From b1d5976bcde351d8550809ad8164f01ec976b2b1 Mon Sep 17 00:00:00 2001 From: "DESKTOP-5DIJMF9\\admin" <2388969634@qq.com> Date: Wed, 23 Jul 2025 16:47:32 +0800 Subject: [PATCH] =?UTF-8?q?opt:=E4=BC=98=E5=8C=96?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../secutiry/MobileAuthorizationController.java | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java b/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java index 3f08722..880e73f 100644 --- a/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java +++ b/nladmin-system/nlsso-server/src/main/java/org/nl/wms/system_manage/controller/secutiry/MobileAuthorizationController.java @@ -40,7 +40,7 @@ import java.util.Map; */ @Slf4j @RestController -@RequestMapping("/api/bigScreenScreen") +@RequestMapping("/mobile/auth") public class MobileAuthorizationController { @Autowired private ISysUserService userService; @@ -51,9 +51,13 @@ public class MobileAuthorizationController { @SaIgnore //("手持登陆验证") public ResponseEntity handLogin(@RequestBody Map whereJson) { - SysUser userInfo = userService.getOne(new QueryWrapper().eq("username", whereJson.get("user"))); - if (userInfo == null || !userInfo.getPassword().equals(SaSecureUtil.md5BySalt(RsaUtils.decryptByPrivateKey(RsaUtils.KEY, whereJson.get("password")), "salt"))) { // 这里需要密码加密 - throw new BadRequestException("账号或密码错误"); + SysUser userInfo = userService.getOne(new QueryWrapper().eq("username", whereJson.get("username"))); + if (userInfo == null) { // 这里需要密码加密 + throw new BadRequestException("用户不存在"); + } + String now = SaSecureUtil.md5BySalt(RsaUtils.decryptByPrivateKey(RsaUtils.KEY, whereJson.get("password")), "salt"); + if (!userInfo.getPassword().equals(now)) { + throw new BadRequestException("密码错误"); } if (!userInfo.getIs_used()) { throw new BadRequestException("账号未激活");