优化西宁浦发银行 渗透测试漏洞解决

wuxw

2023-10-23 16d1b061d8462aa5da6792cd65e36819b21f9d3f

 service-user/src/main/java/com/java110/user/cmd/login/PcUserLoginCmd.java

@@ -97,6 +97,7 @@
        Assert.jsonObjectHaveKey(paramIn, "passwd", "用户登录，未包含passwd节点，请检查" + paramIn);


        AuthenticationFactory.checkLoginErrorCount(reqJson.getString("username"));
    }

    @Override
@@ -117,6 +118,7 @@
        }
        if (userDtos == null || userDtos.size() < 1) {
            responseEntity = new ResponseEntity<String>("用户或密码错误", HttpStatus.UNAUTHORIZED);
            AuthenticationFactory.userLoginError(paramInJson.getString("username"));
            cmdDataFlowContext.setResponseEntity(responseEntity);
            return;
        }