プルNG

# Conflicts:
#	book-rent/src/main/resources/templates/employeeUpdateConfirm.html

book-rent/pom.xml

@@ -30,67 +30,58 @@
 	<properties>
 		<java.version>21</java.version>
 	</properties>
-	<dependencies>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-data-jpa</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-thymeleaf</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-validation</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-webmvc</artifactId>
-		</dependency>
-
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-devtools</artifactId>
-			<scope>runtime</scope>
-			<optional>true</optional>
-		</dependency>
-		<dependency>
-			<groupId>com.mysql</groupId>
-			<artifactId>mysql-connector-j</artifactId>
-			<scope>runtime</scope>
-		</dependency>
-		<dependency>
-			<groupId>org.projectlombok</groupId>
-			<artifactId>lombok</artifactId>
-			<optional>true</optional>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-tomcat</artifactId>
-			<scope>provided</scope>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-data-jpa-test</artifactId>
-			<scope>test</scope>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-thymeleaf-test</artifactId>
-			<scope>test</scope>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-validation-test</artifactId>
-			<scope>test</scope>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework.boot</groupId>
-			<artifactId>spring-boot-starter-webmvc-test</artifactId>
-			<scope>test</scope>
-		</dependency>
-	</dependencies>
-
+<dependencies>
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-data-jpa</artifactId>
+</dependency>
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-thymeleaf</artifactId>
+</dependency>
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-validation</artifactId>
+</dependency>
+<!-- webmvcから通常のwebスターターに変更 -->
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-web</artifactId>
+</dependency>
+ 
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-devtools</artifactId> <!-- ここを修正 -->
+<scope>runtime</scope>
+<optional>true</optional>
+</dependency>
+ 
+<dependency>
+<groupId>com.mysql</groupId>
+<artifactId>mysql-connector-j</artifactId>
+<scope>runtime</scope>
+</dependency>
+<dependency>
+<groupId>org.projectlombok</groupId>
+<artifactId>lombok</artifactId>
+<optional>true</optional>
+</dependency>
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-tomcat</artifactId>
+<scope>provided</scope>
+</dependency>
+		
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-test</artifactId>
+<scope>test</scope>
+</dependency>
+<dependency>
+<groupId>org.springframework.boot</groupId>
+<artifactId>spring-boot-starter-security</artifactId>
+</dependency>
+</dependencies>
 	<build>
 		<plugins>
 			<plugin>
@@ -135,5 +126,5 @@
 			</plugin>
 		</plugins>
 	</build>
-
-</project>
+ 
+</project>

book-rent/src/main/java/com/example/demo/common/LoginUser.java

@@ -1,31 +1,48 @@
 package com.example.demo.common;
 
-
-
 import java.io.Serializable;
 
 /** セッションに保持するログイン情報（社員ID・社員名・社員名よみ・メールアドレス・管理者フラグ） */
 public class LoginUser implements Serializable {
-    private static final long serialVersionUID = 1L;
+	private static final long serialVersionUID = 1L;
 
-    private final Integer idEmployee;
-    private final String nmEmployee;
-    private final String knEmployee;
-    private final String mailAddress;
-    private final String flgAdmin;
+	private final Integer idEmployee;
+	private final String nmEmployee;
+	private final String knEmployee;
+	private final String mailAddress;
+	private final String flgAdmin;
 
-    public LoginUser(Integer idEmployee, String nmEmployee, String knEmployee, String mailAddress, String flgAdmin) {
-        this.idEmployee = idEmployee;
-        this.nmEmployee = nmEmployee;
-        this.knEmployee = knEmployee;
-        this.mailAddress = mailAddress;
-        this.flgAdmin = flgAdmin;
-    }
+	public LoginUser(Integer idEmployee, String nmEmployee, String knEmployee, String mailAddress, String flgAdmin) {
+		this.idEmployee = idEmployee;
+		this.nmEmployee = nmEmployee;
+		this.knEmployee = knEmployee;
+		this.mailAddress = mailAddress;
+		this.flgAdmin = flgAdmin;
+
+	}
+
+	public Integer getIdEmployee() {
+		return idEmployee;
+	}
+
+	public String getNmEmployee() {
+		return nmEmployee;
+	}
+
+	public String getKnEmployee() {
+		return knEmployee;
+	}
+
+	public String getMailAddress() {
+		return mailAddress;
+	}
+
+	public String getFlgAdmin() {
+		return flgAdmin;
+	}
+
+	public boolean isAdmin() {
+		return Const.ADMIN_YES.equals(flgAdmin);
+	}
 
