From 3120cdd01c8e6a2a1edefb6ff251c026f44dee5c Mon Sep 17 00:00:00 2001
From: 沈斌 <bluelazysb@hotmail.com>
Date: Thu, 08 Feb 2018 11:40:31 +0800
Subject: [PATCH] updated

---
 src/main/java/com/moral/security/auth/login/LoginAuthenticationProvider.java |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/src/main/java/com/moral/security/auth/login/LoginAuthenticationProvider.java b/src/main/java/com/moral/security/auth/login/LoginAuthenticationProvider.java
index 307d880..7f403c4 100644
--- a/src/main/java/com/moral/security/auth/login/LoginAuthenticationProvider.java
+++ b/src/main/java/com/moral/security/auth/login/LoginAuthenticationProvider.java
@@ -17,6 +17,7 @@
 import org.springframework.stereotype.Component;
 import org.springframework.util.Assert;
 
+import java.util.Date;
 import java.util.List;
 import java.util.stream.Collectors;
 
@@ -51,7 +52,7 @@
         String password = (String) authentication.getCredentials();
         LoginMode mode = (LoginMode) authentication.getDetails();
         Account account = accountService.queryAccountByName(accountName).orElseThrow(() -> new UsernameNotFoundException("User not found: " + accountName));
-        if (!encoder.matches(password, account.getPassword())) {
+        if (!encoder.matches(password, account.getPassword()) || account.getExpireTime().before(new Date())) {
             throw new BadCredentialsException("Authentication Failed. Username or Password not valid.");
         }
 

--
Gitblit v1.8.0