优化西宁浦发银行 渗透测试漏洞解决

wuxw

2023-10-23 16d1b061d8462aa5da6792cd65e36819b21f9d3f

 service-user/src/main/java/com/java110/user/cmd/user/UserSendSmsCmd.java

@@ -15,6 +15,7 @@
import com.java110.utils.cache.MappingCache;
import com.java110.utils.constant.MappingConstant;
import com.java110.utils.exception.CmdException;
import com.java110.utils.lock.DistributedLock;
import com.java110.utils.util.Assert;
import com.java110.utils.util.StringUtil;
import com.java110.utils.util.ValidatorUtil;
@@ -51,6 +52,10 @@
            throw new IllegalArgumentException("手机号格式错误");
        }

        String requestId = DistributedLock.getLockUUID();
        String key = this.getClass().getSimpleName() + reqJson.getString("tel");
        try {
            DistributedLock.waitGetDistributedLock(key, requestId);
        //校验是否有有效的验证码
        String smsCode = CommonCache.getValue(reqJson.getString("tel") + SendSmsFactory.VALIDATE_CODE);

@@ -61,6 +66,11 @@
                throw new IllegalArgumentException("请不要重复发送验证码");
            }
        }
        } finally {
            //清理事务信息
            DistributedLock.releaseDistributedLock(key, requestId);
        }

    }

    @Override