修改密码的复杂度

yanjinhui

2025-08-28 6a50daac547ebaf0c2503803626e12fbc63c0bb6

 ÏîÄ¿´úÂë/ºó¶Ë/ºǫ́¹ÜÀí/WIDESEAWCS_Server/WIDESEAWCS_SystemServices/Sys_UserService.cs

@@ -31,8 +31,9 @@
        private readonly IRepository<Dt_AuthorizationRecord> _AuthorizatRecServer;
        private readonly IRepository<Sys_UserFace> _userFace;
        
        public Sys_UserService(IRepository<Sys_UserFace> _userFace,IRepository<Dt_AuthorizationRecord> AuthorizatRecServer ,IRepository<Sys_Role> RoleServer,IRepository<Dt_Loginhsy> LoginhsyServer,IRepository<Dt_FaceRecognition> faceServer, IRepository<Sys_User> repository, IUnitOfWorkManage unitOfWorkManage, ICacheService cacheService, ISys_MenuService menuService, IRepository<Dt_Maintenance> MainServer) : base(repository)
        public Sys_UserService(IRepository<Sys_UserFace> userFace,IRepository<Dt_AuthorizationRecord> AuthorizatRecServer ,IRepository<Sys_Role> RoleServer,IRepository<Dt_Loginhsy> LoginhsyServer,IRepository<Dt_FaceRecognition> faceServer, IRepository<Sys_User> repository, IUnitOfWorkManage unitOfWorkManage, ICacheService cacheService, ISys_MenuService menuService, IRepository<Dt_Maintenance> MainServer) : base(repository)
        {
            _userFace= userFace;
            _faceServer = faceServer;
            _LoginhsyServer = LoginhsyServer;
            _unitOfWorkManage = unitOfWorkManage;
@@ -305,7 +306,7 @@

        public override WebResponseContent AddData(SaveModel saveModel)
        {
            string pwd = "123456";
            string pwd = "Gns1234+";
            string uesrName = saveModel.MainData[nameof(Sys_User.UserName).FirstLetterToLower()].ToString();
            saveModel.MainData[nameof(Sys_User.UserPwd).FirstLetterToLower()] = pwd.EncryptDES(AppSecret.User);

@@ -359,6 +360,20 @@
                if (string.IsNullOrEmpty(newPwd)) return WebResponseContent.Instance.Error("新密码不能为空");
                if (newPwd.Length < 6) return WebResponseContent.Instance.Error("密码不能少于6位");

                // âœ… å¯†ç å¤æ‚度校验：必须包含大小写字母、数字和特殊符号
                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"[a-z]"))
                    return content.Error("新密码必须包含小写字母");

                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"[A-Z]"))
                    return content.Error("新密码必须包含大写字母");

                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"\d"))
                    return content.Error("新密码必须包含数字");

                // ç‰¹æ®Šç¬¦å·ï¼ˆæ ‡ç‚¹ï¼‰ï¼Œæ¯”如 . ! @ # $ % ^ & * ( ) _ - + = ...
                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"[!@#$%^&*(),.?""':{}|<>_\-+=\\/\[\]~`]"))
                    return content.Error("新密码必须包含至少一个特殊符号");

                int userId = App.User.UserId;
                string userCurrentPwd = BaseDal.QueryFirst(x => x.User_Id == userId, s => s.UserPwd);

@@ -405,22 +420,45 @@

            try
            {
                if (string.IsNullOrEmpty(oldPwd)) return content.Error("旧密码不能为空");
                if (string.IsNullOrEmpty(newPwd)) return content.Error("新密码不能为空");
                if (newPwd.Length < 6) return content.Error("密码不能少于6位");
                if (string.IsNullOrEmpty(oldPwd))
                    return content.Error("旧密码不能为空");

                if (string.IsNullOrEmpty(newPwd))
                    return content.Error("新密码不能为空");

                if (newPwd.Length < 6)
                    return content.Error("密码不能少于6位");

                // âœ… å¯†ç å¤æ‚度校验：必须包含大小写字母、数字和特殊符号
                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"[a-z]"))
                    return content.Error("新密码必须包含小写字母");

                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"[A-Z]"))
                    return content.Error("新密码必须包含大写字母");

                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"\d"))
                    return content.Error("新密码必须包含数字");