-    public Integer getIdEmployee() { return idEmployee; }
-    public String getNmEmployee() { return nmEmployee; }
-    public String getKnEmployee() { return knEmployee; }
-    public String getMailAddress() { return mailAddress; }
-    public String getFlgAdmin() { return flgAdmin; }
-    public boolean isAdmin() { return Const.ADMIN_YES.equals(flgAdmin); }
 }

book-rent/src/main/java/com/example/demo/config/CompatiblePasswordEncoder.java

@@ -0,0 +1,38 @@
+package com.example.demo.config;
+ 
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+ 
+// データベースに保存されている平文パスワードと、BCryptでハッシュ化されたパスワードの両方を照合できるようにするクラス
+public class CompatiblePasswordEncoder implements PasswordEncoder {
+ 
+	// パスワードを安全にハッシュ化するためのクラスを生成
+	private final BCryptPasswordEncoder bcrypt = new BCryptPasswordEncoder();
+ 
+	// パスワードのハッシュ化
+	@Override
+	public String encode(CharSequence rawPassword) {
+		return bcrypt.encode(rawPassword);
+	}
+ 
+	@Override
+	public boolean matches(
+			CharSequence rawPassword,
+			String encodedPassword) {
+ 
+		// 保存済みパスワードが存在するか確認
+		if (encodedPassword == null) {
+			return false;
+		}
+ 
+		// 既存の平文パスワードに対応
+		if (!encodedPassword.startsWith("$2a$")
+				&& !encodedPassword.startsWith("$2b$")
+				&& !encodedPassword.startsWith("$2y$")) {
+			return rawPassword.toString().equals(encodedPassword);
+		}
+ 
+		// BCrypt形式のパスワードに対応
+		return bcrypt.matches(rawPassword, encodedPassword);
+	}
+}

book-rent/src/main/java/com/example/demo/config/CustomAuthenticationFailureHandler.java

@@ -0,0 +1,59 @@
+package com.example.demo.config;
+ 
+import java.io.IOException;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler;
+import org.springframework.stereotype.Component;
+
+import com.example.demo.service.LoginAttemptService;
+ 
+// ログイン失敗時の処理
+@Component
+public class CustomAuthenticationFailureHandler extends SimpleUrlAuthenticationFailureHandler {
+ 
+	private LoginAttemptService loginAttemptService;
+ 
+	public CustomAuthenticationFailureHandler(LoginAttemptService loginAttemptService) {
+		this.loginAttemptService = loginAttemptService;
+	}
+ 
+	@Override
+	public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response,
+			AuthenticationException exception) throws IOException, ServletException {
+ 
+		// 画面から入力されたメールアドレスを取得
+		String mailAddress = request.getParameter("mailAddress");
+ 
+		if (mailAddress != null && !mailAddress.isBlank()) {
+			String mail = mailAddress.trim();
+ 
+			if (loginAttemptService.isBlocked(mail)) {
+				getRedirectStrategy().sendRedirect(
+						request, response, "/login?error=locked");
+				return;
+			}
+ 
+			// 失敗回数を１増やす
+			loginAttemptService.loginFailed(mail);
+ 
+			// すでにロック中なら失敗回数を増やさない
+			if (loginAttemptService.isBlocked(mail)) {
+				getRedirectStrategy().sendRedirect(
+						request, response, "/login?error=locked");
+				return;
+			}
+ 
+			// あと何回失敗されるとロックされるか取得
+			int remaining = loginAttemptService.getRemainingAttempts(mail);
+ 
+			getRedirectStrategy().sendRedirect(
+					request, response, "/login?error=failed&remaining=" + remaining);
+		}
+ 
+	}
+}

book-rent/src/main/java/com/example/demo/config/CustomAuthenticationSuccessHandler.java

@@ -0,0 +1,48 @@
+package com.example.demo.config;
+ 
+import java.io.IOException;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+import org.springframework.security.core.Authentication;
+import org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler;
+import org.springframework.stereotype.Component;
+
+import com.example.demo.common.Const;
+import com.example.demo.service.LoginAttemptService;
+ 
+@Component
+public class CustomAuthenticationSuccessHandler
+		extends SimpleUrlAuthenticationSuccessHandler {
+ 
+	private final LoginAttemptService loginAttemptService;
+ 
+	public CustomAuthenticationSuccessHandler(
+			LoginAttemptService loginAttemptService) {
+		this.loginAttemptService = loginAttemptService;
+		setDefaultTargetUrl("/menu");
+		setAlwaysUseDefaultTargetUrl(true);
+	}
+ 
+	@Override
+	public void onAuthenticationSuccess(
+			HttpServletRequest request,
+			HttpServletResponse response,
+			Authentication authentication)
+			throws IOException, ServletException {
+ 
+		if (authentication.getPrincipal() instanceof CustomUserDetails userDetails) {
+			String mail = userDetails.getUsername();
+ 
+			loginAttemptService.loginSucceeded(mail);
+ 
+			request.getSession(true).setAttribute(
+					Const.SESSION_LOGIN_USER,
+					userDetails.getLoginUser());
+		}
+ 
+		super.onAuthenticationSuccess(request, response, authentication);
+	}
+}

