Platform account management method and system based on SpringBoot service framework

Abstract

The invention relates to the technical field of operation management platforms, in particular to a platform account management method and system based on a SpringBoot service framework, and the method comprises the following steps: providing an account registration entrance in a login page, and guiding a user to enter an account registration page; on a registration page, a user fills in a login user name, a mailbox, a real name, a department name and a mobile phone number, and registration application submission is completed through verification of a short message verification code; checking registration information input by the user, wherein the registration information comprises formats and validity of a user name, a mailbox, a real name, a department name and a mobile phone number; the method has the beneficial effects that information integration is carried out on user account registration, password resetting forgotten by the user, and user account banning and deblocking, so that the efficiency of adding a new employee into the system and the efficiency of forgotten password resetting by the user are greatly improved. And meanwhile, the flow condition of the personnel accounts of the system can be clear by user list query. And the system management cost is optimized. And the system management efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of operation management platforms, and in particular to a platform account management method and system based on a SpringBoot service framework. Background Art

[0002] Because some business modules of the BSS operation management platform have high staff mobility and are independent systems that cannot be connected to the group LDAP, new employees joining the platform need to go through a series of complex approval processes and then manually operate the user authentication system to edit user information and create user accounts. This process will involve four positions and two systems. At the same time, operations such as resetting passwords and unblocking accounts also require approval from multiple positions and operations on multiple systems. These operations are time-consuming and inefficient. Summary of the invention

[0003] The purpose of the present invention is to provide a platform account management method and system based on the SpringBoot service framework to solve the problems raised in the above background technology.

[0004] To achieve the above object, the present invention provides the following technical solution: a platform account management method based on the SpringBoot service framework, the method comprising the following steps:

[0005] Provide an account registration entry on the login page to guide users to the account registration page;

[0006] On the registration page, the user fills in the login username, email address, real name, department name, and mobile phone number, and completes the registration application submission through SMS verification code verification;

[0007] Verify the registration information entered by the user, including the format and validity of the user name, email address, real name, department name, and mobile phone number;

[0008] Send SMS verification code to the user's mobile phone, and add a cache lock of the mobile phone number in the backend to prevent repeated requests within 60 seconds;

[0009] The user submits the verification code for secondary verification. If the verification is passed, the user name or mobile phone number is checked to see if it has been registered. If it has not been registered, it is stored in the user list and assigned a virtual ID.

[0010] After approval, the virtual ID is replaced with the real user ID returned by the user authentication system and associated with the user authentication system.

[0011] Preferably, it also includes forgotten password reset management, including the following steps:

[0012] Provide a forgotten password entry on the login page to guide users to the password reset page;

[0013] The user enters the login username and mobile phone number and verifies via SMS verification code;

[0014] After verification, the page jumps to the new password setting page, and the user enters and confirms the new password;

[0015] The encrypted new password information is sent to the backend, which decrypts it and calls the user authentication system open interface to reset the password;

[0016] After the reset is successful, the user is prompted that the password change is complete and a direct login entrance is provided.

[0017] Preferably, it also includes a user personal information query management method, comprising the following steps:

[0018] The user sends a request containing a login token to the user personal information query logic through the front end;

[0019] Use the token to resolve the user ID to the user authentication system;

[0020] Query the user information of the corresponding user ID in the user list, including user name, mobile phone number, email address, name, and department name;

[0021] Return the query results to the front end for display.

[0022] Preferably, it also includes an administrator user list query and management method, comprising the following steps:

[0023] The account management center page provides an administrator user list query function, which supports query by user name, mobile phone number, email address, name, approval result, account status, application time, registration success time, and last login time.

[0024] Record user login time and update it to the user list;

[0025] Provide approval and block / unblock operation buttons, and display different operation options according to user status;

[0026] When approved, the user information will be sent to the user authentication system for registration, and the relevant information in the user list will be updated, including sending a random password to the user's mailbox;

[0027] When the approval is rejected, update the user's approval status and other related information;

[0028] The blocking / unblocking operation is performed by sending the corresponding message to the user authentication system, and updating the user status and user list display.

[0029] Preferably, it also includes an account blocking and unblocking management method, comprising the following steps:

[0030] On the account management center page, there are blocking and unblocking buttons for approved users;

[0031] When the ban button is clicked, the user ID is sent to the backend account ban logic, the encapsulated ban message is sent to the user authentication system to execute the ban operation, and the user status and user list display are updated;

[0032] When the unblock button is clicked, the user ID is sent to the backend account unblocking logic, and the encapsulated unblocking message is sent to the user authentication system to perform the unblocking operation, restore the user status and update the user list display;

[0033] Users in the banned state cannot log in to the system.

