bookshelfplus/bookshelfplus
1
0
Fork 0
mirror of https://gitee.com/bookshelfplus/bookshelfplus synced 2025-09-02 23:23:28 +08:00
Code Issues Projects Releases Wiki Activity GitHub Gitee

密码加密放在后台进行

Browse Source
This commit is contained in:
小墨
2022-04-01 18:03:16 +08:00
parent d3c9ba10c4
commit b27b709cbf
4 changed files with 100 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
bookshelfplus-frontend/routes/index.js
View File

@@ -38,6 +38,12 @@ router.get('/login', function (req, res) {
}); });
}); });
router.get('/register', function (req, res) {
res.render('register', {
title: "用户注册"
});
});
router.get('/admin/index', function (req, res) { // '/admin(/index)?' router.get('/admin/index', function (req, res) { // '/admin(/index)?'
res.render('admin/index', { res.render('admin/index', {
title: "后台管理" title: "后台管理"

6
bookshelfplus-frontend/views/login.html
View File

@@ -48,11 +48,9 @@
var username = $("#username").val(); var username = $("#username").val();
var password = $("#password").val(); var password = $("#password").val();
// var encryptpwd = hex_sha1(password); // var encryptpwd = hex_sha1(password);
var encryptpwd = hex_md5(password); // var encryptpwd = hex_md5(password);
console.log(password, encryptpwd); postRequest("/user/login", { username: username, password: password })
postRequest("/user/login", { username: username, encryptpwd: encryptpwd })
.then(function (response) { .then(function (response) {
var axiosData = response.data; var axiosData = response.data;
var status = axiosData.status; var status = axiosData.status;

82
bookshelfplus-frontend/views/register.html Normal file
View File

@@ -0,0 +1,82 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<%- include("./component/header.html"); %>
<style>
.main {
width: 80vw !important;
max-width: initial !important;
}
#bookImage {
/* width: 100%; */
height: auto;
max-height: 300px;
margin-bottom: 20px;
}
</style>
</head>
<body>
<%- include("./component/navbar.html"); %>
<main class="main">
<h1><%= title %></h1>
<div id="container">
<div>
<!-- 用户登录 输入用户名和密码的文本框 -->
<div class="form">
<div class="form-group">
<label for="username">用户名</label>
<input type="text" id="username" placeholder="用户名">
</div>
<div class="form-group">
<label for="password">密码</label>
<input type="password" id="password" placeholder="密码">
</div>
<button class="btn-submit">登录</button>
</div>
</div>
</div>
</main>
<%- include("./component/footer.html"); %>
<script src="./assets/lib/cryptography/2.2/md5-min.js"></script>
<!-- <script src="./assets/lib/cryptography/2.2/sha1-min.js"></script> -->
<script>
$("#username").val("xiaomo");
$("#password").val("123456");
$(".btn-submit").click(function() {
var username = $("#username").val();
var password = $("#password").val();
// var encryptpwd = hex_sha1(password);
var encryptpwd = hex_md5(password);
console.log(password, encryptpwd);
postRequest("/user/login", { username: username, encryptpwd: encryptpwd })
.then(function (response) {
var axiosData = response.data;
var status = axiosData.status;
var data = axiosData.data;
if (status === "success") {
console.log(data);
if(data) {
alert("登录成功");
if(data.group === "ADMIN") {
window.location.href = "/admin/index";
} else {
window.location.href = "/user/index";
}
} else {
alert("用户名或密码错误");
}
} else {
alert(`出错啦！${data.errMsg} (错误码: ${data.errCode}) `);
}
}).catch(function (error) {
console.log(error);
});
});
</script>
</body>
</html>

17
bookshelfplus/src/main/java/plus/bookshelf/Controller/Controller/UserController.java
View File

@@ -2,6 +2,7 @@ package plus.bookshelf.Controller.Controller;
import io.swagger.annotations.Api; import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation; import io.swagger.annotations.ApiOperation;
import org.apache.commons.codec.digest.DigestUtils;
import org.springframework.beans.BeanUtils; import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller; import org.springframework.stereotype.Controller;
@@ -11,7 +12,6 @@ import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.ResponseBody; import org.springframework.web.bind.annotation.ResponseBody;
import plus.bookshelf.Common.Response.CommonReturnType; import plus.bookshelf.Common.Response.CommonReturnType;
import plus.bookshelf.Common.SessionManager.LocalSessionManager; import plus.bookshelf.Common.SessionManager.LocalSessionManager;
import plus.bookshelf.Common.SessionManager.SessionManager;
import plus.bookshelf.Controller.VO.UserVO; import plus.bookshelf.Controller.VO.UserVO;
import plus.bookshelf.Service.Impl.UserServiceImpl; import plus.bookshelf.Service.Impl.UserServiceImpl;
import plus.bookshelf.Service.Model.UserModel; import plus.bookshelf.Service.Model.UserModel;
@@ -24,14 +24,15 @@ public class UserController extends BaseController {
@Autowired @Autowired
UserServiceImpl userService; UserServiceImpl userService;
@ApiOperation(value = "用户登录", notes = "传入用户名，以及密码的MD5值，进行登录") @ApiOperation(value = "用户登录", notes = "传入用户名，以及密码明文，后台计算密码SHA1值，进行登录")
@RequestMapping(value = "login", method = {RequestMethod.POST}, consumes = {CONTENT_TYPE_FORMED}) @RequestMapping(value = "login", method = {RequestMethod.POST}, consumes = {CONTENT_TYPE_FORMED})
@ResponseBody @ResponseBody
public CommonReturnType login(@RequestParam(value = "username") String username, public CommonReturnType login(@RequestParam(value = "username") String username,
@RequestParam(value = "encryptpwd") String encryptPwd) { @RequestParam(value = "password") String password) {
if (username == null || encryptPwd == null) { if (username == null || password == null) {
return null; return null;
} }
String encryptPwd = DigestUtils.sha1Hex(password);
UserModel userModel = userService.userLogin(username, encryptPwd); UserModel userModel = userService.userLogin(username, encryptPwd);
UserVO userVO = convertFromService(userModel); UserVO userVO = convertFromService(userModel);
@@ -42,14 +43,16 @@ public class UserController extends BaseController {
return CommonReturnType.create(userVO); return CommonReturnType.create(userVO);
} }
// @ApiOperation(value = "用户注册", notes = "传入用户名，以及密码的MD5值，进行注册") // @ApiOperation(value = "用户注册", notes = "传入用户名，以及密码明文，后台计算密码SHA1值，进行注册")
// @RequestMapping(value = "register", method = {RequestMethod.POST}, consumes = {CONTENT_TYPE_FORMED}) // @RequestMapping(value = "register", method = {RequestMethod.POST}, consumes = {CONTENT_TYPE_FORMED})
// @ResponseBody // @ResponseBody
// public CommonReturnType register(@RequestParam(value = "username") String username, // public CommonReturnType register(@RequestParam(value = "username") String username,
// @RequestParam(value = "encryptpwd") String encryptPwd) { // @RequestParam(value = "password") String password) {
// if (username == null || encryptPwd == null) { // if (username == null || password == null) {
// return null; // return null;
// } // }
// String encryptPwd = DigestUtils.sha1Hex(password);
//
// UserModel userModel = userService.userRegister(username, encryptPwd); // UserModel userModel = userService.userRegister(username, encryptPwd);
// UserVO userVO = convertFromService(userModel); // UserVO userVO = convertFromService(userModel);
// return CommonReturnType.create(userVO); // return CommonReturnType.create(userVO);