book-rent/src/main/java/com/example/demo/config/CustomUserDetails.java

@@ -0,0 +1,74 @@
+package com.example.demo.config;
+ 
+import java.util.Collection;
+import java.util.Collections;
+
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import com.example.demo.common.LoginUser;
+import com.example.demo.service.LoginAttemptService;
+ 
+// システムの社員情報をSpring Securityが扱えるクラスに変更
+public class CustomUserDetails implements UserDetails {
+ 
+	private final LoginUser loginUser;
+	private final String password; // DBから取得した暗号化パスワードを保持
+	private final LoginAttemptService loginAttemptService;
+ 
+	public CustomUserDetails(LoginUser loginUser, String password, LoginAttemptService loginAttemptService) {
+		this.loginUser = loginUser;
+		this.password = password;
+		this.loginAttemptService = loginAttemptService;
+	}
+ 
+	@Override
+	public String getPassword() {
+		return this.password;
+	}
+ 
+	@Override
+	public String getUsername() {
+		return loginUser.getMailAddress();
+	}
+ 
+	// アカウントのロック状態の確認
+	@Override
+	public boolean isAccountNonLocked() {
+		return !loginAttemptService.isBlocked(getUsername());
+	}
+ 
+	
+	// 管理者判定メソッド
+	@Override
+	public Collection<? extends GrantedAuthority> getAuthorities() {
+		String role = loginUser.isAdmin()
+				? "ROLE_ADMIN"
+				: "ROLE_USER";
+ 
+		return Collections.singletonList( // 要素が一つだけの変更できないリストを作るメソッド
+				new SimpleGrantedAuthority(role));
+	}
+ 
+	@Override
+	public boolean isAccountNonExpired() {
+		return true;
+	}
+ 
+	@Override
+	public boolean isCredentialsNonExpired() {
+		return true;
+	}
+ 
+	@Override
+	public boolean isEnabled() {
+		return true;
+	}
+ 
+	// ログイン成功後にコントローラー等でLoginUserを取り出すためのゲッター
+	public LoginUser getLoginUser() {
+		return loginUser;
+	}
+ 
+}

book-rent/src/main/java/com/example/demo/config/LoginCheckInterceptor.java

@@ -34,4 +34,5 @@ public class LoginCheckInterceptor implements HandlerInterceptor {
         }
         return true;
     }
+    
 }

book-rent/src/main/java/com/example/demo/config/SecurityConfig.java

@@ -0,0 +1,58 @@
+package com.example.demo.config;
+ 
+import org.springframework.boot.security.autoconfigure.web.servlet.PathRequest;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+ 
+@Configuration
+@EnableWebSecurity
+public class SecurityConfig {
+ 
+	private final CustomAuthenticationFailureHandler failureHandler;
+	private final CustomAuthenticationSuccessHandler successHandler;
+ 
+	public SecurityConfig(
+			CustomAuthenticationFailureHandler failureHandler,
+			CustomAuthenticationSuccessHandler successHandler) {
+		this.failureHandler = failureHandler;
+		this.successHandler = successHandler;
+	}
+ 
+	@Bean
+	public SecurityFilterChain securityFilterChain(
+			HttpSecurity http) throws Exception {
+ 
+		http
+				.authorizeHttpRequests(authorize -> authorize
+						.requestMatchers(
+								PathRequest.toStaticResources().atCommonLocations())
+						.permitAll()
+						.requestMatchers(
+								"/", "/index", "/error", "/login")
+						.permitAll()
+						.anyRequest().authenticated())
+				.formLogin(login -> login
+						.loginPage("/login")
+						.loginProcessingUrl("/login")
+						.usernameParameter("mailAddress")
+						.passwordParameter("password")
+						.failureHandler(failureHandler)
+						.successHandler(successHandler)
+						.permitAll())
+				.logout(logout -> logout
+						.logoutUrl("/logout")
+						.logoutSuccessUrl("/login?logout")
+						.permitAll());
+ 
+		return http.build();
+	}
+ 
+	@Bean
+	public PasswordEncoder passwordEncoder() {
+		return new CompatiblePasswordEncoder();
+	}
+}

book-rent/src/main/java/com/example/demo/controller/AdminLoanController.java

@@ -1,5 +1,4 @@
 package com.example.demo.controller;
-
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -37,7 +36,7 @@ public class AdminLoanController {
     public String approvalConfirm(@PathVariable Integer id, Model model, RedirectAttributes ra) {
         try {
             model.addAttribute("r", loanService.getView(id, Const.STATUS_WAITING));
-            return "approvalConfirm";
+            return "approvalConfilm"; 
         } catch (BusinessException e) {
             ra.addFlashAttribute("errorMessage", e.getMessage());
             return "redirect:/admin/applications";
@@ -50,7 +49,7 @@ public class AdminLoanController {
         try {
             loanService.approve(id, admin);
             ra.addFlashAttribute("message", "書籍貸出申請を承認しました。");
-            return "redirect:/admin/approval/complete";
+            return "approvalComplete";
         } catch (BusinessException e) {
             ra.addFlashAttribute("errorMessage", e.getMessage());
             return "redirect:/admin/applications";
@@ -63,7 +62,7 @@ public class AdminLoanController {
         try {
             loanService.reject(id, admin);
             ra.addFlashAttribute("message", "書籍貸出申請を却下しました。");
-            return "redirect:/admin/approval/complete";
+            return "approvalRejected";
         } catch (BusinessException e) {
             ra.addFlashAttribute("errorMessage", e.getMessage());
             return "redirect:/admin/applications";
@@ -102,7 +101,7 @@ public class AdminLoanController {
         try {
             loanService.returnBook(id, admin);
             ra.addFlashAttribute("message", "書籍の返却が完了しました。");
-            return "redirect:/admin/return/complete";
+            return "returnComplete";
         } catch (BusinessException e) {
             ra.addFlashAttribute("errorMessage", e.getMessage());
             return "redirect:/admin/lendings";
@@ -116,3 +115,4 @@ public class AdminLoanController {
         return "complete";
     }
 }
+

