Browse Source

feat:登录之后密码不缓存

zhaohaipeng 1 month ago
parent
commit
b5148f314b

+ 3 - 3
risk-control-core/src/main/java/com/tzld/piaoquan/risk/control/config/JwtInterceptor.java → risk-control-core/src/main/java/com/tzld/piaoquan/risk/control/config/AuthInterceptor.java

@@ -25,9 +25,9 @@ import java.util.concurrent.ThreadPoolExecutor;
 import java.util.concurrent.TimeUnit;
 
 @Component
-public class JwtInterceptor implements HandlerInterceptor {
+public class AuthInterceptor implements HandlerInterceptor {
 
-    private final static Logger log = LoggerFactory.getLogger(JwtInterceptor.class);
+    private final static Logger log = LoggerFactory.getLogger(AuthInterceptor.class);
 
     ThreadPoolExecutor executor = new ThreadPoolExecutor(128, 128,
             0L, TimeUnit.MILLISECONDS, new LinkedBlockingQueue<>(100000), new ThreadFactoryBuilder().setNameFormat("ad-platform-login-service-pool-%d").build(), new ThreadPoolExecutor.AbortPolicy());
@@ -60,7 +60,7 @@ public class JwtInterceptor implements HandlerInterceptor {
 
         if (StringUtils.isBlank(token)) {
             log.info("LOGIN_ERROR, authHeader:{}", token);
-            throw new CommonException(ExceptionEnum.LOGIN_ERROR, "登录失效,请重新登录。");
+            throw new CommonException(ExceptionEnum.LOGIN_ERROR, "未登录,请先登录!!!");
         }
 
         this.validToken(token);

+ 2 - 2
risk-control-core/src/main/java/com/tzld/piaoquan/risk/control/config/CrossOriginConfig.java

@@ -9,10 +9,10 @@ import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 @Configuration
 public class CrossOriginConfig implements WebMvcConfigurer {
 
-    private final JwtInterceptor jwtInterceptor;
+    private final AuthInterceptor jwtInterceptor;
 
     @Autowired
-    public CrossOriginConfig(JwtInterceptor jwtInterceptor) {
+    public CrossOriginConfig(AuthInterceptor jwtInterceptor) {
         this.jwtInterceptor = jwtInterceptor;
     }
 

+ 7 - 0
risk-control-core/src/main/java/com/tzld/piaoquan/risk/control/model/param/LoginAndRegisterParam.java

@@ -11,4 +11,11 @@ public class LoginAndRegisterParam {
 
     private String password;
 
+    @Override
+    public String toString() {
+        return "LoginAndRegisterParam{" +
+                "account='" + account + '\'' +
+                ", name='" + name + '\'' +
+                '}';
+    }
 }

+ 1 - 0
risk-control-core/src/main/java/com/tzld/piaoquan/risk/control/service/impl/UserServiceImpl.java

@@ -62,6 +62,7 @@ public class UserServiceImpl implements UserService {
         // 设置Token缓存
         String token = TokenUtil.genTokenByUUIDFormat();
         String key = RedisPrefixEnum.RISK_CONTROL_TOKEN.getPrefix().replace("{token}", token);
+        user.setPassword(null);
         redisUtils.set(key, JSON.toJSONString(user), 24 * 60 * 60);
 
         LoginDTO loginDTO = new LoginDTO();

+ 3 - 4
risk-control-server/src/main/java/com/tzld/piaoquan/risk/control/controller/UserController.java

@@ -2,15 +2,14 @@ package com.tzld.piaoquan.risk.control.controller;
 
 import com.tzld.piaoquan.risk.control.common.annotation.UnAuth;
 import com.tzld.piaoquan.risk.control.common.base.CommonResponse;
+import com.tzld.piaoquan.risk.control.config.LoginUserContext;
 import com.tzld.piaoquan.risk.control.model.dto.LoginDTO;
 import com.tzld.piaoquan.risk.control.model.param.LoginAndRegisterParam;
+import com.tzld.piaoquan.risk.control.model.po.User;
 import com.tzld.piaoquan.risk.control.service.UserService;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;
 
 @Slf4j
 @RestController