diff --git a/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java b/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java index 3f08722..880e73f 100644 --- a/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java +++ b/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java @@ -40,7 +40,7 @@ import java.util.Map; */ @Slf4j @RestController -@RequestMapping("/api/bigScreenScreen") +@RequestMapping("/mobile/auth") public class MobileAuthorizationController { @Autowired private ISysUserService userService; @@ -51,9 +51,13 @@ public class MobileAuthorizationController { @SaIgnore //("手持登陆验证") public ResponseEntity handLogin(@RequestBody Map whereJson) { - SysUser userInfo = userService.getOne(new QueryWrapper().eq("username", whereJson.get("user"))); - if (userInfo == null || !userInfo.getPassword().equals(SaSecureUtil.md5BySalt(RsaUtils.decryptByPrivateKey(RsaUtils.KEY, whereJson.get("password")), "salt"))) { // 这里需要密码加密 - throw new BadRequestException("账号或密码错误"); + SysUser userInfo = userService.getOne(new QueryWrapper().eq("username", whereJson.get("username"))); + if (userInfo == null) { // 这里需要密码加密 + throw new BadRequestException("用户不存在"); + } + String now = SaSecureUtil.md5BySalt(RsaUtils.decryptByPrivateKey(RsaUtils.KEY, whereJson.get("password")), "salt"); + if (!userInfo.getPassword().equals(now)) { + throw new BadRequestException("密码错误"); } if (!userInfo.getIs_used()) { throw new BadRequestException("账号未激活");