book-rent/src/main/java/com/example/demo/controller/BookController.java

@@ -1,5 +1,10 @@
 package com.example.demo.controller;
 
+
+
+
+	
+
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -30,4 +35,5 @@ public class BookController {
         model.addAttribute("note", note);
         return "bookList";
     }
+
 }

book-rent/src/main/java/com/example/demo/controller/EmployeeController.java

@@ -1,5 +1,178 @@
 package com.example.demo.controller;
 
-public class EmployeeController {
+import java.util.List;
+import java.util.Optional;
 
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.SessionAttribute;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+import com.example.demo.common.BusinessException;
+import com.example.demo.common.Const;
+import com.example.demo.common.LoginUser;
+import com.example.demo.entity.Employee;
+import com.example.demo.form.EmployeeForm;
+import com.example.demo.service.EmployeeService;
+
+/**
+ * EMP-01 社員登録（管理者のみ：/admin/** で拒否）
+ * EMP-02 社員編集（管理者：メールアドレスで検索して全項目 ／ 一般：自分のパスワードのみ）
+ */
+@Controller
+public class EmployeeController {
+	private static final String NEW = "/admin/employees/new";
+	private static final String EDIT = "/employees/edit";
+
+	private final EmployeeService employeeService;
+
+	public EmployeeController(EmployeeService employeeService) {
+		this.employeeService = employeeService;
+	}
+
+	// ===== EMP-01 社員登録 =====
+	@GetMapping(NEW)
+	public String registInput(Model model) {
+		return registView(new EmployeeForm(), List.of(), model);
+	}
+
+	@PostMapping(NEW + "/input")
+	public String registBack(@ModelAttribute("form") EmployeeForm form, Model model) {
+		return registView(form, List.of(), model);
+	}
+
+	@PostMapping(NEW + "/confirm")
+	public String registConfirm(@ModelAttribute("form") EmployeeForm form, Model model) {
+		List<String> errors = employeeService.validateRegist(form);
+		if (!errors.isEmpty())
+			return registView(form, errors, model);
+		return "employeeRegistConfirm";
+	}
+
+	@PostMapping(NEW + "/execute")
+	public String registExecute(@ModelAttribute("form") EmployeeForm form,
+			@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser admin,
+			Model model, RedirectAttributes ra) {
+		try {
+			employeeService.register(form, admin);
+		} catch (BusinessException e) {
+			return registView(form, List.of(e.getMessage()), model);
+		}
+		ra.addFlashAttribute("message", "社員登録が完了しました。");
+		return "redirect:" + NEW + "/complete";
+	}
+
+	@GetMapping(NEW + "/complete")
+	public String registComplete(Model model) {
+		return complete(model);
+	}
+
+	private String registView(EmployeeForm form, List<String> errors, Model model) {
+		model.addAttribute("form", form);
+		model.addAttribute("errors", errors);
+		return "employeeRegistInput";
+	}
+
+	// ===== EMP-02 社員編集 =====
+
+	/** メニュー「社員編集」：管理者は検索画面へ、一般ユーザーは検索せず自分の編集画面へ */
+	@GetMapping("/employees/search")
+	public String search(@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser user) {
+		return user.isAdmin() ? "employeeSearch" : "redirect:" + EDIT;
+	}
+
+	@PostMapping("/employees/search")
+	public String doSearch(@RequestParam(defaultValue = "") String mailAddress,
+			@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser user, Model model) {
+		if (!user.isAdmin())
+			return "redirect:/menu";
+		Optional<Employee> e = employeeService.findByMail(mailAddress);
+		if (e.isEmpty()) {
+			model.addAttribute("mailAddress", mailAddress);
+			model.addAttribute("errorMessage", "該当する社員が見つかりません。");
+			return "employeeSearch";
+		}
+		return "redirect:" + EDIT + "?idEmployee=" + e.get().getIdEmployee();
+	}
+
+	@GetMapping(EDIT)
+	public String editInput(@RequestParam(required = false) Integer idEmployee,
+			@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser user,
+			Model model, RedirectAttributes ra) {
+		// 一般ユーザーは常に自分自身（リクエストの社員IDは使わない）
+		Integer target = user.isAdmin() ? idEmployee : user.getIdEmployee();
+		if (target == null)
+			return "redirect:/employees/search";
+		try {
+			return editView(employeeService.toForm(employeeService.find(target)), List.of(), user, model);
+		} catch (BusinessException e) {
+			ra.addFlashAttribute("errorMessage", e.getMessage());
+			return "redirect:/menu";
+		}
+	}
+
+	@PostMapping(EDIT + "/input")
+	public String editBack(@ModelAttribute("form") EmployeeForm form,
+			@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser user, Model model) {
+		fixTarget(form, user);
+		return editView(form, List.of(), user, model);
+	}
+
+	@PostMapping(EDIT + "/confirm")
+	public String editConfirm(@ModelAttribute("form") EmployeeForm form,
+			@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser user, Model model) {
+		fixTarget(form, user);
+		List<String> errors = user.isAdmin()
+				? employeeService.validateUpdateByAdmin(form)
+				: employeeService.validateUpdateBySelf(form);
+		if (!errors.isEmpty())
+			return editView(form, errors, user, model);
+		model.addAttribute("admin", user.isAdmin());
+		return "employeeUpdateConfirm";
+	}
+
+	@PostMapping(EDIT + "/execute")
+	public String editExecute(@ModelAttribute("form") EmployeeForm form,
+			@SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser user,
+			Model model, RedirectAttributes ra) {
+		fixTarget(form, user);
+		try {
+			if (user.isAdmin())
+				employeeService.updateByAdmin(form, user);
+			else
+				employeeService.updateBySelf(form, user);
+		} catch (BusinessException e) {
+			return editView(form, List.of(e.getMessage()), user, model);
+		}
+		ra.addFlashAttribute("message", "社員編集が完了しました。");
+		return "redirect:" + EDIT + "/complete";
+	}
+
+	@GetMapping(EDIT + "/complete")
+	public String editComplete(Model model) {
+		return complete(model);
+	}
+
+	/** 一般ユーザーの対象は常にセッションの社員ID（URL/フォーム値の書き換えを無視） */
+	private static void fixTarget(EmployeeForm form, LoginUser user) {
+		if (!user.isAdmin())
+			form.setIdEmployee(user.getIdEmployee());
+	}
+
+	private String editView(EmployeeForm form, List<String> errors, LoginUser user, Model model) {
+		model.addAttribute("form", form);
+		model.addAttribute("errors", errors);
+		model.addAttribute("admin", user.isAdmin());
+		return "employeeUpdateInput";
+	}
+
+	private String complete(Model model) {
+		model.addAttribute("backUrl", "/menu");
+		model.addAttribute("backLabel", "メニューに戻る");
+		return "complete";
+	}
 }

