feat: 禁止密码过期用户访问业务接口

continew-admin-webapi/src/main/java/top/continew/admin/webapi/auth/AuthController.java

@@ -128,7 +128,7 @@ public class AuthController {
         UserInfoResp userInfoResp = BeanUtil.copyProperties(userDetailResp, UserInfoResp.class);
         userInfoResp.setPermissions(loginUser.getPermissions());
         userInfoResp.setRoles(loginUser.getRoleCodes());
-        userInfoResp.setPwdExpired(userService.isPasswordExpired(userDetailResp.getPwdResetTime()));
+        userInfoResp.setPwdExpired(loginUser.isPasswordExpired());
         return R.ok(userInfoResp);
     }
 

continew-admin-webapi/src/main/resources/config/application.yml

@@ -190,6 +190,16 @@ cosid:
         machine-bit: 3
         sequence-bit: 9
 
+--- ### 认证配置
+auth:
+  ## 密码配置
+  password:
+    excludes:
+      - /auth/route
+      - /auth/user/info
+      - /auth/logout
+      - /system/user/password
+
 --- ### 服务器配置
 server:
   servlet: