPhoneVO.getMbtlnum() != null && mberCertPhoneVO.getMbtlnum().equals(moblphonNo)) {

+			return new StatusResponse(HttpStatus.CONFLICT, "가입 휴대폰번호와 동일한 번호입니다.", LocalDateTime.now());

+		}

+

+		certPhoneDAO.insertCertPhone(mberCertPhoneVO);

+		insertMethodChangeLog(mberCertPhoneVO.getMberId(), mberCertPhoneVO.getMbtlnum(),

+				SecondAuthMethodLogConstants.ACTION_REGISTER, SecondAuthMethodLogConstants.VERIFY_SMS, accessIp);

+	@Transactional(rollbackFor = Exception.class)

+	public StatusResponse deleteCertPhone(MberCertPhoneVO mberCertPhoneVO, String accessIp) throws Exception {

+		int updatedCount = certPhoneDAO.deleteCertPhone(mberCertPhoneVO);

+		if (updatedCount < 1) {

+			return new StatusResponse(HttpStatus.NOT_FOUND, "삭제할 휴대폰번호를 찾을 수 없습니다.", LocalDateTime.now());

+		}

+		insertMethodChangeLog(mberCertPhoneVO.getMberId(), mberCertPhoneVO.getMbtlnum(),

+				SecondAuthMethodLogConstants.ACTION_DELETE, SecondAuthMethodLogConstants.VERIFY_SMS, accessIp);

+	@Override

+	public List<MberCertPhoneVO> selectEligibleCertPhoneList(String userId) {

+		return certPhoneDAO.selectEligibleCertPhoneList(userId);

+	}

+

+	@Override

+	public boolean isRegisteredAuthPhone(String userId, String phoneNo) {

+		MberCertPhoneVO vo = new MberCertPhoneVO();

+		vo.setMberId(userId);

+		vo.setMbtlnum(phoneNo);

+		return certPhoneDAO.countRegisteredAuthPhone(vo) > 0;

+	}

+

+	@Override

+	public boolean isEligibleCertPhone(String userId, String phoneNo) {

+		MberCertPhoneVO vo = new MberCertPhoneVO();

+		vo.setMberId(userId);

+		vo.setMbtlnum(phoneNo);

+		return certPhoneDAO.countEligibleCertPhone(vo) > 0;

+	}

+		int updatedCount = certPhoneDAO.updateMberCertPhone(mberCertPhoneVO);

+		if (updatedCount < 1) {

+			return new StatusResponse(HttpStatus.NOT_FOUND, "수정할 휴대폰번호를 찾을 수 없습니다.", LocalDateTime.now());

+		}

+

+	@Override

+	@Transactional(rollbackFor = Exception.class)

+	public void resetMemberPhone(String mberId, String phoneNo, String accessIp) throws Exception {

+		MberCertPhoneVO mberCertPhoneVO = new MberCertPhoneVO();

+		mberCertPhoneVO.setMberId(mberId);

+		mberCertPhoneVO.setMbtlnum(phoneNo);

+		certPhoneDAO.resetMemberPhone(mberCertPhoneVO);

+		insertMethodChangeLog(mberId, phoneNo, SecondAuthMethodLogConstants.ACTION_UPDATE,

+				SecondAuthMethodLogConstants.VERIFY_KMC, accessIp);

+	}

+

+	private void insertMethodChangeLog(String mberId, String phoneNo, String actionType,

+			String verifyType, String accessIp) throws Exception {

+		SecondAuthMethodLogVO logVO = new SecondAuthMethodLogVO();

+		logVO.setMberId(mberId);

+		logVO.setPhoneNo(phoneNo);

+		logVO.setActionType(actionType);

+		logVO.setVerifyType(verifyType);

+		logVO.setAccessIp(accessIp);

+		secondAuthMethodLogService.insertSecondAuthMethodLog(logVO);

+	}

+package itn.let.cert.phone.support;

+

+public final class CertPhoneAuthConstants {

+

+    public static final String PURPOSE_ADD_EXISTING = "ADD_EXISTING";

+    public static final String PURPOSE_ADD_NEW = "ADD_NEW";

+    public static final String PURPOSE_DELETE_EXISTING = "DELETE_EXISTING";

+

+    public static final String PENDING_PHONE_PREFIX = "certPhonePendingPhone.";

+    public static final String SEND_COUNT_PREFIX = "certPhoneSendCount.";

+    public static final String LAST_SENT_AT_PREFIX = "certPhoneLastSentAt.";

+    public static final String VERIFIED_PHONE_PREFIX = "certPhoneVerifiedPhone.";

+    public static final String VERIFIED_AT_PREFIX = "certPhoneVerifiedAt.";

+

+    public static final int MAX_SEND_COUNT = 4;

+    public static final long RESEND_INTERVAL_MILLIS = 30 * 1000L;

+    public static final long VERIFIED_TIMEOUT_MILLIS = 5 * 60 * 1000L;

+

+    private CertPhoneAuthConstants() {

+    }

+}

+package itn.let.cert.phone.support;

+

+public final class PhoneResetSessionConstants {

+

+	public static final String PENDING_USER_ID = "phoneResetPendingUserId";

+	public static final String PENDING_AT = "phoneResetPendingAt";

+	public static final long TIMEOUT_MILLIS = 10 * 60 * 1000L;

+

+	private PhoneResetSessionConstants() {

+	}

+}