book-rent/src/main/java/com/example/demo/controller/LoginController.java

@@ -1,73 +1,68 @@
 package com.example.demo.controller;
-
-
-import java.util.Optional;
-
-import jakarta.servlet.http.HttpServletRequest;
+ 
 import jakarta.servlet.http.HttpSession;
 
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
 import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestParam;
 
 import com.example.demo.common.Const;
-import com.example.demo.common.LoginUser;
-import com.example.demo.service.AuthService;
-
-/** AUTH-01：ログイン／ログアウト（login.html） */
+ 
 @Controller
 public class LoginController {
-    private final AuthService authService;
-
-    public LoginController(AuthService authService) {
-        this.authService = authService;
-    }
-
+ 
     @GetMapping("/")
     public String root() {
-        return "redirect:/menu";
+        return "redirect:/login";
     }
-
+ 
     @GetMapping("/login")
-    public String loginForm(HttpSession session) {
+    public String loginForm(
+            HttpSession session,
+            @RequestParam(name = "error", required = false) String error,
+            @RequestParam(name = "logout", required = false) String logout,
+            @RequestParam(name = "remaining", required = false) Integer remaining,
+            Model model) {
+ 
+        // すでにログインしている場合はメニュー画面へ
         if (session.getAttribute(Const.SESSION_LOGIN_USER) != null) {
             return "redirect:/menu";
         }
+ 
+        // ログイン失敗時のメッセージ
+        if ("locked".equals(error)) {
+            model.addAttribute(
+                "errorMessage",
+                "ログインに5回連続で失敗したため、10分間アカウントをロックしました。"
+            );
+ 
+        } else if ("failed".equals(error) && remaining != null) {
+ 
+            if (remaining == 1) {
+                model.addAttribute(
+                    "errorMessage",
+                    "メールアドレスまたはパスワードが間違っています。あと1回間違えると、10分間ログインできなくなります。"
+                );
+            } else {
+                model.addAttribute(
+                    "errorMessage",
+                    "メールアドレスまたはパスワードが間違っています。あと"
+                    + remaining
+                    + "回間違えると、10分間ログインできなくなります。"
+                );
+            }
+ 
+        } else if (error != null) {
+            model.addAttribute(
+                "errorMessage",
+                "メールアドレスまたはパスワードが間違っています。"
+            );
+ 
+        } else if (logout != null) {
+            model.addAttribute("message", "ログアウトしました。");
+        }
+ 
         return "login";
     }
-
-    @PostMapping("/login")
-    public String login(@RequestParam(defaultValue = "") String mailAddress,
-                        @RequestParam(defaultValue = "") String password,
-                        HttpServletRequest request, Model model) {
-        String mail = mailAddress.trim();
-        model.addAttribute("mailAddress", mail);   // 入力値を保持（パスワードは保持しない）
-
-        if (mail.isEmpty() || password.isEmpty()) {
-            model.addAttribute("errorMessage", "メールアドレスとパスワードを入力してください。");
-            return "login";
-        }
-        Optional<LoginUser> user = authService.authenticate(mail, password);
-        if (user.isEmpty()) {
-            // どちらが誤りかは分からない文言にする
-            model.addAttribute("errorMessage", "メールアドレスまたはパスワードが正しくありません。");
-            return "login";
-        }
-        // セッション固定化攻撃対策：古いセッションを破棄して新規発行
-        HttpSession old = request.getSession(false);
-        if (old != null) {
-            old.invalidate();
-        }
-        request.getSession(true).setAttribute(Const.SESSION_LOGIN_USER, user.get());
-        return "redirect:/menu";
-    }
-
-    @PostMapping("/logout")
-    public String logout(HttpSession session) {
-        session.invalidate();
-        return "redirect:/login";
-    }
-}
-
+}

