Browse Source

[用户信息保护][修改]:用户敏感信息保护

release_toaliyun_real
Stormeye Wu 7 years ago
parent
commit
e27ea8ceb5
4 changed files with 12 additions and 29 deletions
  1. +3
    -18
      mallinkAdmin/src/main/java/com/iformall/controller/HomeController.java
  2. +1
    -1
      mallinkAdmin/src/main/java/com/iformall/controller/MallUserInfoController.java
  3. +2
    -10
      mallinkAdmin/src/main/java/com/iformall/controller/WechatLoginController.java
  4. +6
    -0
      mallinkService/src/main/java/com/iformall/domain/po/MallUserInfo.java

+ 3
- 18
mallinkAdmin/src/main/java/com/iformall/controller/HomeController.java View File

@@ -138,12 +138,7 @@ public class HomeController extends BaseController {
}
if(isLogin) {
MallUserInfo info = (MallUserInfo) SecurityUtils.getSubject().getSession().getAttribute(UserSession.userInfo);
info.setPassword("保密");
if(StringUtils.isNotBlank(info.getBopenId()))
info.setBopenId("保密");
if(StringUtils.isNotBlank(info.getWebOpenId())) {
info.setWebOpenId("保密");
}
info.protectInfos();

String menus = mallUserRoleService.getPermissionsByUser(info);
if(menus != null) {
@@ -222,12 +217,7 @@ public class HomeController extends BaseController {
UseriFormallToken token = new UseriFormallToken(user.getUsername());
subject.login(token);
MallUserInfo info = (MallUserInfo) SecurityUtils.getSubject().getSession().getAttribute(UserSession.userInfo);
info.setPassword("保密");
if(StringUtils.isNotBlank(info.getBopenId()))
info.setBopenId("保密");
if(StringUtils.isNotBlank(info.getWebOpenId())) {
info.setWebOpenId("保密");
}
info.protectInfos();
String menus = mallUserRoleService.getPermissionsByUser(info);
if(menus != null) {
info.setMenus(menus);
@@ -324,12 +314,7 @@ public class HomeController extends BaseController {
UseriFormallToken token = new UseriFormallToken(user.getUsername());
subject.login(token);
MallUserInfo info = (MallUserInfo) SecurityUtils.getSubject().getSession().getAttribute(UserSession.userInfo);
info.setPassword("保密");
if(StringUtils.isNotBlank(info.getBopenId()))
info.setBopenId("保密");
if(StringUtils.isNotBlank(info.getWebOpenId())) {
info.setWebOpenId("保密");
}
info.protectInfos();
String menus = mallUserRoleService.getPermissionsByUser(info);
if(menus != null) {
info.setMenus(menus);


+ 1
- 1
mallinkAdmin/src/main/java/com/iformall/controller/MallUserInfoController.java View File

@@ -298,7 +298,7 @@ public class MallUserInfoController extends BaseController {
public ResultData getUserInfo() {
logger.debug("[" + getIpAddr() + "] MallUserInfoController::getUserInfo");
MallUserInfo info = getUser();
info.setPassword("保密");
info.protectInfos();
if (info.getIsAdmin().equals(EnumUserAdmin.ADMIN.getCode())) { // isAdmin
MallPermission q = new MallPermission();
PageInfo<MallPermission> list = mallPermissionService.listAsPage(q, 1, 100);


+ 2
- 10
mallinkAdmin/src/main/java/com/iformall/controller/WechatLoginController.java View File

@@ -145,11 +145,7 @@ public class WechatLoginController extends BaseController {
}
if(isLogin) {
MallUserInfo info = (MallUserInfo) SecurityUtils.getSubject().getSession().getAttribute(UserSession.userInfo);
info.setPassword("保密");
info.setBopenId("保密");
if(StringUtils.isNotBlank(info.getWebOpenId())) {
info.setWebOpenId("保密");
}
info.protectInfos();
String menus = mallUserRoleService.getPermissionsByUser(info);
if(menus != null) {
info.setMenus(menus);
@@ -284,11 +280,7 @@ public class WechatLoginController extends BaseController {
UseriFormallToken token = new UseriFormallToken(userInfo.getUsername());
subject.login(token);
MallUserInfo info = (MallUserInfo) SecurityUtils.getSubject().getSession().getAttribute(UserSession.userInfo);
info.setPassword("保密");
info.setBopenId("保密");
if(StringUtils.isNotBlank(info.getWebOpenId())) {
info.setWebOpenId("保密");
}
info.protectInfos();
String menus = mallUserRoleService.getPermissionsByUser(info);
if(menus != null) {
info.setMenus(menus);


+ 6
- 0
mallinkService/src/main/java/com/iformall/domain/po/MallUserInfo.java View File

@@ -261,6 +261,12 @@ public class MallUserInfo implements Serializable {
this.webOpenId = webOpenId;
}

public void protectInfos() {
setPassword(null);
setBopenId(null);
setWebOpenId(null);
}

public static enum Field
{
Id_ASC("`id` ASC"),Id_DESC("`id` DESC")


Loading…
Cancel
Save