java后台实现多次登陆失败锁定用户账户

１．实现方法：

１．集成Spring Security框架［里边有登陆成功和失败的监听］

２．集成Redis框架

２．具体实现思路

１．用户输入错误密码登陆失败的监听

@Component
public class LoginLimitFailed implements ApplicationListener<AuthenticationFailureBadCredentialsEvent>{
	@Autowired
	private SysUserMapper userMapper;
	@Autowired
	private RedisTemplate redisTemplate;

	private final ISysConfigService configService;
	@Autowired
	public LoginLimitFailed(ISysConfigService configService){
		this.configService = configService;
	}

	@Override
	public void onApplicationEvent(AuthenticationFailureBadCredentialsEvent authenticationFailureBadCredentialsEvent){
		String username = authenticationFailureBadCredentialsEvent.getAuthentication().getPrincipal().toString();
		SysUser sysUser = userMapper.selectUserByUserName(username);
		Object o = redisTemplate.opsForValue().get(username+"Count");
		if(o==null){
			redisTemplate.opsForValue().set(username+"Count",0);
		}
		Object o1 = redisTemplate.opsForValue().get(username+"Count");
		long l = Long.parseLong(o1.toString());
		l+=1;
		
		redisTemplate.opsForValue().set(username+"Count",l);
		if(l==5||l>5){
			sysUser.setStatus("1"); //锁定用户
			userMapper.updateUser(sysUser);
			//一段时间后解锁[在后台设置的参数：单位秒]
			new Thread(){
				@Override
				public void run(){
					try{
						String keyTime = configService.selectConfigByKey("keyTime");
						sleep(Long.parseLong(keyTime)*1000);
						sysUser.setStatus("0");　//解锁
						userMapper.updateUser(sysUser);
						redisTemplate.opsForValue().set(username+"Count",0);
					}Catch(Exception e){
						e.printStackTrace();
					}
				}
			}.start();
		}
		System.out.println("这是密码输入的错误次数==＞"+l);
	}
}

２．用户输入密码成功登陆的监听

@Component
public class LoginLimitSuccess implements ApplicationListener<AuthenticationSuccessEvent>{
	@Autowired
	private RedisTemplate redisTemplte;
	@Override
	public void onApplicationEvent(AuthenticationSuccessEvent authenticationSuccessEvent){
		Object principal = authenticationSuccessEvent.getAuthentication().getPrincipal();
	}
}

３．登陆成功的接口［若依方法的登陆接口，登陆成功后redis缓存账户登陆失败记录次数清零］

@PostMapping("/login")
@ApiOperation("登陆方法")
public Response<TokenDTO> login(@RequestBody LoginBody loginBody){
	TokenDTO tokenDTO = new TokenDTO();
	String token = "";
	if(loginBody.getUsername()!=null && !loginBody.getUsername().equals("")){
		token = loginSerive.login(loginBody.getUsername(),loginBody.getPassword(),loginBody.getCode(),loginBody.getUuid());
	}else{
		token = loginService.login(loginBody.getPhonenumber());
	}
	tokenDTO.setToken(token);
	String username = loginBody.getUsername();
	redisTemplate.opsForValue().set(username+"Count",0);
	return Response.success(tokenDTO);
}