package com.ruoyi.auth.service;
|
|
import java.util.regex.Pattern;
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.stereotype.Service;
|
import com.ruoyi.auth.enums.SmsSceneEnum;
|
import com.ruoyi.common.core.constant.SecurityConstants;
|
import com.ruoyi.common.core.domain.R;
|
import com.ruoyi.common.core.enums.UserStatus;
|
import com.ruoyi.common.core.exception.ServiceException;
|
import com.ruoyi.common.core.utils.StringUtils;
|
import com.ruoyi.system.api.RemoteAccountUserService;
|
import com.ruoyi.system.api.domain.AccountMember;
|
import com.ruoyi.system.api.model.AccountResetPasswordRequest;
|
|
/**
|
* 忘记密码（重置密码）编排服务
|
*
|
* 身份校验：登录手机号 + 短信验证码（scene=reset）；校验通过后由 ruoyi-user 侧 BCrypt 加密落库。
|
*
|
* @author hugray
|
*/
|
@Service
|
public class PasswordResetService
|
{
|
private static final Logger log = LoggerFactory.getLogger(PasswordResetService.class);
|
|
/** 手机号正则 */
|
private static final Pattern PHONE_PATTERN = Pattern.compile("^1[3-9]\\d{9}$");
|
|
@Autowired
|
private SmsCodeService smsCodeService;
|
|
@Autowired
|
private RemoteAccountUserService remoteAccountUserService;
|
|
/**
|
* 重置密码
|
*
|
* @param phone 手机号（账号标识）
|
* @param code 短信验证码
|
* @param password 新密码（明文）
|
*/
|
public void resetPassword(String phone, String code, String password)
|
{
|
// STEP 1: 入参兜底校验（Controller 已校验，此处做服务层兜底）
|
if (StringUtils.isEmpty(phone) || !PHONE_PATTERN.matcher(phone).matches())
|
{
|
throw new ServiceException("请输入正确手机号");
|
}
|
if (StringUtils.isEmpty(code))
|
{
|
throw new ServiceException("请输入验证码");
|
}
|
if (StringUtils.isEmpty(password))
|
{
|
throw new ServiceException("请输入新密码");
|
}
|
|
// STEP 2: 先查询会员与状态，避免无谓消费验证码（与 phoneCodeLogin 口径一致）
|
AccountMember member = getRegisteredMember(phone);
|
checkMemberStatus(member);
|
|
// STEP 3: 校验并消费短信验证码（scene=reset，一次性）
|
smsCodeService.verifyAndConsume(phone, SmsSceneEnum.RESET.getCode(), code);
|
|
// STEP 4: 调用 ruoyi-user 内部接口落库（服务内 BCrypt 加密，只更新 password 一列）
|
AccountResetPasswordRequest request = new AccountResetPasswordRequest();
|
request.setPhone(phone);
|
request.setPassword(password);
|
R<Boolean> resetResult = remoteAccountUserService.resetPassword(request, SecurityConstants.INNER);
|
if (R.FAIL == resetResult.getCode())
|
{
|
throw new ServiceException(resetResult.getMsg());
|
}
|
log.info("[PASSWORD_RESET] reset success, phone={}", maskPhone(phone));
|
}
|
|
/**
|
* 按手机号查询会员，不存在时抛出「未注册」业务异常
|
*
|
* @param phone 手机号
|
* @return 会员信息
|
*/
|
private AccountMember getRegisteredMember(String phone)
|
{
|
R<AccountMember> memberResult = remoteAccountUserService.getMemberByPhone(phone, SecurityConstants.INNER);
|
if (R.FAIL == memberResult.getCode())
|
{
|
throw new ServiceException(memberResult.getMsg());
|
}
|
AccountMember member = memberResult.getData();
|
if (StringUtils.isNull(member))
|
{
|
throw new ServiceException("该手机号未注册，请先注册");
|
}
|
return member;
|
}
|
|
/**
|
* 校验会员状态，停用账号拒绝重置密码
|
*
|
* @param member C端会员信息
|
*/
|
private void checkMemberStatus(AccountMember member)
|
{
|
if (UserStatus.DISABLE.getCode().equals(member.getStatus()))
|
{
|
throw new ServiceException("账号已停用，请联系管理员");
|
}
|
}
|
|
/**
|
* 手机号脱敏，形如 138****0000
|
*/
|
private String maskPhone(String phone)
|
{
|
if (StringUtils.isEmpty(phone) || phone.length() < 7)
|
{
|
return phone;
|
}
|
return phone.substring(0, 3) + "****" + phone.substring(phone.length() - 4);
|
}
|
}
|
