修改用户密码前先验证旧密码，增加安全性

lawrencehj

2021-04-15 a70e327a8efaf38d74911ea568419a087fbd235a

 src/main/java/com/genersoft/iot/vmp/gb28181/transmit/request/impl/RegisterRequestProcessor.java

@@ -16,6 +16,8 @@
import javax.sip.message.Request;

import javax.sip.message.Response;



import com.genersoft.iot.vmp.gb28181.bean.WvpSipDate;

import gov.nist.javax.sip.header.SIPDateHeader;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.springframework.util.StringUtils;

@@ -25,7 +27,6 @@
import com.genersoft.iot.vmp.gb28181.auth.DigestServerAuthenticationHelper;

import com.genersoft.iot.vmp.gb28181.auth.RegisterLogicHandler;

import com.genersoft.iot.vmp.gb28181.bean.Device;

import com.genersoft.iot.vmp.gb28181.bean.Host;

import com.genersoft.iot.vmp.gb28181.event.EventPublisher;

import com.genersoft.iot.vmp.gb28181.transmit.request.SIPRequestAbstractProcessor;

import com.genersoft.iot.vmp.storager.IVideoManagerStorager;

@@ -88,7 +89,12 @@
         else if (passwordCorrect) {

            response = getMessageFactory().createResponse(Response.OK, request);

            // 添加date头

            response.addHeader(getHeaderFactory().createDateHeader(Calendar.getInstance(Locale.ENGLISH)));

            SIPDateHeader dateHeader = new SIPDateHeader();

            // 使用自己修改的

            WvpSipDate wvpSipDate = new WvpSipDate(Calendar.getInstance(Locale.ENGLISH).getTimeInMillis());

            dateHeader.setDate(wvpSipDate);

            response.addHeader(dateHeader);



            ExpiresHeader expiresHeader = (ExpiresHeader) request.getHeader(Expires.NAME);

            // 添加Contact头

            response.addHeader(request.getHeader(ContactHeader.NAME));

@@ -139,15 +145,15 @@
         // 下发catelog查询目录

         if (registerFlag == 1 && device != null) {

            logger.info("注册成功! deviceId:" + device.getDeviceId());

            boolean exists = storager.exists(device.getDeviceId());

            // boolean exists = storager.exists(device.getDeviceId());

            device.setRegisterTimeMillis(System.currentTimeMillis());

            storager.updateDevice(device);

            publisher.onlineEventPublish(device.getDeviceId(), VideoManagerConstants.EVENT_ONLINE_REGISTER);



            // 只有第一次注册才更新通道

            if (!exists) {

            // 重新注册更新设备和通道，以免设备替换或更新后信息无法更新

            //if (!exists) {

               handler.onRegister(device);

            }

            //}

         } else if (registerFlag == 2) {

            logger.info("注销成功! deviceId:" + device.getDeviceId());

            publisher.outlineEventPublish(device.getDeviceId(), VideoManagerConstants.EVENT_OUTLINE_UNREGISTER);