book-rent/src/main/java/com/example/demo/controller/MenuController.java

@@ -2,7 +2,7 @@ package com.example.demo.controller;
 
 import org.springframework.stereotype.Controller;
 import org.springframework.web.bind.annotation.GetMapping;
-
+ 
 /** メニュー画面（menu.html）。表示内容は管理者フラグで切り替える。 */
 @Controller
 public class MenuController {
@@ -10,4 +10,4 @@ public class MenuController {
     public String menu() {
         return "menu";
     }
-}
+}

book-rent/src/main/java/com/example/demo/entity/Employee.java

@@ -105,4 +105,5 @@ public class Employee {
 	public void setDateUpdate(LocalDateTime v) {
 		this.dateUpdate = v;
 	}
+	
 }

book-rent/src/main/java/com/example/demo/form/EmployeeForm.java

@@ -1,33 +1,82 @@
 package com.example.demo.form;
+
 /** 社員登録・編集フォーム */
 public class EmployeeForm {
-    private Integer idEmployee;
-    private String nmEmployee = "";
-    private String knEmployee = "";
-    private String mailAddress = "";
-    private String password = "";
-    private String flgAdmin = "0";
-    private String flgRetirement = "0";
+	private Integer idEmployee;
+	private String nmEmployee = "";
+	private String knEmployee = "";
+	private String mailAddress = "";
+	private String password = "";
+	private String flgAdmin = "0";
+	private String flgRetirement = "0";
 
-    public void trim() {
-        nmEmployee = t(nmEmployee); knEmployee = t(knEmployee); mailAddress = t(mailAddress);
-        flgAdmin = t(flgAdmin); flgRetirement = t(flgRetirement);
-        if (password == null) password = "";
-    }
-    private static String t(String s) { return s == null ? "" : s.trim(); }
+	public void trim() {
+		nmEmployee = t(nmEmployee);
+		knEmployee = t(knEmployee);
+		mailAddress = t(mailAddress);
+		flgAdmin = t(flgAdmin);
+		flgRetirement = t(flgRetirement);
+		if (password == null)
+			password = "";
+	}
 
-    public Integer getIdEmployee() { return idEmployee; }
-    public void setIdEmployee(Integer v) { this.idEmployee = v; }
-    public String getNmEmployee() { return nmEmployee; }
-    public void setNmEmployee(String v) { this.nmEmployee = v; }
-    public String getKnEmployee() { return knEmployee; }
-    public void setKnEmployee(String v) { this.knEmployee = v; }
-    public String getMailAddress() { return mailAddress; }
-    public void setMailAddress(String v) { this.mailAddress = v; }
-    public String getPassword() { return password; }
-    public void setPassword(String v) { this.password = v; }
-    public String getFlgAdmin() { return flgAdmin; }
-    public void setFlgAdmin(String v) { this.flgAdmin = v; }
-    public String getFlgRetirement() { return flgRetirement; }
-    public void setFlgRetirement(String v) { this.flgRetirement = v; }
+	private static String t(String s) {
+		return s == null ? "" : s.trim();
+	}
+
+	public Integer getIdEmployee() {
+		return idEmployee;
+	}
+
+	public void setIdEmployee(Integer v) {
+		this.idEmployee = v;
+	}
+
+	public String getNmEmployee() {
+		return nmEmployee;
+	}
+
+	public void setNmEmployee(String v) {
+		this.nmEmployee = v;
+	}
+
+	public String getKnEmployee() {
+		return knEmployee;
+	}
+
+	public void setKnEmployee(String v) {
+		this.knEmployee = v;
+	}
+
+	public String getMailAddress() {
+		return mailAddress;
+	}
+
+	public void setMailAddress(String v) {
+		this.mailAddress = v;
+	}
+
+	public String getPassword() {
+		return password;
+	}
+
+	public void setPassword(String v) {
+		this.password = v;
+	}
+
+	public String getFlgAdmin() {
+		return flgAdmin;
+	}
+
+	public void setFlgAdmin(String v) {
+		this.flgAdmin = v;
+	}
+
+	public String getFlgRetirement() {
+		return flgRetirement;
+	}
+
+	public void setFlgRetirement(String v) {
+		this.flgRetirement = v;
+	}
 }

