忽略用户密码字段的JSON序列化

This commit is contained in:
RuoYi
2025-12-03 14:38:14 +08:00
parent f38f8b2c3e
commit 866b47000c
2 changed files with 4 additions and 1 deletions

View File

@@ -96,7 +96,8 @@ public class SysProfileController extends BaseController
String newPassword = params.get("newPassword");
LoginUser loginUser = getLoginUser();
Long userId = loginUser.getUserId();
String password = loginUser.getPassword();
SysUser user = userService.selectUserById(userId);
String password = user.getPassword();
if (!SecurityUtils.matchesPassword(oldPassword, password))
{
return error("修改密码失败,旧密码错误");