feat: 登录密码改用 BCrypt 校验

src/main/java/com/guo/learningprogresstracker/service/impl/UserServiceImpl.java

@@ -7,6 +7,7 @@ import com.guo.learningprogresstracker.exception.AppException;
 import com.guo.learningprogresstracker.service.UserService;
 import com.guo.learningprogresstracker.mapper.UserMapper;
 import lombok.RequiredArgsConstructor;
+import org.mindrot.jbcrypt.BCrypt;
 import org.springframework.stereotype.Service;
 
 /**
@@ -23,12 +24,13 @@ public class UserServiceImpl extends ServiceImpl<UserMapper, UserEntity>
     public String authenticate(String username, String password) throws AppException {
 
         UserEntity userEntity = this.getOneOpt(Wrappers.<UserEntity>lambdaQuery()
-                .eq(UserEntity::getUserName, username)
-                .eq(UserEntity::getUserPassword, password)).orElseThrow(() -> new AppException("账号或密码错误！"));
-        return  userEntity.getId();
+                .eq(UserEntity::getUserName, username))
+                .orElseThrow(() -> new AppException("账号或密码错误！"));
+
+        if (!BCrypt.checkpw(password, userEntity.getUserPassword())) {
+            throw new AppException("账号或密码错误！");
+        }
+
+        return userEntity.getId();
     }
 }
-
-
-
-