                // ç‰¹æ®Šç¬¦å·ï¼ˆæ ‡ç‚¹ï¼‰ï¼Œæ¯”如 . ! @ # $ % ^ & * ( ) _ - + = ...
                if (!global::System.Text.RegularExpressions.Regex.IsMatch(newPwd, @"[^a-zA-Z0-9]"))
                    return content.Error("新密码必须包含至少一个特殊符号");


                // èŽ·å–用户当前密码
                string userCurrentPwd = BaseDal.QueryFirst(x => x.User_Id == id, s => s.UserPwd) ?? "";

                if (string.IsNullOrEmpty(userCurrentPwd)) return content.Error("用户不存在或密码未设置");
                if (string.IsNullOrEmpty(userCurrentPwd))
                    return content.Error("用户不存在或密码未设置");

                //// è¿›è¡Œå¯†ç åŠ å¯†å¯¹æ¯”
                //// å¦‚果需要验证旧密码，放开这里
                //string _oldPwd = oldPwd.EncryptDES(AppSecret.User);
                //if (_oldPwd != userCurrentPwd) return content.Error("旧密码不正确");
                //if (_oldPwd != userCurrentPwd) 
                //    return content.Error("旧密码不正确");

                // ç”Ÿæˆæ–°å¯†ç åŠ å¯†å€¼
                string _newPwd = newPwd.EncryptDES(AppSecret.User);
                if (userCurrentPwd == _newPwd) return content.Error("新密码不能与旧密码相同");
                if (userCurrentPwd == _newPwd)
                    return content.Error("新密码不能与旧密码相同");

                // æ›´æ–°å¯†ç 
                bool isUpdated = BaseDal.UpdateData(new Sys_User
@@ -436,7 +474,7 @@

                if (!isUpdated)
                {
                    return content.Error("密码修改失败，请稍后重试");
                    return content.Error("密码修改失败，密码必须包括字母以及特殊字符");
                }

                return content.OK("密码修改成功", id);
@@ -447,6 +485,7 @@
                return content.Error($"服务器错误: {ex.Message}");
            }
        }



        public WebResponseContent Upuserbase(UserDTO userDTO)
@@ -563,7 +602,7 @@
                    RoleName = addUserDTO.rolename,
                    Enable = addUserDTO.enable,
                    Unit = addUserDTO.userunit,
                    UserPwd = "j79rYYvCz4vdhcboB1Ausg==",
                    UserPwd = "NgKc7vI5u5jzh115fowV~g==",
                    Userteam = addUserDTO.userteam,
                    Dept_Id = addUserDTO.dept_Id,
                    //CardNumber=addUserDTO.carnuber,
@@ -732,14 +771,27 @@
                //{
                // ç™¾åº¦åˆ é™¤æˆåŠŸåŽï¼Œåˆ é™¤æ•°æ®åº“中的用户
                var user = BaseDal.QueryData(x => x.UserName == account).FirstOrDefault();
                if (user==null)
                {
                    return WebResponseContent.Instance.Error("没有找到该用户");
                }
                var main = _MainServer.QueryData(x => x.UserAccount == account).FirstOrDefault();
                var face= _userFace.QueryData(x=>x.UserName== account).FirstOrDefault();
                if (user != null && main != null&&face!=null)
                if (main.MaintenanceStatus == 1)
                {
                    return WebResponseContent.Instance.Error("该用户还在检修中，无法删除");
                }
                if (face == null)
                {
                    BaseDal.DeleteData(user);
                    _MainServer.DeleteData(main);
                }
                else
                {
                    BaseDal.DeleteData(user);
                    _MainServer.DeleteData(main);
                    _userFace.DeleteData(face);
                }
                }             
                return WebResponseContent.Instance.OK("用户删除成功");
                //}
                //else
@@ -1036,14 +1088,22 @@
                }
                var main = _MainServer.QueryData(x => x.UserAccount == user.UserName).FirstOrDefault();
                var face = _userFace.QueryData(x => x.UserName == user.UserName).FirstOrDefault();
                if (main.MaintenanceStatus == 1)
                {
                    return WebResponseContent.Instance.Error("该用户还在检修中，无法删除");
                }
                if (face == null)
                {
                    BaseDal.DeleteData(user);
                    _MainServer.DeleteData(main);
                }
                BaseDal.DeleteData(user);
                _MainServer.DeleteData(main);
                _userFace.DeleteData(face);
                else
                {
                    BaseDal.DeleteData(user);
                    _MainServer.DeleteData(main);
                    _userFace.DeleteData(face);
                }
               
            }

            return webResponse.OK();