|
|
@@ -138,6 +138,7 @@ public class ResetPasswordController extends BaseController {
|
|
|
private String setToken(Long userUU) {
|
|
|
|
|
|
Token token = new Token(userUU, EXPIRES);
|
|
|
+ tokenService.save(token);
|
|
|
return token.getId();
|
|
|
}
|
|
|
|
|
|
@@ -156,7 +157,7 @@ public class ResetPasswordController extends BaseController {
|
|
|
|
|
|
// 校验密码
|
|
|
String encryPwd = userService.getEncryPassword(Const.ENCRY_FORMAT, password, user.getSalt());
|
|
|
- if (!encryPwd.equals(password)) {
|
|
|
+ if (!encryPwd.equals(user.getPassword())) {
|
|
|
return error("密码错误");
|
|
|
}
|
|
|
|
|
|
@@ -205,7 +206,7 @@ public class ResetPasswordController extends BaseController {
|
|
|
|
|
|
// 校验token是否正确
|
|
|
String sessionToken = (String) request.getSession().getAttribute("token");
|
|
|
- if (StringUtils.isEmpty(sessionToken) || sessionToken.equals(token)) {
|
|
|
+ if (StringUtils.isEmpty(sessionToken) || !sessionToken.equals(token)) {
|
|
|
return error("请重新获取验证码");
|
|
|
}
|
|
|
if (StringUtils.isEmpty(code)) {
|
|
|
@@ -236,11 +237,12 @@ public class ResetPasswordController extends BaseController {
|
|
|
|
|
|
// 设置发送邮件信息
|
|
|
int expires = 24*60*60;
|
|
|
- Token token = new Token("user", expires);
|
|
|
+ Token token = new Token(user.getUserUU(), expires);
|
|
|
+ tokenService.save(token);
|
|
|
ModelMap data = new ModelMap();
|
|
|
data.put("vipName", user.getVipName());
|
|
|
// TODO 邮件认证地址
|
|
|
- data.put("url", "http://192.168.253.66:8081/sso/resetPwd/check/question?token="+token);
|
|
|
+ data.put("url", "http://192.168.253.118:3001/reset/passwordResetValidQuestion?token="+token.getId());
|
|
|
|
|
|
// 发送邮件
|
|
|
String email = user.getEmail();
|
|
|
@@ -276,10 +278,10 @@ public class ResetPasswordController extends BaseController {
|
|
|
if (user == null) {
|
|
|
return error("认证信息错误,清刷新重试!");
|
|
|
}
|
|
|
- tokenService.delete(token);
|
|
|
|
|
|
// 返回用户密保,token
|
|
|
existToken = new Token(user, EXPIRES);
|
|
|
+ tokenService.save(existToken);
|
|
|
ModelMap data = new ModelMap();
|
|
|
data.put("token",existToken.getId());
|
|
|
data.put("questions", user.getQuestions());
|
|
|
@@ -292,7 +294,8 @@ public class ResetPasswordController extends BaseController {
|
|
|
* @return
|
|
|
*/
|
|
|
@RequestMapping(value = "/check/question", method = RequestMethod.POST)
|
|
|
- public ModelMap checkByQuestion(@RequestParam String token, List<Map<String, Object>> answers) {
|
|
|
+ public ModelMap checkByQuestion(@RequestParam String token, String answers, @RequestParam String pageToken) {
|
|
|
+ List<Map> jsonAnswer = JSON.parseArray(answers, Map.class);
|
|
|
// 校验token是否正确
|
|
|
if (StringUtils.isEmpty(token)) {
|
|
|
return error("请刷新重试");
|
|
|
@@ -304,21 +307,24 @@ public class ResetPasswordController extends BaseController {
|
|
|
|
|
|
// 校验密保答案
|
|
|
User user = (User) expireToken.getBind();
|
|
|
+ user = userService.findOne(user.getUserUU());
|
|
|
List<UserQuestion> questions = user.getQuestions();
|
|
|
Map<Long, String> userAnswer = new HashMap<>(questions.size());
|
|
|
for (UserQuestion question : questions) {
|
|
|
userAnswer.put(question.getId(), question.getAnswer());
|
|
|
}
|
|
|
- for (Map<String, Object> answer : answers) {
|
|
|
- if (!answer.get("answer").equals(userAnswer.get(answer.get("id")))){
|
|
|
+ for (Map<String, Object> answer : jsonAnswer) {
|
|
|
+ if (!answer.get("answer").equals(userAnswer.get(Long.valueOf(answer.get("id").toString())))){
|
|
|
return error("答案错误");
|
|
|
}
|
|
|
}
|
|
|
|
|
|
tokenService.delete(token);
|
|
|
+ tokenService.delete(pageToken);
|
|
|
|
|
|
// 返回token
|
|
|
expireToken = new Token(user, EXPIRES);
|
|
|
+ tokenService.save(expireToken);
|
|
|
ModelMap data = new ModelMap();
|
|
|
data.put("token", expireToken.getId());
|
|
|
return success(data);
|
|
|
@@ -359,4 +365,12 @@ public class ResetPasswordController extends BaseController {
|
|
|
tokenService.delete(token);
|
|
|
return success();
|
|
|
}
|
|
|
+
|
|
|
+ @RequestMapping(value = "/checkCode" ,method = RequestMethod.POST)
|
|
|
+ public ModelMap checkCode(String code, @RequestParam String token, String mobile) {
|
|
|
+ // 校验手机号验证码
|
|
|
+ checkMobileCode(token, mobile, code);
|
|
|
+
|
|
|
+ return success();
|
|
|
+ }
|
|
|
}
|