屏蔽敏感字段

(cherry picked from commit d34b0c38120a3ed4ae450dae9134d170743f3f75)

src/main/java/com/izouma/nineth/dto/UserDTO.java

@@ -1,9 +1,15 @@
 package com.izouma.nineth.dto;
 
+import com.fasterxml.jackson.annotation.JsonIgnore;
 import com.izouma.nineth.domain.User;
+import com.izouma.nineth.enums.AuthStatus;
+import com.izouma.nineth.security.Authority;
 import io.swagger.annotations.ApiModelProperty;
 import lombok.Data;
 
+import java.time.LocalDateTime;
+import java.util.Set;
+
 @Data
 public class UserDTO extends User {
 
@@ -20,4 +26,39 @@ public class UserDTO extends User {
     @ApiModelProperty("是否关注")
     private boolean follow;
 
+    @Override
+    public String getPhone() {
+        return null;
+    }
+
+    public String getPassword() {
+        return null;
+    }
+
+    @Override
+    public AuthStatus getAuthStatus() {
+        return null;
+    }
+
+    @Override
+    public Set<Authority> getAuthorities() {
+        return null;
+    }
+
+    @Override
+    public LocalDateTime getCreatedAt() {
+        return null;
+    }
+
+    @Override
+    @JsonIgnore
+    public int getVipPoint() {
+        return super.getVipPoint();
+    }
+
+    @Override
+    @JsonIgnore
+    public int getVipPurchase() {
+        return super.getVipPurchase();
+    }
 }

src/main/java/com/izouma/nineth/web/UserController.java

@@ -99,6 +99,12 @@ public class UserController extends BaseController {
         return userService.toDTO(userRepo.findById(id).orElseThrow(new BusinessException("无记录")), true);
     }
 
+    @PreAuthorize("hasRole('ADMIN')")
+    @GetMapping("/adminGet/{id}")
+    public User adminGet(@PathVariable Long id) {
+        return userRepo.findById(id).orElseThrow(new BusinessException("无记录"));
+    }
+
     @PreAuthorize("hasRole('ADMIN')")
     @PostMapping("/del/{id}")
     public void del(@PathVariable Long id) {

src/main/vue/src/views/UserEdit.vue

@@ -86,7 +86,7 @@ export default {
     created() {
         if (this.$route.query.id) {
             this.$http
-                .get(`/user/get/${this.$route.query.id}`)
+                .get(`/user/adminGet/${this.$route.query.id}`)
                 .then(res => {
                     this.formData = res;
                     this.vip = res.vipPurchase > 0;