增加管理后台登录频次校验和连续错误登录后限制登录 修改管理后台验证码生成和登录校验

puzhibing

2026-08-26 f1bdb285c951f7aef6f1f217773afb7737779435

 ruoyi-auth/src/main/java/com/ruoyi/auth/service/SysLoginService.java

@@ -39,18 +39,22 @@
   
   @Autowired
   private RedisService redisService;

   @Autowired
   private LoginRateLimitService loginRateLimitService;
   
   /**
    * 登录
    */
   public LoginUser login(String username, String password, HttpServletRequest request) {
      username = username.trim();
      loginRateLimitService.checkLoginRate(username, request);
      username = StringUtils.trim(username);
      // 查询用户信息
      R<LoginUser> userResult = remoteUserService.getUserInfo(username, SecurityConstants.INNER);
      
      if (StringUtils.isNull(userResult) || StringUtils.isNull(userResult.getData())) {
         recordLogService.recordLogininfor(request, null, username, Constants.LOGIN_FAIL_STATUS, "登录用户不存在");
         throw new ServiceException("用户名/密码错误");
         throw new ServiceException("用户名或密码错误");
      }
      LoginUser userInfo = userResult.getData();
      SysUser user = userResult.getData().getSysUser();