Browse Source

密评接口优化

dev-V1.10.4
vincent 11 hours ago
parent
commit
9328511c84
  1. 1
      zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java
  2. 2
      zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java

1
zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/LoginController.java

@ -92,6 +92,7 @@ public abstract class LoginController {
// HSM 密文内容为 MD5(loginName+password+salt),与写入侧 encryptAndSave 的输入一致,校验须用同一口径 // HSM 密文内容为 MD5(loginName+password+salt),与写入侧 encryptAndSave 的输入一致,校验须用同一口径
String md5Password = DigestUtil.md5Hex(loginName + decryptedPassword + salt); String md5Password = DigestUtil.md5Hex(loginName + decryptedPassword + salt);
try { try {
if (ICryptoSensitiveHsmService.verifyPassword("sys_user", bizId, md5Password)) { if (ICryptoSensitiveHsmService.verifyPassword("sys_user", bizId, md5Password)) {
return true; return true;
} }

2
zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/CryptoSensitiveHsmServiceImpl.java

@ -123,6 +123,8 @@ public class CryptoSensitiveHsmServiceImpl implements ICryptoSensitiveHsmService
} }
try { try {
String decryptedPassword = hsmDecryptToPlain(record.getFieldIv(), record.getCipherText()); String decryptedPassword = hsmDecryptToPlain(record.getFieldIv(), record.getCipherText());
log.info("HSM解密密码验证, tableName={}, bizId={}, decryptedPassword={}", tableName, bizId, decryptedPassword);
log.info("HSM解密密码验证, tableName={}, bizId={}, plainPassword={}", tableName, bizId, plainPassword);
return decryptedPassword.equals(plainPassword); return decryptedPassword.equals(plainPassword);
} catch (Exception e) { } catch (Exception e) {
log.error("HSM解密密码验证失败, tableName={}, bizId={}", tableName, bizId, e); log.error("HSM解密密码验证失败, tableName={}, bizId={}", tableName, bizId, e);

Loading…
Cancel
Save