[0034] A platform account management system based on the SpringBoot service framework, the system includes the following modules:

[0035] Account registration module: used to process user account registration applications, receive the user's login username, email address, real name, department name, and mobile phone number, and verify the authenticity of the information through SMS verification code; during the registration process, the system strictly verifies all input information, including username length and character type, email address format, real name Chinese character number and space limit, department name length and space limit, and mobile phone number format, and submits the registration application after passing the verification;

[0036] Forgot password reset module: provides password reset function after the user forgets the password, and allows the user to set a new password by verifying the login username, mobile phone number and SMS verification code submitted by the user; includes the process of sending verification code, user information verification, password encryption transmission and resetting password in the user authentication system;

[0037] Personal information viewing module: allows users to query their personal information through the login token, including user name, mobile phone number, email address, name, department name, to ensure that users can view and confirm their personal information at any time;

[0038] Administrator user list query module: provides administrators with multi-condition query functions, supports querying user lists based on user name, mobile phone number, email, name, approval result, account status, application time, registration success time, and last login time, and displays department information, so that administrators can comprehensively manage user accounts;

[0039] Administrator approval and ban / unblock module: gives administrators the authority to approve user registration applications, reject registration applications, and ban or unblock user accounts; when the approval is passed, the system automatically registers the user in the user authentication system and updates the user information; when the approval is rejected, the user's approval status is updated, and the ban and unblock operations are implemented by calling the corresponding interface of the user authentication system, and the user status is updated at the same time to ensure the effectiveness of account management.

[0040] Preferably, the account registration module also includes a text message verification code sending mechanism, which is used to send a verification code to the user's mobile phone during the registration process, and prevent repeated requests through a cache mechanism to ensure the effectiveness and security of the verification code sending.

[0041] Preferably, the forgotten password reset module also includes an encryption key mechanism, which uses a randomly generated encryption key to encrypt the new password entered by the user during the password reset process to ensure the security of password transmission.

[0042] Preferably, the administrator user list query module also includes: user login time recording logic, which is used to record and update the user's last login time as one of the query conditions to facilitate the administrator to monitor user activities.

[0043] Preferably, the administrator approval and blocking / unblocking module also includes: automatic password generation and sending. After the user registration application is approved, the system automatically generates a random password that complies with the password rules and sends it to the user via email to improve the user experience.

[0044] Compared with the prior art, the present invention has the following beneficial effects:

[0045] The platform account management method and system based on the SpringBoot service framework proposed in the present invention greatly improves the efficiency of new employees joining the system and users resetting their forgotten passwords by integrating information on user account registration, user password reset, user account blocking, and unblocking. At the same time, user list query can clearly understand the flow of personnel accounts in this system. It optimizes the system management cost and improves the system management efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 The figure is a flow chart of the method of the present invention. DETAILED DESCRIPTION

[0047] In order to make the purpose and technical solution of the present invention clearly and completely described, and the advantages more clearly understood, the embodiments of the present invention are further described in detail with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are part of the embodiments of the present invention, rather than all of the embodiments, and are only used to explain the embodiments of the present invention, and are not used to limit the embodiments of the present invention. All other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0048] For example, see Figure 1 The present invention provides a technical solution: a platform account management method based on the SpringBoot service framework, the method comprising the following steps:

[0049] 1) User account registration application

[0050] On the login page, click Account Registration to open the account registration page to register an account. Fill in the login username, email address, real name, department name, and mobile phone number. All information is required, and complete the submission of the account registration application through SMS verification code verification.

[0051] The login username verification rule is to only support uppercase and lowercase English letters, numbers, and [8,20] digits.

[0052] The mailbox verification rules are the general mailbox verification rules.

[0053] The real name verification rule only supports simplified Chinese characters, with a maximum of 10 characters. No more characters can be entered after more than 10 characters, and no spaces can be entered.

[0054] The department name verification rule is a maximum of 20 characters, and no spaces are allowed.

[0055] The mobile phone number verification rule is the 11-digit domestic mobile phone number rule starting with 1.