book-rent/src/main/java/com/example/demo/repository/EmployeeRepository.java

@@ -10,4 +10,5 @@ public interface EmployeeRepository extends JpaRepository<Employee, Integer> {
 	Optional<Employee> findByMailAddressAndFlgRetirement(String mailAddress, String flgRetirement);
 
 	Optional<Employee> findByMailAddress(String mailAddress);
+	
 }

book-rent/src/main/java/com/example/demo/service/BookAdminService.java

@@ -1,8 +1,5 @@
 package com.example.demo.service;
 
-
-
-
 import java.time.LocalDateTime;
 import java.util.ArrayList;
 import java.util.List;
@@ -18,6 +15,7 @@ import com.example.demo.form.BookForm;
 import com.example.demo.repository.BookCollectionRepository;
 
 /** BOOK-02：書籍登録、BOOK-03：書籍編集 */
+
 @Service
 public class BookAdminService {
     private final BookCollectionRepository bookRepository;
@@ -83,6 +81,7 @@ public class BookAdminService {
         if (!errors.isEmpty()) throw new BusinessException(String.join(" ", errors));
     }
 
+
     private static void apply(BookCollection b, BookForm f) {
         b.setIsbn(f.getIsbn());
         b.setNmBook(f.getNmBook());
@@ -90,4 +89,5 @@ public class BookAdminService {
         b.setPublisher(f.getPublisher().isEmpty() ? null : f.getPublisher());
         b.setNote(f.getNote().isEmpty() ? null : f.getNote());
     }
+
 }

book-rent/src/main/java/com/example/demo/service/CustomUserDetailsService.java

@@ -0,0 +1,47 @@
+package com.example.demo.service;
+ 
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+import com.example.demo.common.Const;
+import com.example.demo.common.LoginUser;
+import com.example.demo.config.CustomUserDetails;
+import com.example.demo.entity.Employee;
+import com.example.demo.repository.EmployeeRepository;
+ 
+//Spring Securityから依頼を受けて、ログインする社員情報をDBから取得
+@Service
+public class CustomUserDetailsService implements UserDetailsService {
+ 
+	private final EmployeeRepository employeeRepository;
+	private final LoginAttemptService loginAttemptService;
+ 
+	public CustomUserDetailsService(
+			EmployeeRepository employeeRepository,
+			LoginAttemptService loginAttemptService) {
+		this.employeeRepository = employeeRepository;
+		this.loginAttemptService = loginAttemptService;
+	}
+ 
+	@Override
+	public UserDetails loadUserByUsername(String maillAddress) throws UsernameNotFoundException {
+ 
+		Employee employee = employeeRepository.findByMailAddressAndFlgRetirement(maillAddress.trim(), Const.RETIRE_NO)
+				.orElseThrow(() -> new UsernameNotFoundException("認証に失敗しました。"));
+				// ↑社員情報が見つからない場合は例外処理
+ 
+		// 取得したEmployeeをLoginUserに変換する
+		LoginUser loginUser = new LoginUser(
+				employee.getIdEmployee(),
+				employee.getNmEmployee(),
+				employee.getKnEmployee(),
+				employee.getMailAddress(),
+				employee.getFlgAdmin());
+ 
+		// Spring Security用の形式に変換
+		return new CustomUserDetails(loginUser, employee.getPassword(), loginAttemptService);
+	}
+ 
+}

book-rent/src/main/java/com/example/demo/service/EmployeeService.java

@@ -7,6 +7,7 @@ import java.util.Optional;
 import java.util.regex.Pattern;
 
 import org.springframework.dao.DataIntegrityViolationException;
+import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 
@@ -17,148 +18,178 @@ import com.example.demo.entity.Employee;
 import com.example.demo.form.EmployeeForm;
 import com.example.demo.repository.EmployeeRepository;
 
+
+
+
 /** EMP-01：社員登録、EMP-02：社員編集 */
 @Service
 public class EmployeeService {
-    private static final Pattern MAIL = Pattern.compile("^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$");
-    private static final String MSG_DUP = "このメールアドレスは既に登録されています。";
+	private static final Pattern MAIL = Pattern.compile("^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$");
+	private static final String MSG_DUP = "このメールアドレスは既に登録されています。";
 
