Java实现登录密码输错5次锁账号

痛定思痛。 2023-10-01 12:42 14阅读 0赞

这里的登录是Springboot集合jwt完成的  
以下是代码实现

Controller

@RestController
    @RequestMapping("/demo")
    public class LoginController {
        
    
    @Autowired
    private DemoService demoService;
    
    @PostMapping("/login")
        public JwtVO Login(@RequestBody LoginVO loginVO, HttpServletRequest request){
        
            JwtToken jwtToken = demoService.loginDemo(loginVO, request);
            return generateJwt(jwtToken, request);
        }
    
       /**
         * 生成Jwt
         * @param jwtToken
         * @param request
         * @return
         */
        private JwtVO generateJwt(JwtToken token, HttpServletRequest request){
        
            return JwtVO.builder().token(token.getToken())
                    .expireTime(token.getAccessToken().getExpireTime().getEpochSecond())
                    .refreshExpireTime(token.getRefreshToken().getExpireTime().getEpochSecond()).build();
        }
        
    }

Service层

@Service
    public class DemoServiceImpl implements DemoService {
        
    	@Autowired
        private RedisTemplate redisTemplate;
        @Autowired
        private JwtTokenComponent jwtTokenComponent;
        @Autowired
        private PasswordEncoder passwordEncoder;
        
        // 定义一个记录错误次数的字符串前缀
    	private final String ERRORSTR = "login_error_times_";
    
     	public JwtToken loginDemo(LoginVO loginVO, ClientEnum client, HttpServletRequest request) {
        
     	// 获取IP,这个百度有很多
    	String keyStr = ERRORSTR+WebUtils.getClientIp(request);
            if(redisTemplate.hasKey(keyStr)) {
        
                // 登录时候先判断是否有登录错误的计数
                int errorNum = Integer.valueOf((String) redisTemplate.opsForValue().get(keyStr));
                if(errorNum==5){
        
                	// 这里是自定义一个runtimeException
                    throw new DemoException("登录错误次数超过5次，请1小时后再试");
                }
            }
    	// 这边可以根据自己需求做一些账密校验
    	// 这里的PASSWORD,是通过操作数据库查出的账户密码
    	if(!passwordEncoder.matches(loginVO.getPassword(), PASSWORD)){
        
    			// 该方法为记录错误登录次数，单写在下面
                loginErrorRecord(keyStr,request);
                throw new DemoException("账户或密码不正确");
            }
    	
    	// 这里的userId是通过操作数据库，账密校验通过后查出的用户id
    	jwtToken = jwtTokenComponent.generate(DemoAccountToken
                    .builder().userId(userId).userName(loginVO.getUserName).build());
            // 删除登录错误的记录
            redisTemplate.delete(keyStr);
            return jwtToken;
     	}
    
       /**
         * 记录登录错误次数
         * 
         * @param keyStr
         * @param request
         */
        private void loginErrorRecord(String keyStr,HttpServletRequest request) {
        
            if(redisTemplate.hasKey(keyStr)){
        
                int errorNum = Integer.valueOf((String)redisTemplate.opsForValue().get(keyStr));
                redisTemplate.opsForValue().set(keyStr, errorNum+1,18000, TimeUnit.SECONDS);
            }else{
        
                redisTemplate.opsForValue().set(keyStr, 1,18000, TimeUnit.SECONDS);
            }
        }
        
    }