Commit dd326000 by 邝钲钞

修复代码审计可能空指针异常

parent 2b6eee9c
......@@ -109,19 +109,17 @@ public class ShiroConfig {
@Bean
public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) {
KeyGenerator keygen = null;
try {
keygen = KeyGenerator.getInstance("AES");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
KeyGenerator keygen = KeyGenerator.getInstance("AES");
SecretKey deskey = keygen.generateKey();
System.out.println(">>>>"+Base64.encodeToString(deskey.getEncoded()));
CookieRememberMeManager manager = new CookieRememberMeManager();
manager.setCipherKey(Base64.decode(deskey.getEncoded()));
manager.setCookie(rememberMeCookie);
return manager;
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
return null;
}
}
@Bean
......
......@@ -28,8 +28,8 @@ public class UserTestHelper extends AppApplicationBaseIT {
// // 证明MD5无法解密
// ResponseData<String> pwdDecrypt = LoginUtils.pwdDecrypt(user.getPassword());
// log.info("{}", pwdDecrypt.getData());
String orderSeq = RandomUtil.RandomNumber(32);
System.out.println(orderSeq);
//
// String orderSeq = RandomUtil.RandomNumber(32);
// System.out.println(orderSeq);
}
}
......@@ -109,19 +109,17 @@ public class ShiroConfig {
@Bean
public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) {
KeyGenerator keygen = null;
try {
keygen = KeyGenerator.getInstance("AES");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
KeyGenerator keygen = KeyGenerator.getInstance("AES");
SecretKey deskey = keygen.generateKey();
//System.out.println(">>>>"+Base64.encodeToString(deskey.getEncoded()));
CookieRememberMeManager manager = new CookieRememberMeManager();
manager.setCipherKey(Base64.decode(deskey.getEncoded()));
manager.setCookie(rememberMeCookie);
return manager;
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
return null;
}
}
@Bean
......
......@@ -109,19 +109,17 @@ public class ShiroConfig {
@Bean
public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) {
KeyGenerator keygen = null;
try {
keygen = KeyGenerator.getInstance("AES");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
KeyGenerator keygen = KeyGenerator.getInstance("AES");
SecretKey deskey = keygen.generateKey();
//System.out.println(">>>>"+Base64.encodeToString(deskey.getEncoded()));
CookieRememberMeManager manager = new CookieRememberMeManager();
manager.setCipherKey(Base64.decode(deskey.getEncoded()));
manager.setCookie(rememberMeCookie);
return manager;
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
return null;
}
}
@Bean
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment