[FIX] ログインしてるユーザーはパスワード再設定後プロフィール画面に戻るように修正・パスワード再設定の際ハッシュ化処理

This commit is contained in:
s-choi
2026-09-25 16:09:36 +09:00
parent cd4321ef8c
commit 2c445c1904
2 changed files with 22 additions and 20 deletions

View File

@@ -1,5 +1,6 @@
package com.example.demo.app.domain.service.impl;
import org.mindrot.jbcrypt.BCrypt;
import org.springframework.stereotype.Service;
import com.example.demo.app.domain.service.PasswordResetService;
@@ -13,30 +14,31 @@ import lombok.RequiredArgsConstructor;
@RequiredArgsConstructor
public class PasswordResetServiceImpl implements PasswordResetService {
private final UserRepository userRepository;
private final UserRepository userRepository;
@Override
public boolean resetPassword(
Long userId,
PasswordResetForm passwordResetForm) {
@Override
public boolean resetPassword(
Long userId,
PasswordResetForm passwordResetForm) {
if (!passwordResetForm.getPassword()
.equals(passwordResetForm.getPasswordConfirm())) {
return false;
}
if (!passwordResetForm.getPassword()
.equals(passwordResetForm.getPasswordConfirm())) {
return false;
}
UserEntity userEntity =
userRepository.findById(userId).orElse(null);
UserEntity userEntity = userRepository.findById(userId).orElse(null);
if (userEntity == null) {
return false;
}
if (userEntity == null) {
return false;
}
userEntity.setPassword(
passwordResetForm.getPassword());
String passwordHashed = BCrypt.hashpw(passwordResetForm.getPassword(), BCrypt.gensalt());
userRepository.save(userEntity);
userEntity.setPassword(
passwordHashed);
return true;
}
userRepository.save(userEntity);
return true;
}
}

View File

@@ -62,7 +62,7 @@ public class PasswordResetController {
(LoginModel) session.getAttribute("loginUser");
if (loginUser != null) {
return "redirect:/menu";
return "redirect:/profile";
}
return "redirect:/login";