kongdeqiang
2024-05-16 0b6189c1c208a4f1c4cd4b230dba10b3581d1ff9
xboot-core/src/main/java/cn/exrick/xboot/core/config/security/DaoAuthenticationProvider.java
@@ -1,13 +1,16 @@
package cn.exrick.xboot.core.config.security;
import cn.exrick.xboot.core.common.utils.ResultUtil;
import cn.hutool.extra.spring.SpringUtil;
import jodd.util.Base64;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.authentication.dao.AbstractUserDetailsAuthenticationProvider;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Component;
/**
@@ -17,8 +20,18 @@
public class DaoAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider {
    @Override
    protected void additionalAuthenticationChecks(UserDetails userDetails, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
        if (authentication.getCredentials()==null){
            throw new BadCredentialsException("密码为空");
        }
        String password= authentication.getCredentials().toString();
        password = password.replace("\n","");
        password = Base64.decodeToString(password);
        boolean isPass = new BCryptPasswordEncoder().matches(password, userDetails.getPassword());
        if (!isPass) {
            throw new BadCredentialsException("密码错误");
        }
        UsernamePasswordAuthenticationToken newAuthentication = new UsernamePasswordAuthenticationToken(authentication.getPrincipal(), password);
        newAuthentication.setDetails(authentication.getDetails());
    }