Commit dd326000 by 邝钲钞

修复代码审计可能空指针异常

parent 2b6eee9c
...@@ -109,19 +109,17 @@ public class ShiroConfig { ...@@ -109,19 +109,17 @@ public class ShiroConfig {
@Bean @Bean
public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) { public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) {
KeyGenerator keygen = null;
try { try {
keygen = KeyGenerator.getInstance("AES"); KeyGenerator keygen = KeyGenerator.getInstance("AES");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
SecretKey deskey = keygen.generateKey(); SecretKey deskey = keygen.generateKey();
System.out.println(">>>>"+Base64.encodeToString(deskey.getEncoded()));
CookieRememberMeManager manager = new CookieRememberMeManager(); CookieRememberMeManager manager = new CookieRememberMeManager();
manager.setCipherKey(Base64.decode(deskey.getEncoded())); manager.setCipherKey(Base64.decode(deskey.getEncoded()));
manager.setCookie(rememberMeCookie); manager.setCookie(rememberMeCookie);
return manager; return manager;
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
return null;
}
} }
@Bean @Bean
......
...@@ -28,8 +28,8 @@ public class UserTestHelper extends AppApplicationBaseIT { ...@@ -28,8 +28,8 @@ public class UserTestHelper extends AppApplicationBaseIT {
// // 证明MD5无法解密 // // 证明MD5无法解密
// ResponseData<String> pwdDecrypt = LoginUtils.pwdDecrypt(user.getPassword()); // ResponseData<String> pwdDecrypt = LoginUtils.pwdDecrypt(user.getPassword());
// log.info("{}", pwdDecrypt.getData()); // log.info("{}", pwdDecrypt.getData());
//
String orderSeq = RandomUtil.RandomNumber(32); // String orderSeq = RandomUtil.RandomNumber(32);
System.out.println(orderSeq); // System.out.println(orderSeq);
} }
} }
...@@ -109,19 +109,17 @@ public class ShiroConfig { ...@@ -109,19 +109,17 @@ public class ShiroConfig {
@Bean @Bean
public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) { public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) {
KeyGenerator keygen = null;
try { try {
keygen = KeyGenerator.getInstance("AES"); KeyGenerator keygen = KeyGenerator.getInstance("AES");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
SecretKey deskey = keygen.generateKey(); SecretKey deskey = keygen.generateKey();
//System.out.println(">>>>"+Base64.encodeToString(deskey.getEncoded()));
CookieRememberMeManager manager = new CookieRememberMeManager(); CookieRememberMeManager manager = new CookieRememberMeManager();
manager.setCipherKey(Base64.decode(deskey.getEncoded())); manager.setCipherKey(Base64.decode(deskey.getEncoded()));
manager.setCookie(rememberMeCookie); manager.setCookie(rememberMeCookie);
return manager; return manager;
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
return null;
}
} }
@Bean @Bean
......
...@@ -109,19 +109,17 @@ public class ShiroConfig { ...@@ -109,19 +109,17 @@ public class ShiroConfig {
@Bean @Bean
public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) { public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) {
KeyGenerator keygen = null;
try { try {
keygen = KeyGenerator.getInstance("AES"); KeyGenerator keygen = KeyGenerator.getInstance("AES");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
SecretKey deskey = keygen.generateKey(); SecretKey deskey = keygen.generateKey();
//System.out.println(">>>>"+Base64.encodeToString(deskey.getEncoded()));
CookieRememberMeManager manager = new CookieRememberMeManager(); CookieRememberMeManager manager = new CookieRememberMeManager();
manager.setCipherKey(Base64.decode(deskey.getEncoded())); manager.setCipherKey(Base64.decode(deskey.getEncoded()));
manager.setCookie(rememberMeCookie); manager.setCookie(rememberMeCookie);
return manager; return manager;
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
return null;
}
} }
@Bean @Bean
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment