登录时判定密码是否过期，目前写死（30天有效）

徐烜
1 parent 7c9a0596
Showing 3 changed files with 24 additions and 1 deletions
src/main/java/com/bsth/controller/sys/UserController.java
src/main/java/com/bsth/entity/sys/SysUser.java
src/main/java/com/bsth/repository/sys/SysUserRepository.java
@@ -12,6 +12,9 @@ import com.bsth.service.sys.CompanyAuthorityService;
 import com.bsth.service.sys.SysUserService;
 import com.google.common.collect.ArrayListMultimap;
 import org.apache.commons.lang3.StringUtils;
+import org.joda.time.DateTime;
+import org.joda.time.Period;
+import org.joda.time.PeriodType;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -101,6 +104,15 @@ public class UserController extends BaseController&lt;SysUser, Integer&gt; {
                 return rs;
             }
+            // 检验密码有效期
+            Date lastPwdDate = user.getLastPwdDate();
+            if (lastPwdDate != null) {
+                Period p = new Period(new DateTime(lastPwdDate), new DateTime(new Date()), PeriodType.days());
+                if (p.getDays() > 30) { // 30天不更新密码，不能登录
+                    return put(rs, "msg", "30天没有修改密码，不能登录，请联系管理员");
+                }
+            }
+
             // 登录
             SecurityUtils.login(user, request);
             //session里写入用户名，webSocket连接时标识身份用
@@ -33,6 +33,9 @@ public class SysUser {
 	@Column(name = "last_loginDate", columnDefinition = "timestamp  DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP")
 	private Date lastLoginDate;
+    /** 最近密码更新时间 */
+    private Date lastPwdDate;
+
 	private String agencies;
 	private boolean enabled;
@@ -112,4 +115,12 @@ public class SysUser {
 	public void setRoles(Set<Role> roles) {
 		this.roles = roles;
 	}
+
+    public Date getLastPwdDate() {
+        return lastPwdDate;
+    }
+
+    public void setLastPwdDate(Date lastPwdDate) {
+        this.lastPwdDate = lastPwdDate;
+    }
 }
@@ -22,7 +22,7 @@ public interface SysUserRepository extends BaseRepository&lt;SysUser, Integer&gt;{
 	@Transactional
 	@Modifying
-	@Query(value="update bsth_c_sys_user set password=?2 where id=?1",nativeQuery=true)
+	@Query(value="update bsth_c_sys_user set password=?2, last_pwd_date = now() where id=?1",nativeQuery=true)
 	int changePWD(int id,String newPWD);
 	@EntityGraph(value = "sysUser_role", type = EntityGraph.EntityGraphType.FETCH)