[0056] After verifying the above five pieces of information, click the Send SMS Verification Code button to pass the mobile phone number to the backend interface. The backend account registration verification code sending logic receives the mobile phone number and performs logical judgment. First, add a 60-second cache lock for the mobile phone number. If the addition is successful, a verification code and a check code are generated, and the mobile phone number and the check code form a cache key. Use "account registration" as the cache key prefix, put the verification code into the cache as the value, and then send the SMS. Finally, return the check code to the front end; if the addition fails, it means that the mobile phone number has repeatedly requested to send the verification code within 60 seconds, and a prompt of "Please wait 60 seconds" is returned.

[0057] After the user receives the verification code SMS, fill in the verification code. Then click the Submit Registration Application button to send the above five pieces of information, the filled-in verification code, and the verification code as a hidden field to the account registration application logic for secondary verification. The logic first searches the cached data based on the mobile phone number and verification code of the incoming information to find the verification code and compare it with the incoming verification code. If it fails, it returns a prompt "The SMS verification code is wrong, please re-enter"; if it passes, it queries the existing account data list to verify whether the user name or mobile phone number has been registered. If it already exists, it returns "The user name / mobile phone number already exists, please re-enter"; if it does not exist, the application information is stored in the user list. At this time, the user id in the information stored in the user list is a virtual id, which will be updated to the real user id returned by the user authentication system after subsequent approval, so that the id is associated with the user in the user authentication system.

[0058] 2) User forgets password reset

[0059] Click the Forgot Password button on the login page to open the Forgot Password Reset page to reset your password. In the first step, fill in the login username and mobile phone number, and verify it through the SMS verification code. Then send the verification to the Forgot Password User Information Verification Logic. After the verification is passed, the page jumps to the second step. In the second step, fill in the new password twice. After the password rule verification, send the user's new information to the back-end interface Forgot Password Reset Logic to reset the password. After the password is reset successfully, the page jumps to the third step. The third step is to confirm that the password modification is completed. Click the Direct Login button to return to the login interface to log in.

[0060] The logic of sending the verification code for forgetting password reset in the first step is similar to the logic of sending the verification code for account registration. The difference is that the cache key prefix uses "forgot password reset" to prevent the lock conflict caused by the same mobile phone number appearing in both the password forgetting and account registration logic.

[0061] The next step jump button of the first step - the forgotten password user information verification logic includes the verification of the verification code and the verification of the user information, which is the same as the verification code verification logic and the username and mobile phone number processing logic of the account registration application logic. After completing the verification of the verification code, username and mobile phone number, the mobile phone number and username will be used to form a cache key, and the randomly generated encryption key will be used as the value to put it into the cache, and then the encryption key will be returned to the front end to jump to the second step. The encryption key here is the next step jump button in the second step, that is, it is used to encrypt and decrypt the password entered by the user when resetting the forgotten password.

[0062] After the user enters two passwords that meet the rules, click the next jump button in the second step to send the username, mobile phone number, and password encrypted with the encryption key to the backend forgotten password reset logic. The forgotten password reset logic first queries the corresponding encryption key from the cache based on the username and mobile phone number. Next, use the key to decrypt the password, and then pass the new password and user information to the user authentication system open interface for password reset.

[0063] 3) View user personal information

[0064] The front end sends a request to the user personal information query logic to query the user's personal information. The request only sends the user's login token, and uses the token to parse the user ID to the user authentication system. Then, the corresponding user information is queried in the user list and returned to the front end, including user name, mobile phone number, email address, name, and department name.

[0065] 4)Administrator user list query

[0066] On the account management center page, you can query the administrator user list. This function can query the user list data based on the query conditions such as user name, mobile phone number, email, name, approval result, account status, application time, successful registration time, and last login time. The query list items include the items listed in the query conditions and department information. This is implemented through the account management query logic.

[0067] When a user logs in, it is sent to the user login time recording logic to update the user login time. This time is the user's last login time.

[0068] 5) The administrator approves the account registration and rejects the registration application

[0069] On the account management center page, there is an operation bar behind each user information, which contains two buttons: approval and block / unblock. Different buttons will be displayed on the page according to the different status of the user. After clicking the approval button, there are two operations: approval passed and approval rejected. When the account is not approved or the approval is rejected, only the approval button is displayed. When the account is approved, the blocking button or unblocking button will be displayed according to the user status, and only one of them can exist at the same time.

[0070] By clicking Account Approval - Approval Passed, the user id (virtual) is sent to the account approval logic. The logic uses the user id (virtual) to query the current user information package and pass it to the user authentication system open interface for registration. After success, the user authentication system returns the real user id, and updates the real user id and user approval time, user approval time, user approval status and other approval related information to the user in the user list. After the update is completed, a string of 16-digit random passwords that meet the password verification rules is generated. And sent to the mailbox filled in by the user to inform the user.

