忽略用户密码字段的JSON序列化

This commit is contained in:
Hsy
2025-12-08 09:22:21 +08:00
parent ae544124bb
commit 5c4ebc8e19
2 changed files with 5 additions and 1 deletions

View File

@@ -96,7 +96,8 @@ public class SysProfileController extends BaseController
String newPassword = params.get("newPassword");
LoginUser loginUser = getLoginUser();
Long userId = loginUser.getUserId();
String password = loginUser.getPassword();
SysUser user = userService.selectUserById(userId);
String password = user.getPassword();
if (!SecurityUtils.matchesPassword(oldPassword, password))
{
return error("修改密码失败,旧密码错误");