验证ToKen生成机制

    //生成ToKen
    @Override
    public String getTokenStr(User user) throws BaseException {
        String salt="xxooxx";
        String secret = user.getUserPhone()+salt+user.getId();
        String currentTime = DateFormatUtils.format(new Date(), "yy-MM");
        
        return DigestUtils.md2Hex(secret+currentTime);
    }

    //ToKen  验证
    @Override
    public boolean checkToken(Long userId, String token) throws BaseException {
        User user = userService.findOne(userId)
        if(StringUtils.equals(token, getTokenStr(user))){
            return true;    
        }
        throw new BaseException(500,"ToKen验证失败！");
    }