chaos/chaos_api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(user): 添加更新用户名功能并优化安全配置

Browse Source 
- 在 ErrorCode 中新增 USER_UPDATE_USERNAME_FAILED 错误码
- JwtAuthenticationTokenFilter 中增加当前用户名属性设置
- RestAuthenticationEntryPoint 返回状态码改为 403 并更新错误信息
- 新增 UpdateUsernameRequest DTO 用于接收用户名更新请求
- UserController 添加 updateUsername 接口支持修改用户名
- UserInfoService 和其实现类中增加 updateUsername 方法逻辑
- 引入 tokenHead 配置项以支持 JWT 相关操作
This commit is contained in:
Chaos
2025-11-18 22:32:51 +08:00
parent 7e754b19d4
commit 7dc0d26d9b
7 changed files with 56 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
chaos_api_common/src/main/java/cn/nopj/chaos_api/common/constants/ErrorCode.java
View File

@@ -21,7 +21,6 @@ public enum ErrorCode {
PASSWORD_FORMAT_ERROR(400, "USER-104", "密码需6-20位字符组合"),
USER_NOT_EXISTS(404, "USER-104", "用户不存在"),
USER_ID_INVALID(400, "USER-105", "用户ID无效"),
USER_NOT_EXISTS_OR_PASSWORD_WRONG(401, "USER-105", "用户名不存在或密码错误"),
USER_NOT_ENABLED(403, "USER-106", "用户未启用"),
USER_NOT_LOGIN(401, "USER-105", "请先登录"),
@@ -30,6 +29,8 @@ public enum ErrorCode {
EMAIL_FORMAT_ERROR(400, "USER-108", "邮箱格式无效"),
PHONE_EXISTS(409, "USER-109", "手机号已注册"),
PHONE_FORMAT_ERROR(400, "USER-110", "手机号格式无效"),
USER_UPDATE_USERNAME_FAILED(400,"USER-111" , "用户名更新失败"),
// ================== 论坛内容相关 (200-299) ==================
POST_NOT_FOUND(404, "POST-201", "帖子不存在"),

10
chaos_api_domain/src/main/java/cn/nopj/chaos_api/dto/request/UpdateUsernameRequest.java Normal file
View File

@@ -0,0 +1,10 @@
package cn.nopj.chaos_api.dto.request;
import jakarta.validation.constraints.Pattern;
import lombok.Data;
@Data
public class UpdateUsernameRequest {
@Pattern(regexp = "^[a-zA-Z0-9_-]{5,16}$", message = "用户名需为5-16位字母、数字、_或-")
private String username;
}

8
chaos_api_interface/src/main/java/cn/nopj/chaos_api/service/UserInfoService.java
View File

@@ -34,4 +34,12 @@ public interface UserInfoService {
* @param password 密码
*/
void setUserPassword(@Pattern(regexp = "^[0-9]+$", message = "用户id格式错误") String userId, @Pattern(regexp = "^.{8,16}$", message = "密码长度需为8-16位") String password);
/**
* 更新用户名
*
* @param username 用户名
* @param newUsername 新用户名
*/
void updateUsername(String username, String newUsername);
}

18
chaos_api_service/src/main/java/cn/nopj/chaos_api/service/impl/UserInfoServiceImpl.java
View File

@@ -71,5 +71,23 @@ public class UserInfoServiceImpl implements UserInfoService {
}
}
@Override
public void updateUsername(String username, String newUsername) {
if (newUsername == null || newUsername.isEmpty()){
throw new BizException(ErrorCode.USER_UPDATE_USERNAME_FAILED);
}
User user = userMapper.selectByUsername(username);
if (user == null) {
throw new BizException(ErrorCode.USER_NOT_EXISTS);
}
user.setUsername(newUsername);
int i = userMapper.updateById(user);
log.info("更新用户名结果: {}", i);
if (i == 0) {
throw new BizException(ErrorCode.USER_UPDATE_USERNAME_FAILED);
}
}
}

2
chaos_api_web/src/main/java/cn/nopj/chaos_api/config/jwt/JwtAuthenticationTokenFilter.java
View File

@@ -59,7 +59,7 @@ public class JwtAuthenticationTokenFilter extends OncePerRequestFilter {
log.info("authorities: {}", authorities);
UsernamePasswordAuthenticationToken authentication =
new UsernamePasswordAuthenticationToken(username, null, authorities);
request.setAttribute("currentUsername", username);
authentication.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
SecurityContextHolder.getContext().setAuthentication(authentication);
}

2
chaos_api_web/src/main/java/cn/nopj/chaos_api/config/sec/RestAuthenticationEntryPoint.java
View File

@@ -18,7 +18,7 @@ public class RestAuthenticationEntryPoint implements AuthenticationEntryPoint {
response.setContentType("application/json");
response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
ApiResult<Object> result = ApiResult.failed("未授权");
ApiResult<Object> result = ApiResult.failed(403,"权限不足");
String string = JSONObject.toJSONString(result);
response.getWriter().print(string);

21
chaos_api_web/src/main/java/cn/nopj/chaos_api/controller/UserController.java
View File

@@ -2,16 +2,15 @@ package cn.nopj.chaos_api.controller;
import cn.nopj.chaos_api.dto.request.SetUserPasswordRequest;
import cn.nopj.chaos_api.dto.request.UpdateUsernameRequest;
import cn.nopj.chaos_api.dto.response.UserinfoResponse;
import cn.nopj.chaos_api.model.ApiResult;
import cn.nopj.chaos_api.service.UserInfoService;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.bind.annotation.*;
import java.util.List;
@@ -26,7 +25,8 @@ import java.util.List;
public class UserController {
@Autowired
UserInfoService userInfoService;
@Value("${jwt.tokenHead}")
private String tokenHead;
/**
* 获取所有用户信息
@@ -49,4 +49,15 @@ public class UserController {
userInfoService.setUserPassword(request.getUserId(), request.getPassword());
return ApiResult.success("用户密码修改成功");
}
/**
* 更新用户名
* @return 更新后用户名
* @deprecated 废弃 修改用户名之后token会失效
*/
@PostMapping("/updateUsername")
ApiResult<String> updateUsername(@RequestAttribute("currentUsername") String username,@RequestBody UpdateUsernameRequest request){
userInfoService.updateUsername(username, request.getUsername());
return ApiResult.success("用户名更新成功");
}
}