[0071] By clicking Account Approval - Approval Rejection, the user ID (virtual) is sent to the account approval rejection logic, and the logic updates the user's approval time, approval status and other related information based on the user ID (virtual).

[0072] 6) Administrators unblock or block accounts

[0073] The buttons for unblocking and banning accounts only exist for approved accounts. After a successful registration application, the user status is "normal". At this time, the ban button is displayed and the unblock button is hidden. By clicking the ban button, the user ID is sent to the backend account ban logic. This logic encapsulates the ban message according to the user ID and sends it to the user authentication system to ban the account. After success, the user status of the user in the user list is updated to "banned". After the update is completed, the page display switches to the unblock button, and the ban button is hidden. Click the unblock button to send the user ID to the backend account unblocking logic. This logic encapsulates the unblock message according to the user ID and sends it to the user authentication system to unblock the account. After success, the user status is updated and returns to the state where only the ban button is displayed.

[0074] A banned account cannot be logged in.

[0075] Embodiment 2, based on embodiment 1, proposes a platform account management system based on SpringBoot service framework, the system includes the following modules:

[0076] Account registration module: used to process user account registration applications, receive the user's login username, email address, real name, department name, and mobile phone number, and ensure the authenticity of the information through SMS verification code verification; during the registration process, the system strictly verifies all input information, including username length and character type, email address format, real name Chinese character number and space limit, department name length and space limit, mobile phone number format, and submits the registration application after verification; it also includes an SMS verification code sending mechanism, which is used to send verification codes to the user's mobile phone during the registration process, and prevents repeated requests through a caching mechanism to ensure the effectiveness and security of verification code sending.

[0077] Forgot password reset module: provides password reset function after the user forgets the password, allowing the user to set a new password by verifying the login username, mobile phone number and SMS verification code submitted by the user; includes the process of sending verification code, verifying user information, encrypting password transmission and resetting password in the user authentication system; also includes an encryption key mechanism. During the password reset process, the new password entered by the user is encrypte...

[0078] Personal information viewing module: allows users to query their personal information through the login token, including user name, mobile phone number, email address, name, department name, to ensure that users can view and confirm their personal information at any time;

[0079] Administrator user list query module: provides administrators with multi-condition query functions, supports querying user lists based on user name, mobile phone number, email address, name, approval result, account status, application time, registration success time, and last login time, and displays department information so that administrators can comprehensively manage user accounts; also includes: user login time recording logic, which is used to record and update the user's last login time as one of the query conditions, making it easier for administrators to monitor user activities.

[0080] Administrator approval and blocking / unblocking module: gives administrators the authority to approve user registration applications, reject registration applications, and block or unblock user accounts; when approved, the system automatically registers the user in the user authentication system and updates the user information; when approved, the user's approval status is updated, and the blocking and unblocking operations are implemented by calling the corresponding interface of the user authentication system, and the user status is updated at the same time to ensure the effectiveness of account management; also includes: automatic password generation and sending. After the user registration application is approved, the system automatically generates a random password that complies with the password rules and sends it to the user via email to improve the user experience.

[0081] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A platform account management method based on the SpringBoot service framework, characterized in that: The method comprises the following steps: Provide an account registration entry on the login page to guide users to the account registration page; On the registration page, the user fills in the login username, email address, real name, department name, and mobile phone number, and completes the registration application submission through SMS verification code verification; Verify the registration information entered by the user, including the format and validity of the user name, email address, real name, department name, and mobile phone number; Send SMS verification code to the user's mobile phone, and add a cache lock of the mobile phone number in the backend to prevent repeated requests within 60 seconds; The user submits the verification code for secondary verification. If the verification is passed, the user name or mobile phone number is checked to see if it has been registered. If it has not been registered, it is stored in the user list and assigned a virtual ID. After approval, the virtual ID is replaced with the real user ID returned by the user authentication system and associated with the user authentication system.

2. According to a platform account management method based on SpringBoot service framework according to claim 1, it is characterized in that: It also includes forgotten password reset management, including the following steps: Provide a forgotten password entry on the login page to guide users to the password reset page; The user enters the login username and mobile phone number and verifies via SMS verification code; After verification, the page jumps to the new password setting page, and the user enters and confirms the new password; The encrypted new password information is sent to the backend, which decrypts it and calls the user authentication system open interface to reset the password; After the reset is successful, the user is prompted that the password change is complete and a direct login entrance is provided.

