Parcourir la source

去掉密码策略校验
当密码错误次数超过6次被暂定锁定后,社交登录时也会报错被锁定,密码错误过多被锁定是为了防止暴力破解密码 不应该影响其他登录方式

Signed-off-by: zwj <6513209+imagine0820@user.noreply.gitee.com>

zwj il y a 1 semaine
Parent
commit
1e8ceb38a9

+ 1 - 4
maxkey-authentications/maxkey-authentication-provider/src/main/java/org/dromara/maxkey/authn/provider/impl/TrustedAuthenticationProvider.java

@@ -60,10 +60,7 @@ public class TrustedAuthenticationProvider extends AbstractAuthenticationProvide
         UserInfo loadeduserInfo = loadUserInfo(loginCredential.getUsername(), "");
         statusValid(loginCredential , loadeduserInfo);
         if (loadeduserInfo != null) {
-            //Validate PasswordPolicy
-            authenticationRealm.getLoginService().passwordPolicyValid(loadeduserInfo);
-            //apply PasswordSetType and resetBadPasswordCount
-            authenticationRealm.getLoginService().applyPasswordPolicy(loadeduserInfo);
+  
             Authentication authentication = createOnlineTicket(loginCredential,loadeduserInfo);
             
             authenticationRealm.insertLoginHistory( loadeduserInfo,