mirror of
https://github.com/go-admin-team/go-admin.git
synced 2026-09-20 17:57:54 +00:00
zhangwenjian
ecb31a158b
BeforeCreate and BeforeUpdate run Encrypt on whatever is in the struct,
and a user read from the database carries the stored hash in Password.
Hashing it again produces a hash of a hash: the password that user knows
stops matching, they cannot log in, and nothing reports an error.
Only the Omit("password") on SysUser.Update stood between that and the
stored credential. Any other write to this model - a profile update
written the way every other model here is written - destroys the
password, permanently and silently.
Encrypt now returns early when Password already parses as a bcrypt hash.
That also removes the round SysUser.Update was paying and discarding:
306ns where it was 54.7ms, on a route reachable without the permission
check, since PUT /api/v1/sys-user is in CasbinExclude.
The cost of deciding from the value is that a password which is itself a
well-formed bcrypt hash would be stored unchanged. That is a
60-character string beginning "$2a$", and it grants whoever set it no
access they did not already have.
90 lines
2.9 KiB
Go
90 lines
2.9 KiB
Go
package models
|
|
|
|
import (
|
|
"go-admin/common/models"
|
|
"golang.org/x/crypto/bcrypt"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
type SysUser struct {
|
|
UserId int `gorm:"primaryKey;autoIncrement;comment:编码" json:"userId"`
|
|
Username string `json:"username" gorm:"size:64;comment:用户名"`
|
|
Password string `json:"-" gorm:"size:128;comment:密码"`
|
|
NickName string `json:"nickName" gorm:"size:128;comment:昵称"`
|
|
Phone string `json:"phone" gorm:"size:11;comment:手机号"`
|
|
RoleId int `json:"roleId" gorm:"size:20;comment:角色ID"`
|
|
Salt string `json:"-" gorm:"size:255;comment:加盐"`
|
|
Avatar string `json:"avatar" gorm:"size:255;comment:头像"`
|
|
Sex string `json:"sex" gorm:"size:255;comment:性别"`
|
|
Email string `json:"email" gorm:"size:128;comment:邮箱"`
|
|
DeptId int `json:"deptId" gorm:"size:20;comment:部门"`
|
|
PostId int `json:"postId" gorm:"size:20;comment:岗位"`
|
|
Remark string `json:"remark" gorm:"size:255;comment:备注"`
|
|
Status string `json:"status" gorm:"size:4;comment:状态"`
|
|
DeptIds []int `json:"deptIds" gorm:"-"`
|
|
PostIds []int `json:"postIds" gorm:"-"`
|
|
RoleIds []int `json:"roleIds" gorm:"-"`
|
|
Dept *SysDept `json:"dept"`
|
|
models.ControlBy
|
|
models.ModelTime
|
|
}
|
|
|
|
func (*SysUser) TableName() string {
|
|
return "sys_user"
|
|
}
|
|
|
|
func (e *SysUser) Generate() models.ActiveRecord {
|
|
o := *e
|
|
return &o
|
|
}
|
|
|
|
func (e *SysUser) GetId() interface{} {
|
|
return e.UserId
|
|
}
|
|
|
|
// Encrypt hashes Password, unless it already holds a hash.
|
|
//
|
|
// The hooks below run on whatever is in the struct, and a user read from the
|
|
// database carries the stored hash in that field. Hashing it again produces a
|
|
// hash of a hash, and the password that user knows no longer matches anything:
|
|
// they cannot log in, and nothing reports an error. The only thing preventing
|
|
// that today is an Omit("password") on the one update that loads a user first,
|
|
// which makes every other write to this model one line away from destroying
|
|
// credentials.
|
|
//
|
|
// bcrypt.Cost parses a hash and fails on anything else, so it distinguishes
|
|
// the two cases without the call site having to say which it is. The cost is
|
|
// that a password which is itself a well-formed bcrypt hash would be stored
|
|
// unchanged - a 60-character string beginning "$2a$", not something a person
|
|
// types, and it grants whoever set it no access they did not already have.
|
|
func (e *SysUser) Encrypt() error {
|
|
if e.Password == "" {
|
|
return nil
|
|
}
|
|
if _, err := bcrypt.Cost([]byte(e.Password)); err == nil {
|
|
return nil
|
|
}
|
|
|
|
hash, err := bcrypt.GenerateFromPassword([]byte(e.Password), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
e.Password = string(hash)
|
|
return nil
|
|
}
|
|
|
|
func (e *SysUser) BeforeCreate(_ *gorm.DB) error {
|
|
return e.Encrypt()
|
|
}
|
|
|
|
func (e *SysUser) BeforeUpdate(_ *gorm.DB) error {
|
|
return e.Encrypt()
|
|
}
|
|
|
|
func (e *SysUser) AfterFind(_ *gorm.DB) error {
|
|
e.DeptIds = []int{e.DeptId}
|
|
e.PostIds = []int{e.PostId}
|
|
e.RoleIds = []int{e.RoleId}
|
|
return nil
|
|
}
|