| | |
| | | import com.java110.core.annotation.Java110Cmd; |
| | | import com.java110.core.context.Environment; |
| | | import com.java110.core.context.ICmdDataFlowContext; |
| | | import com.java110.core.event.cmd.AbstractServiceCmdListener; |
| | | import com.java110.core.event.cmd.Cmd; |
| | | import com.java110.core.event.cmd.CmdEvent; |
| | | import com.java110.core.factory.AuthenticationFactory; |
| | | import com.java110.core.factory.GenerateCodeFactory; |
| | |
| | | import java.util.List; |
| | | |
| | | @Java110Cmd(serviceCode = "user.resetStaffPwd") |
| | | public class ResetStaffPwdCmd extends AbstractServiceCmdListener { |
| | | public class ResetStaffPwdCmd extends Cmd { |
| | | |
| | | @Autowired |
| | | private IStoreUserV1InnerServiceSMO storeUserV1InnerServiceSMOImpl; |
| | |
| | | public void validate(CmdEvent event, ICmdDataFlowContext cmdDataFlowContext, JSONObject reqJson) { |
| | | |
| | | Environment.isDevEnv(); |
| | | |
| | | if(reqJson.containsKey("storeId") && StoreDto.STORE_ADMIN.equals(reqJson.getString("storeId"))){ |
| | | return ; |
| | | } |
| | | |
| | | if (!reqJson.containsKey("staffId")) { |
| | | reqJson.put("staffId", reqJson.getString("userId")); |
| | |
| | | |
| | | //校验 staff 和 store 之间是否有 关系 防止 攻击 |
| | | StoreUserDto storeUserDto = new StoreUserDto(); |
| | | storeUserDto.setUserId(reqJson.getString("staffId")); |
| | | storeUserDto.setUserId(reqJson.getString("userId")); |
| | | storeUserDto.setStoreId(reqJson.getString("storeId")); |
| | | List<StoreUserDto> storeUserDtos = storeUserV1InnerServiceSMOImpl.queryStoreUsers(storeUserDto); |
| | | |