Przeglądaj źródła

fix密码加密修改

1 miesiąc temu
rodzic
commit
0b0a9403c9

+ 2 - 1
edu-travel-oauth/src/main/java/edu/travel/config/AuthorizationServer.java

@@ -5,6 +5,7 @@ import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.http.HttpMethod;
 import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.NoOpPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
@@ -47,7 +48,7 @@ public class AuthorizationServer extends AuthorizationServerConfigurerAdapter {
     //密码编码器
     @Bean
     public PasswordEncoder passwordEncoder() {
-        return  NoOpPasswordEncoder.getInstance();
+        return  new BCryptPasswordEncoder();
     }
     //ClientDetailsService和AuthorizationCodeServices从数据库读取数据。
     //将客户端信息存储到数据库

+ 4 - 1
edu-travel-oauth/src/main/java/edu/travel/service/impl/UserServiceImpl.java

@@ -16,6 +16,7 @@ import org.springframework.security.core.userdetails.User;
 import org.springframework.security.core.userdetails.UserDetails;
 import org.springframework.security.core.userdetails.UserDetailsService;
 import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;
 import org.springframework.web.context.request.RequestContextHolder;
 import org.springframework.web.context.request.ServletRequestAttributes;
@@ -34,6 +35,8 @@ public class UserServiceImpl implements UserDetailsService {
     private RedisTemplate redisTemplate;
     @Autowired
     private SysRoleService sysRoleService;
+    @Autowired
+    private PasswordEncoder passwordEncoder;
     @Override
     public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
         if (StringUtils.isBlank(username)) {
@@ -59,7 +62,7 @@ public class UserServiceImpl implements UserDetailsService {
             if (code.equals(object.toString())){
                 redisTemplate.opsForValue().set(username+"_info", JSON.toJSONString(tenant));
 
-                return new User(tenant.getTenantPhone(),code,new ArrayList<>() );
+                return new User(tenant.getTenantPhone(),passwordEncoder.encode(code),new ArrayList<>() );
             }
             throw new UsernameNotFoundException("验证码错误");
         }

+ 1 - 1
edu-travel-service/edu-travel-service-tenement/src/main/java/edu/travel/tenant/config/TokenConfig.java

@@ -21,7 +21,7 @@ public class TokenConfig {
     private String privateKey;
     @Bean
     public PasswordEncoder passwordEncoder(){
-        return NoOpPasswordEncoder.getInstance();
+        return new BCryptPasswordEncoder();
     }
     @Bean
     public TokenStore tokenStore() {