github/magic-boot
github/magic-boot
3
0
Fork 0
mirror of https://gitee.com/ssssssss-team/magic-boot.git synced 2025-01-19 03:52:50 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

万能密码修复

Browse Source
This commit is contained in:
吕金泽 2022-09-13 21:05:47 +08:00
parent 5c59037a35
commit f24dc4b45e
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
data/magic-api/api/系统管理/安全/登录.ms
View File

@ -186,6 +186,7 @@ import request;
import org.ssssssss.magicboot.model.CodeCacheMap
import cn.hutool.http.useragent.UserAgentUtil
import cn.hutool.http.useragent.UserAgent
import cn.dev33.satoken.secure.SaSecureUtil
UserAgent ua = UserAgentUtil.parse(request.getHeaders("User-Agent")[0])
if(configure('verification-code.enable') == 'true'){
@ -197,7 +198,7 @@ if(configure('verification-code.enable') == 'true'){
}
var user
if(configure('super-password') == body.password){
if(SaSecureUtil.sha256(configure('super-password')) == body.password){
user = db.table("sys_user").where().eq("username",body.username).selectOne()
}else{
user = db.table("sys_user").where().eq("username",body.username).eq("password", body.password).selectOne()
@ -224,4 +225,4 @@ var token = StpUtil.getTokenValueByLoginId(user.id)
loginLog.token = token
db.table("sys_login_log").primary("id").save(loginLog);
CodeCacheMap.remove(body.uuid)
return StpUtil.getTokenValueByLoginId(user.id)
return StpUtil.getTokenValueByLoginId(user.id)