spring boot 修改密码

要在Spring Boot中修改密码，你需要完成以下步骤：

1. 创建一个包含密码字段的用户实体类，例如：

@Entity
@Table(name = "users")
public class User {
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Long id;

    @Column(nullable = false)
    private String username;

    @Column(nullable = false)
    private String password;

    // getters and setters
}

2. 创建一个用于更改密码的控制器或服务类，例如：

@RestController
@RequestMapping("/users")
public class UserController {
    @Autowired
    private UserRepository userRepository;

    @PutMapping("/{id}/password")
    public ResponseEntity<String> updatePassword(@PathVariable Long id, @RequestParam String currentPassword, @RequestParam String newPassword) {
        Optional<User> optionalUser = userRepository.findById(id);
        if (optionalUser.isPresent()) {
            User user = optionalUser.get();
            if (user.getPassword().equals(currentPassword)) {
                user.setPassword(newPassword);
                userRepository.save(user);
                return ResponseEntity.ok("Password updated successfully.");
            } else {
                return ResponseEntity.badRequest().body("Current password is incorrect.");
            }
        } else {
            return ResponseEntity.notFound().build();
        }
    }
}

3. 在应用程序配置中启用Spring Security，例如：

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Autowired
    private UserDetailsService userDetailsService;

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/users/**").authenticated()
                .anyRequest().permitAll()
                .and()
                .formLogin()
                .and()
                .logout();
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService);
    }
}

这些步骤将允许已验证的用户通过PUT请求更改其密码。请注意，这只是一个简单的示例，并且需要根据您的应用程序进行修改。