add logout after changing password

TeamVastsea · Dec 20, 2023 · 6676900 · 6676900
1 parent 2e5638d
commit 6676900
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/src/main/java/cc/vastsea/toyou/service/impl/UserServiceImpl.java b/src/main/java/cc/vastsea/toyou/service/impl/UserServiceImpl.java
@@ -21,10 +21,13 @@
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
 
+import java.util.Map;
+import java.util.Objects;
 import java.util.UUID;
 import java.util.concurrent.TimeUnit;
 
-import static cc.vastsea.toyou.constant.UserConstant.*;
+import static cc.vastsea.toyou.constant.UserConstant.USER_LOGIN_STATE;
+import static cc.vastsea.toyou.constant.UserConstant.USER_TOKEN_HEADER;
 
 @Service
 @Slf4j
@@ -287,6 +290,13 @@ public void changePassword(User user, String oldPassword, String newPassword) {
             throw new BusinessException(StatusCode.BAD_REQUEST, "密码格式错误");
         }
         user.setPassword(PasswordUtil.encodePassword(newPassword));
+        //log user out
+        Map<UUID, Long> tokenMap = userLoginToken.asMap();
+        for (Map.Entry<UUID, Long> entry : tokenMap.entrySet()) {
+            if (Objects.equals(entry.getValue(), user.getUid())) {
+                userLoginToken.invalidate(entry.getKey());
+            }
+        }
         userMapper.updateById(user);
     }