feat(security): 添加密码加密功能
在用户登录时对密码进行加密处理,使用 Base64 编码和 RSA 加密增强安全性 新增 crypto.js 工具文件并添加相关依赖
This commit is contained in:
@@ -1,11 +1,13 @@
|
||||
import { getAction, postAction, deleteAction } from './manage.js';
|
||||
import url, { getBaseUrl } from './url.js';
|
||||
import { encryptPassword } from '@/utils/crypto.js';
|
||||
|
||||
// 健康检查
|
||||
export const getHealthAction = () => getAction(url.health);
|
||||
|
||||
// 用户登录
|
||||
export const loginAction = (data, sparkBaseUrl) => postAction(url.user.login, data, {}, sparkBaseUrl);
|
||||
export const loginAction = (data, sparkBaseUrl) =>
|
||||
postAction(url.user.login, { email: data.email, password: encryptPassword(data.password) }, {}, sparkBaseUrl);
|
||||
|
||||
// 会话
|
||||
export const createSessionAction = (data) => postAction(url.session.create, data);
|
||||
|
||||
25
src/renderer/utils/crypto.js
Normal file
25
src/renderer/utils/crypto.js
Normal file
@@ -0,0 +1,25 @@
|
||||
import { Base64 } from 'js-base64';
|
||||
import JSEncrypt from 'jsencrypt';
|
||||
|
||||
// RSA 公钥,替换为实际公钥内容
|
||||
const RSA_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
|
||||
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq9XTUSeYr2+N1h3Afl/
|
||||
z8Dse/2yD0ZGrKwx+EEEcdsBLca9Ynmx3nIB5obmLlSfmskLpBo0UACBmB5rEjBp
|
||||
2Q2f3AG3Hjd4B+gNCG6BDaawuDlgANIhGnaTLrIqWrrcm4EMzJOnAOI1fgzJRsOO
|
||||
UEfaS318Eq9OVO3apEyCCt0lOQK6PuksduOjVxtltDav+guVAA068NrPYmRNabVK
|
||||
RNLJpL8w4D44sfth5RvZ3q9t+6RTArpEtc5sh5ChzvqPOzKGMXW83C95TxmXqpbK
|
||||
6olN4RevSfVjEAgCydH6HN6OhtOQEcnrU97r9H0iZOWwbw3pVrZiUkuRD1R56Wzs
|
||||
2wIDAQAB
|
||||
-----END PUBLIC KEY-----`;
|
||||
|
||||
/**
|
||||
* 对密码进行加密:Base64 编码 → RSA 加密
|
||||
* @param {string} password 原始密码
|
||||
* @returns {string|false} 加密后的密文,失败返回 false
|
||||
*/
|
||||
export function encryptPassword(password) {
|
||||
const base64Pwd = Base64.encode(password);
|
||||
const encrypt = new JSEncrypt();
|
||||
encrypt.setPublicKey(RSA_PUBLIC_KEY);
|
||||
return encrypt.encrypt(base64Pwd);
|
||||
}
|
||||
Reference in New Issue
Block a user