|
|
|
@ -5,6 +5,7 @@ using Infrastructure.Extensions;
|
|
|
|
|
using Infrastructure.Security;
|
|
|
|
|
using Microsoft.AspNetCore.Authorization;
|
|
|
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
|
using Microsoft.EntityFrameworkCore;
|
|
|
|
|
using Microsoft.Extensions.Configuration;
|
|
|
|
|
using System;
|
|
|
|
|
using System.Linq;
|
|
|
|
@ -41,7 +42,7 @@ namespace UserCenter.Controllers
|
|
|
|
|
var user = this._userRepo.Table().FirstOrDefault(o => o.UserName == model.UserName);
|
|
|
|
|
if (user == null)
|
|
|
|
|
{
|
|
|
|
|
ModelState.AddModelError("", "用户名或密码错误");
|
|
|
|
|
return BadRequest(ModelState.AddModelError("用户名或密码错误"));
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
@ -73,11 +74,11 @@ namespace UserCenter.Controllers
|
|
|
|
|
if (user.AccessFailedCount >= maxAccessFailedCount)
|
|
|
|
|
{
|
|
|
|
|
user.LockoutEnd = DateTime.UtcNow.AddMinutes(lockoutEndMinutes);
|
|
|
|
|
ModelState.AddModelError(nameof(model.UserName), $"用户被锁定,请于{user.LockoutEnd.Value.ToLocalTime().ToString("HH:mm")}后重试");
|
|
|
|
|
return BadRequest(ModelState.AddModelError(o => model.UserName, $"用户被锁定,请于{user.LockoutEnd.Value.ToLocalTime().ToString("HH:mm")}后重试", 1));
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
ModelState.AddModelError(nameof(model.UserName), $"密码错误,再错误{maxAccessFailedCount - user.AccessFailedCount}次后将锁定用户{lockoutEndMinutes}分钟");
|
|
|
|
|
return BadRequest(ModelState.AddModelError(o => model.UserName, $"密码错误,再错误{maxAccessFailedCount - user.AccessFailedCount}次后将锁定用户{lockoutEndMinutes}分钟", 2));
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
this._userRepo.SaveChanges();
|
|
|
|
@ -85,28 +86,17 @@ namespace UserCenter.Controllers
|
|
|
|
|
}
|
|
|
|
|
else//对未启用登录锁定的用户进行验证
|
|
|
|
|
{
|
|
|
|
|
if (user.PasswordHash == this._encryptionService.CreatePasswordHash(model.Password, user.SecurityStamp))
|
|
|
|
|
if (user.PasswordHash != this._encryptionService.CreatePasswordHash(model.Password, user.SecurityStamp))
|
|
|
|
|
{
|
|
|
|
|
success = true;
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
ModelState.AddModelError("", "用户名或密码错误");
|
|
|
|
|
return BadRequest(ModelState.AddModelError("用户名或密码错误"));
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
if (success)
|
|
|
|
|
{
|
|
|
|
|
return Ok(new
|
|
|
|
|
{
|
|
|
|
|
AccessToken = Request.HttpContext.GetToken(model.UserName, _cfg, DateTime.Now.AddHours(_cfg.GetValue<double>("AccessTokenHours", 0.5))),
|
|
|
|
|
RefreshToken = Request.HttpContext.GetToken(model.UserName, _cfg, DateTime.Now.AddHours(_cfg.GetValue<double>("AccessTokenHours", 720))),
|
|
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
return Ok(new
|
|
|
|
|
{
|
|
|
|
|
return Unauthorized(ModelState);
|
|
|
|
|
}
|
|
|
|
|
AccessToken = Request.HttpContext.GetToken(model.UserName, _cfg, DateTime.Now.AddHours(_cfg.GetValue<double>("AccessTokenHours", 0.5))),
|
|
|
|
|
RefreshToken = Request.HttpContext.GetToken(model.UserName, _cfg, DateTime.Now.AddHours(_cfg.GetValue<double>("RefreshToken", 720))),
|
|
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
catch (Exception ex)
|
|
|
|
|
{
|
|
|
|
@ -153,7 +143,10 @@ namespace UserCenter.Controllers
|
|
|
|
|
}
|
|
|
|
|
var userName = User.Identity.Name;
|
|
|
|
|
var model = this._userRepo.ReadOnlyTable()
|
|
|
|
|
.Include(o => o.UserRoles)
|
|
|
|
|
.ThenInclude(o => o.Role)
|
|
|
|
|
.Where(o => o.UserName == userName)
|
|
|
|
|
.ToList()
|
|
|
|
|
.Select(o => new
|
|
|
|
|
{
|
|
|
|
|
o.UserName,
|
|
|
|
@ -165,8 +158,9 @@ namespace UserCenter.Controllers
|
|
|
|
|
o.Birthday,
|
|
|
|
|
o.Email,
|
|
|
|
|
o.PhoneNumber,
|
|
|
|
|
Roles = o.UserRoles.SelectMany(o => o.Role.Name)
|
|
|
|
|
});
|
|
|
|
|
Roles = o.UserRoles.Select(o => o.Role.Name)
|
|
|
|
|
})
|
|
|
|
|
.FirstOrDefault();
|
|
|
|
|
if (model == null)
|
|
|
|
|
{
|
|
|
|
|
ModelState.AddModelError("", "用户不存在");
|
|
|
|
|