p51497208
/
lenosp
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

优化代码 

--听一首歌，回忆一段往事
This commit is contained in:
meng 2018-12-11 19:58:34 +08:00
parent f9d7eca6c8
commit 8f99e1b247
4 changed files with 1 additions and 87 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
len-blog/src/main/java/com/len/controller/TagController.java
View File

@ -7,10 +7,8 @@ import com.len.base.BaseController;
import com.len.entity.BlogTag;
import com.len.service.BlogArticleService;
import com.len.service.BlogTagService;
import com.len.util.JsonUtil;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

9
len-blog/src/main/java/com/len/core/BlogRealm.java
View File

@ -31,15 +31,6 @@ public class BlogRealm extends AuthorizingRealm {
@Autowired
private SysUserService userService;
@Autowired
private MenuService menuService;
@Autowired
private RoleUserService roleUserService;
@Autowired
private RoleMenuService roleMenuService;
@Override
public boolean supports(AuthenticationToken token) {

72
len-blog/src/main/java/com/len/core/BlogRetryLimitCredentialsMatcher.java
View File

@ -1,72 +0,0 @@
package com.len.core;
import cn.hutool.core.util.StrUtil;
import com.len.util.CustomUsernamePasswordToken;
import com.len.util.JWTUtil;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.ExcessiveAttemptsException;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.cache.Cache;
import org.apache.shiro.cache.CacheManager;
import java.util.concurrent.atomic.AtomicInteger;
/**
* 验证器，增加了登录次数校验功能
* 限制尝试登陆次数,防止暴力破解
*/
@Slf4j
public class BlogRetryLimitCredentialsMatcher extends HashedCredentialsMatcher {
/* private Cache<String, AtomicInteger> loginRetryCache;
private int maxRetryCount = 5;
*//*public void setMaxRetryCount(int maxRetryCount) {
this.maxRetryCount = maxRetryCount;
}
public BlogRetryLimitCredentialsMatcher(){
}*//*
*//**
* @param cacheManager
* @param maxRetryCount 最大尝试次数
*//*
public BlogRetryLimitCredentialsMatcher(CacheManager cacheManager, int maxRetryCount) {
this.maxRetryCount = maxRetryCount;
this.loginRetryCache = cacheManager.getCache("loginRetryCache");
}
public BlogRetryLimitCredentialsMatcher(CacheManager cacheManager) {
this(cacheManager, 5);
}
@Override
public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) {
CustomUsernamePasswordToken token1 = (CustomUsernamePasswordToken) token;
String username = token1.getUsername();
if (StringUtils.isEmpty(username) && !StringUtils.isEmpty(token1.getToken())) {
username = JWTUtil.getUsername(token1.getToken());
}
//retry count + 1
AtomicInteger retryCount = loginRetryCache.get(username) == null
? new AtomicInteger(0) : loginRetryCache.get(username);
log.info("retryCount:{}, username:{}", retryCount, username);
if (retryCount.incrementAndGet() > this.maxRetryCount) {
log.warn("username: {} tried to login more than {} times in perid", username, this.maxRetryCount);
throw new ExcessiveAttemptsException(StrUtil.format("username: {} tried to login more than {} times in perid", username, this.maxRetryCount));
}
boolean matches = super.doCredentialsMatch(token1, info);
if (matches) {
loginRetryCache.remove(username);
} else {
loginRetryCache.put(username, retryCount);
log.info(String.valueOf(retryCount.get()));
}
return matches;
}*/
}

5
len-blog/src/main/java/com/len/core/MyBasicHttpAuthenticationFilter.java
View File

@ -26,11 +26,8 @@ public class MyBasicHttpAuthenticationFilter extends BasicHttpAuthenticationFilt
executeLogin(request, response);
return true;
} catch (Exception e) {
// throw new RuntimeException(e.getMessage());
}
} /*else {
throw new UnauthorizedException("禁止访问");
}*/
}
return false;
}