From 740da06972e886d5aa8d1332d4beaae2c26a516b Mon Sep 17 00:00:00 2001
From: 若依 <yzz_ivy@163.com>
Date: Wed, 28 Jul 2021 13:51:09 +0800
Subject: [PATCH] !91 【轻量级PR】 [SysUser] 返回给前端数据的时候，隐藏密码和加盐，防止别人猜测加密方式 或者 暴力破击 Merge pull request !91 from dazer007/master
---
ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/service/TokenService.java | 16 ++--------------
1 files changed, 2 insertions(+), 14 deletions(-)
diff --git a/ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/service/TokenService.java b/ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/service/TokenService.java
index 0772abf..a4e8428 100644
--- a/ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/service/TokenService.java
+++ b/ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/service/TokenService.java
@@ -9,6 +9,7 @@
import com.ruoyi.common.core.constant.CacheConstants;
import com.ruoyi.common.core.constant.Constants;
import com.ruoyi.common.core.utils.IdUtils;
+import com.ruoyi.common.core.utils.SecurityUtils;
import com.ruoyi.common.core.utils.ServletUtils;
import com.ruoyi.common.core.utils.StringUtils;
import com.ruoyi.common.core.utils.ip.IpUtils;
@@ -71,7 +72,7 @@
public LoginUser getLoginUser(HttpServletRequest request)
{
// 获取请求携带的令牌
- String token = getToken(request);
+ String token = SecurityUtils.getToken(request);
if (StringUtils.isNotEmpty(token))
{
String userKey = getTokenKey(token);
@@ -118,18 +119,5 @@
private String getTokenKey(String token)
{
return ACCESS_TOKEN + token;
- }
-
- /**
- * 获取请求token
- */
- private String getToken(HttpServletRequest request)
- {
- String token = request.getHeader(CacheConstants.HEADER);
- if (StringUtils.isNotEmpty(token) && token.startsWith(CacheConstants.TOKEN_PREFIX))
- {
- token = token.replace(CacheConstants.TOKEN_PREFIX, "");
- }
- return token;
}
}
\ No newline at end of file
--
Gitblit v1.9.3