QR/laws_chery_serve
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update:用户管理-修改密码,密码加密传输

Browse Source
This commit is contained in:
sunzheng
2024-08-16 15:03:14 +08:00
parent 05bf4417de
commit 55903e499e
3 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-module-system/src/main/java/com/jero/modules/system/controller/SysUserController.java
+5 -2
View File
@@ -458,13 +458,16 @@ public class SysUserController {
// @RequestMapping(value = "/changePassword", method = RequestMethod.PUT) // @RequestMapping(value = "/changePassword", method = RequestMethod.PUT)
@PostMapping("/changePassword") @PostMapping("/changePassword")
@RequiresPermissions("user:password") @RequiresPermissions("user:password")
public Result<T> changePassword(@RequestBody SysUser sysUser) { public Result<T> changePassword(@RequestBody JSONObject jsonObject) {
String rsaPublicKey = jsonObject.getString(RSA_PUBLIC_KEY);
String rsaPrivateKey = String.valueOf(redisUtil.get(rsaPublicKey));
SysUser sysUser = JSON.parseObject(jsonObject.toJSONString(), SysUser.class);
SysUser u = this.sysUserService.getOne(new LambdaQueryWrapper<SysUser>().eq(SysUser::getUsername, sysUser.getUsername())); SysUser u = this.sysUserService.getOne(new LambdaQueryWrapper<SysUser>().eq(SysUser::getUsername, sysUser.getUsername()));
if (u == null) { if (u == null) {
return Result.error(ResultCommon.NO_CORRESPONDING_DATA_FOUND); return Result.error(ResultCommon.NO_CORRESPONDING_DATA_FOUND);
} }
sysUser.setId(u.getId()); sysUser.setId(u.getId());
return sysUserService.changePassword(sysUser); return sysUserService.changePassword(sysUser, rsaPrivateKey);
} }
/** /**
laws-module-system/src/main/java/com/jero/modules/system/service/ISysUserService.java
+1 -1
View File
@@ -65,7 +65,7 @@ public interface ISysUserService extends IService<SysUser> {
* @param sysUser * @param sysUser
* @return * @return
*/ */
public Result<T> changePassword(SysUser sysUser); public Result<T> changePassword(SysUser sysUser, String rsaPrivateKey);
/** /**
* 删除用户 * 删除用户
laws-module-system/src/main/java/com/jero/modules/system/service/impl/SysUserServiceImpl.java
+2 -2
View File
@@ -116,10 +116,10 @@ public class SysUserServiceImpl extends ServiceImpl<SysUserMapper, SysUser> impl
@Override @Override
@CacheEvict(value = {CacheConstant.SYS_USERS_CACHE}, allEntries = true) @CacheEvict(value = {CacheConstant.SYS_USERS_CACHE}, allEntries = true)
public Result<T> changePassword(SysUser sysUser) { public Result<T> changePassword(SysUser sysUser, String rsaPrivateKey) {
String password = CommonUtils.decryptBtRsaPriKey(sysUser.getPassword(), rsaPrivateKey); // 利用私钥解密
String salt = UUIDUtils.randomUUID(8); String salt = UUIDUtils.randomUUID(8);
sysUser.setSalt(salt); sysUser.setSalt(salt);
String password = sysUser.getPassword();
String passwordEncode = PasswordUtil.encrypt(sysUser.getUsername(), password, salt); String passwordEncode = PasswordUtil.encrypt(sysUser.getUsername(), password, salt);
sysUser.setPassword(passwordEncode); sysUser.setPassword(passwordEncode);
this.userMapper.updateById(sysUser); this.userMapper.updateById(sysUser);