3. According to a platform account management method based on SpringBoot service framework according to claim 1, it is characterized in that: It also includes a user personal information query management method, including the following steps: The user sends a request containing a login token to the user personal information query logic through the front end; Use the token to resolve the user ID to the user authentication system; Query the user information of the corresponding user ID in the user list, including user name, mobile phone number, email address, name, and department name; Return the query results to the front end for display.

4. According to a platform account management method based on SpringBoot service framework according to claim 1, it is characterized in that: It also includes an administrator user list query and management method, including the following steps: The account management center page provides an administrator user list query function, which supports query by user name, mobile phone number, email address, name, approval result, account status, application time, registration success time, and last login time. Record user login time and update it to the user list; Provide approval and block / unblock operation buttons, and display different operation options according to user status; When approved, the user information will be sent to the user authentication system for registration, and the relevant information in the user list will be updated, including sending a random password to the user's mailbox; When the approval is rejected, update the user's approval status and other related information; The blocking / unblocking operation is performed by sending the corresponding message to the user authentication system, and updating the user status and user list display.

5. According to a platform account management method based on SpringBoot service framework according to claim 1, it is characterized in that: It also includes an account blocking and unblocking management method, including the following steps: On the account management center page, there are blocking and unblocking buttons for approved users; When the ban button is clicked, the user ID is sent to the backend account ban logic, the encapsulated ban message is sent to the user authentication system to execute the ban operation, and the user status and user list display are updated; When the unblock button is clicked, the user ID is sent to the backend account unblocking logic, and the encapsulated unblocking message is sent to the user authentication system to perform the unblocking operation, restore the user status and update the user list display; Users in the banned state cannot log in to the system.

6. A platform account management system based on the SpringBoot service framework according to the platform account management method based on the SpringBoot service framework according to any one of claims 1 to 5, characterized in that: The system includes the following modules: Account registration module: used to process user account registration applications, receive the user's login username, email address, real name, department name, and mobile phone number, and verify the authenticity of the information through SMS verification code; during the registration process, the system strictly verifies all input information, including username length and character type, email address format, real name Chinese character number and space limit, department name length and space limit, and mobile phone number format, and submits the registration application after passing the verification; Forgot password reset module: provides password reset function after the user forgets the password, and allows the user to set a new password by verifying the login username, mobile phone number and SMS verification code submitted by the user; includes the process of sending verification code, user information verification, password encryption transmission and resetting password in the user authentication system; Personal information viewing module: allows users to query their personal information through the login token, including user name, mobile phone number, email address, name, department name, to ensure that users can view and confirm their personal information at any time; Administrator user list query module: provides administrators with multi-condition query functions, supports querying user lists based on user name, mobile phone number, email, name, approval result, account status, application time, registration success time, and last login time, and displays department information, so that administrators can comprehensively manage user accounts; Administrator approval and ban / unblock module: gives administrators the authority to approve user registration applications, reject registration applications, and ban or unblock user accounts; when the approval is passed, the system automatically registers the user in the user authentication system and updates the user information; when the approval is rejected, the user's approval status is updated, and the ban and unblock operations are implemented by calling the corresponding interface of the user authentication system, and the user status is updated at the same time to ensure the effectiveness of account management.

7. According to claim 6, a platform account management system based on the SpringBoot service framework is characterized in that: The account registration module also includes a text message verification code sending mechanism, which is used to send a verification code to the user's mobile phone during the registration process, and prevent duplicate requests through a caching mechanism to ensure the effectiveness and security of the verification code sending.

8. According to claim 6, a platform account management system based on the SpringBoot service framework is characterized in that: The forgotten password reset module also includes an encryption key mechanism. During the password reset process, a randomly generated encryption key is used to encrypt the new password entered by the user to ensure the security of password transmission.

9. According to claim 6, a platform account management system based on SpringBoot service framework is characterized in that: The administrator user list query module also includes: user login time recording logic, which is used to record and update the user's last login time as one of the query conditions to facilitate administrators to monitor user activities.

10. A platform account management system based on SpringBoot service framework according to claim 6, characterized in that: The administrator approval and blocking / unblocking module also includes: automatic password generation and sending. After the user registration application is approved, the system automatically generates a random password that complies with the password rules and sends it to the user via email to improve the user experience.

Images