diff --git a/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java b/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java index 52fa65b9..b8a68bd4 100644 --- a/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java +++ b/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java @@ -92,6 +92,7 @@ public abstract class LoginController { // HSM 密文内容为 MD5(loginName+password+salt),与写入侧 encryptAndSave 的输入一致,校验须用同一口径 String md5Password = DigestUtil.md5Hex(loginName + decryptedPassword + salt); try { + if (ICryptoSensitiveHsmService.verifyPassword("sys_user", bizId, md5Password)) { return true; } diff --git a/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java b/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java index f6234779..d6924017 100644 --- a/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java +++ b/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java @@ -123,6 +123,8 @@ public class CryptoSensitiveHsmServiceImpl implements ICryptoSensitiveHsmService } try { String decryptedPassword = hsmDecryptToPlain(record.getFieldIv(), record.getCipherText()); + log.info("HSM解密密码验证, tableName={}, bizId={}, decryptedPassword={}", tableName, bizId, decryptedPassword); + log.info("HSM解密密码验证, tableName={}, bizId={}, plainPassword={}", tableName, bizId, plainPassword); return decryptedPassword.equals(plainPassword); } catch (Exception e) { log.error("HSM解密密码验证失败, tableName={}, bizId={}", tableName, bizId, e);