overflow_backup_2018_0455/overflow_server
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

member password security

Browse Source
This commit is contained in:
insanity 2017-06-28 15:41:23 +09:00
parent ba809a27f5
commit 081326b1ab
2 changed files with 6 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/main/java/com/loafle/overflow/module/member/model/Member.java
View File

@ -15,7 +15,6 @@ public class Member {
private long id; private long id;
private String email; private String email;
private String pw; private String pw;
private String pwSalt;
private String name; private String name;
private String phone; private String phone;
private String companyName; private String companyName;
@ -59,16 +58,6 @@ public class Member {
this.pw = pw; this.pw = pw;
} }
@Basic
@Column(name = "PW_SALT", nullable = true, length = 32)
public String getPwSalt() {
return pwSalt;
}
public void setPwSalt(String pwSalt) {
this.pwSalt = pwSalt;
}
@Basic @Basic
@Column(name = "NAME", nullable = true, length = 50) @Column(name = "NAME", nullable = true, length = 50)
public String getName() { public String getName() {

8
src/main/java/com/loafle/overflow/module/member/service/MemberService.java
View File

@ -3,6 +3,7 @@ package com.loafle.overflow.module.member.service;
import com.loafle.overflow.module.member.dao.MemberDAO; import com.loafle.overflow.module.member.dao.MemberDAO;
import com.loafle.overflow.module.member.model.Member; import com.loafle.overflow.module.member.model.Member;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Service; import org.springframework.stereotype.Service;
/** /**
@ -13,6 +14,8 @@ public class MemberService {
@Autowired @Autowired
private MemberDAO memberDAO; private MemberDAO memberDAO;
@Autowired
private BCryptPasswordEncoder passwordEncoder;
public Member signin(Member member) throws Exception { public Member signin(Member member) throws Exception {
Member m = this.memberDAO.findByEmail(member); Member m = this.memberDAO.findByEmail(member);
@ -25,14 +28,15 @@ public class MemberService {
throw new Exception("Email Auth Confirm Check"); throw new Exception("Email Auth Confirm Check");
} }
// Todo member.pw m.pw compare Boolean match = this.passwordEncoder.matches(member.getPw(), m.getPw());
if(!match) return null;
return m; return m;
} }
public Member signup(Member member) { public Member signup(Member member) {
member.setPw(this.passwordEncoder.encode(member.getPw()));
return this.memberDAO.save(member); return this.memberDAO.save(member);
} }