java后台实现多次登陆失败锁定用户账户

怼烎@ 2022-11-01 05:38 306阅读 0赞

# １．实现方法： #

１．集成Spring Security框架［里边有登陆成功和失败的监听］

２．集成Redis框架

# ２．具体实现思路 #

１．用户输入错误密码登陆失败的监听

@Component
    public class LoginLimitFailed implements ApplicationListener<AuthenticationFailureBadCredentialsEvent>{
    	@Autowired
    	private SysUserMapper userMapper;
    	@Autowired
    	private RedisTemplate redisTemplate;
    
    	private final ISysConfigService configService;
    	@Autowired
    	public LoginLimitFailed(ISysConfigService configService){
    		this.configService = configService;
    	}
    
    	@Override
    	public void onApplicationEvent(AuthenticationFailureBadCredentialsEvent authenticationFailureBadCredentialsEvent){
    		String username = authenticationFailureBadCredentialsEvent.getAuthentication().getPrincipal().toString();
    		SysUser sysUser = userMapper.selectUserByUserName(username);
    		Object o = redisTemplate.opsForValue().get(username+"Count");
    		if(o==null){
    			redisTemplate.opsForValue().set(username+"Count",0);
    		}
    		Object o1 = redisTemplate.opsForValue().get(username+"Count");
    		long l = Long.parseLong(o1.toString());
    		l+=1;
    		
    		redisTemplate.opsForValue().set(username+"Count",l);
    		if(l==5||l>5){
    			sysUser.setStatus("1"); //锁定用户
    			userMapper.updateUser(sysUser);
    			//一段时间后解锁[在后台设置的参数：单位秒]
    			new Thread(){
    				@Override
    				public void run(){
    					try{
    						String keyTime = configService.selectConfigByKey("keyTime");
    						sleep(Long.parseLong(keyTime)*1000);
    						sysUser.setStatus("0");　//解锁
    						userMapper.updateUser(sysUser);
    						redisTemplate.opsForValue().set(username+"Count",0);
    					}Catch(Exception e){
    						e.printStackTrace();
    					}
    				}
    			}.start();
    		}
    		System.out.println("这是密码输入的错误次数==＞"+l);
    	}
    }

２．用户输入密码成功登陆的监听

@Component
    public class LoginLimitSuccess implements ApplicationListener<AuthenticationSuccessEvent>{
    	@Autowired
    	private RedisTemplate redisTemplte;
    	@Override
    	public void onApplicationEvent(AuthenticationSuccessEvent authenticationSuccessEvent){
    		Object principal = authenticationSuccessEvent.getAuthentication().getPrincipal();
    	}
    }

３．登陆成功的接口［若依方法的登陆接口，登陆成功后redis缓存账户登陆失败记录次数清零］

@PostMapping("/login")
    @ApiOperation("登陆方法")
    public Response<TokenDTO> login(@RequestBody LoginBody loginBody){
    	TokenDTO tokenDTO = new TokenDTO();
    	String token = "";
    	if(loginBody.getUsername()!=null && !loginBody.getUsername().equals("")){
    		token = loginSerive.login(loginBody.getUsername(),loginBody.getPassword(),loginBody.getCode(),loginBody.getUuid());
    	}else{
    		token = loginService.login(loginBody.getPhonenumber());
    	}
    	tokenDTO.setToken(token);
    	String username = loginBody.getUsername();
    	redisTemplate.opsForValue().set(username+"Count",0);
    	return Response.success(tokenDTO);
    }