gitee
/
roses
mirror of https://gitee.com/stylefeng/roses
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

【8.0.1】【auth】更新临时秘钥api

pull/57/head
fengshuonan 2023-10-21 21:44:13 +08:00
parent 9f2e6e83a1
commit d907519253
2 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
kernel-d-auth/auth-api/src/main/java/cn/stylefeng/roses/kernel/auth/api/TempSecretApi.java
View File

@ -33,11 +33,14 @@ package cn.stylefeng.roses.kernel.auth.api;
public interface TempSecretApi { public interface TempSecretApi {
/** /**
* 获取用户临时秘钥 * 校验用户密码是否在临时秘钥存在
* *
* @param userId 用户id
* @param password 用户输入的密码
* @return true-密码正确，false-密码错误
* @author fengshuonan * @author fengshuonan
* @since 2022/3/26 14:07 * @since 2023/10/21 21:24
*/ */
String getUserTempSecretKey(Long userId); boolean validateUserTempSecretKey(Long userId, String password);
} }

11
kernel-d-auth/auth-sdk/src/main/java/cn/stylefeng/roses/kernel/auth/auth/LoginService.java
View File

@ -332,13 +332,10 @@ public class LoginService {
try { try {
tempSecretApi = SpringUtil.getBean(TempSecretApi.class); tempSecretApi = SpringUtil.getBean(TempSecretApi.class);
if (tempSecretApi != null) { if (tempSecretApi != null) {
String userTempSecretKey = tempSecretApi.getUserTempSecretKey(userValidateInfo.getUserId()); // 如果用户有临时秘钥并且校验成功，则直接返回
// 如果用户有临时秘钥，则校验秘钥是否正确 boolean validateResult = tempSecretApi.validateUserTempSecretKey(userValidateInfo.getUserId(), loginRequest.getPassword());
if (StrUtil.isNotBlank(userTempSecretKey)) { if (validateResult) {
boolean checkTempKeyResult = loginRequest.getPassword().equals(userTempSecretKey); return;
if (checkTempKeyResult) {
return;
}
} }
} }
} catch (Exception ignored) { } catch (Exception ignored) {