From 9328511c844212f01e15b62df67affd5ef424fa7 Mon Sep 17 00:00:00 2001 From: vincent Date: Wed, 4 Nov 2026 11:00:20 +0800 Subject: [PATCH] =?UTF-8?q?=E5=AF=86=E8=AF=84=E6=8E=A5=E5=8F=A3=E4=BC=98?= =?UTF-8?q?=E5=8C=96?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../zdxt/enforcementcode/controller/app/LoginController.java | 1 + .../system/service/impl/CryptoSensitiveHsmServiceImpl.java | 2 ++ 2 files changed, 3 insertions(+) diff --git a/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java b/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java index 52fa65b9..b8a68bd4 100644 --- a/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java +++ b/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java @@ -92,6 +92,7 @@ public abstract class LoginController { // HSM 密文内容为 MD5(loginName+password+salt)，与写入侧 encryptAndSave 的输入一致，校验须用同一口径 String md5Password = DigestUtil.md5Hex(loginName + decryptedPassword + salt); try { + if (ICryptoSensitiveHsmService.verifyPassword("sys_user", bizId, md5Password)) { return true; } diff --git a/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java b/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java index f6234779..d6924017 100644 --- a/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java +++ b/zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java @@ -123,6 +123,8 @@ public class CryptoSensitiveHsmServiceImpl implements ICryptoSensitiveHsmService } try { String decryptedPassword = hsmDecryptToPlain(record.getFieldIv(), record.getCipherText()); + log.info("HSM解密密码验证, tableName={}, bizId={}, decryptedPassword={}", tableName, bizId, decryptedPassword); + log.info("HSM解密密码验证, tableName={}, bizId={}, plainPassword={}", tableName, bizId, plainPassword); return decryptedPassword.equals(plainPassword); } catch (Exception e) { log.error("HSM解密密码验证失败, tableName={}, bizId={}", tableName, bizId, e);