-    private final EmployeeRepository employeeRepository;
+	// SecurityConfigに適用させるため
+	private final EmployeeRepository employeeRepository;
+	private final PasswordEncoder passwordEncoder;
 
-    public EmployeeService(EmployeeRepository employeeRepository) {
-        this.employeeRepository = employeeRepository;
-    }
+	public EmployeeService(
+			EmployeeRepository employeeRepository,
+			PasswordEncoder passwordEncoder) {
+		this.employeeRepository = employeeRepository;
+		this.passwordEncoder = passwordEncoder;
 
-    // ---------- 検索 ----------
+	}
 
-    @Transactional(readOnly = true)
-    public Optional<Employee> findByMail(String mail) {
-        return employeeRepository.findByMailAddress(mail == null ? "" : mail.trim());
-    }
+	// ---------- 検索 ----------
 
-    @Transactional(readOnly = true)
-    public Employee find(Integer id) {
-        return employeeRepository.findById(id)
-                .orElseThrow(() -> new BusinessException("対象の社員が見つかりません。"));
-    }
+	@Transactional(readOnly = true)
+	public Optional<Employee> findByMail(String mail) {
+		return employeeRepository.findByMailAddress(mail == null ? "" : mail.trim());
+	}
 
-    /** 編集画面の初期値（パスワードは空：管理者は変更時のみ入力） */
-    public EmployeeForm toForm(Employee e) {
-        EmployeeForm f = new EmployeeForm();
-        f.setIdEmployee(e.getIdEmployee());
-        f.setNmEmployee(e.getNmEmployee());
-        f.setKnEmployee(e.getKnEmployee());
-        f.setMailAddress(e.getMailAddress());
-        f.setFlgAdmin(e.getFlgAdmin());
-        f.setFlgRetirement(e.getFlgRetirement());
-        return f;
-    }
+	@Transactional(readOnly = true)
+	public Employee find(Integer id) {
+		return employeeRepository.findById(id)
+				.orElseThrow(() -> new BusinessException("対象の社員が見つかりません。"));
+	}
 
-    // ---------- 入力チェック ----------
+	/** 編集画面の初期値（パスワードは空：管理者は変更時のみ入力） */
+	public EmployeeForm toForm(Employee e) {
+		EmployeeForm f = new EmployeeForm();
+		f.setIdEmployee(e.getIdEmployee());
+		f.setNmEmployee(e.getNmEmployee());
+		f.setKnEmployee(e.getKnEmployee());
+		f.setMailAddress(e.getMailAddress());
+		f.setFlgAdmin(e.getFlgAdmin());
+		f.setFlgRetirement(e.getFlgRetirement());
+		return f;
+	}
 
-    /** 社員登録：社員名・よみ・メール・管理者フラグ。パスワードは初期値で登録する。 */
-    public List<String> validateRegist(EmployeeForm f) {
-        f.trim();
-        List<String> e = new ArrayList<>();
-        checkBasic(f, e);
-        checkMail(f, null, e);
-        checkFlag(f.getFlgAdmin(), "管理者フラグ", e);
-        return e;
-    }
+	// ---------- 入力チェック ----------
 
-    /** 管理者による編集：全項目。パスワードは空なら変更しない。 */
-    public List<String> validateUpdateByAdmin(EmployeeForm f) {
-        f.trim();
-        List<String> e = new ArrayList<>();
-        checkBasic(f, e);
-        checkMail(f, f.getIdEmployee(), e);
-        checkFlag(f.getFlgAdmin(), "管理者フラグ", e);
-        checkFlag(f.getFlgRetirement(), "退職フラグ", e);
-        if (f.getPassword().length() > 256) e.add("パスワードは256文字以内で入力してください。");
-        return e;
-    }
+	/** 社員登録：社員名・よみ・メール・管理者フラグ。パスワードは初期値で登録する。 */
+	public List<String> validateRegist(EmployeeForm f) {
+		f.trim();
+		List<String> e = new ArrayList<>();
+		checkBasic(f, e);
+		checkMail(f, null, e);
+		checkFlag(f.getFlgAdmin(), "管理者フラグ", e);
+		return e;
+	}
 
-    /** 一般ユーザーによる編集：パスワードのみ（必須）。 */
-    public List<String> validateUpdateBySelf(EmployeeForm f) {
-        f.trim();
-        List<String> e = new ArrayList<>();
-        if (f.getPassword().isEmpty()) e.add("パスワードを入力してください。");
-        else if (f.getPassword().length() > 256) e.add("パスワードは256文字以内で入力してください。");
-        return e;
-    }
+	/** 管理者による編集：全項目。パスワードは空なら変更しない。 */
+	public List<String> validateUpdateByAdmin(EmployeeForm f) {
+		f.trim();
+		List<String> e = new ArrayList<>();
+		checkBasic(f, e);
+		checkMail(f, f.getIdEmployee(), e);
+		checkFlag(f.getFlgAdmin(), "管理者フラグ", e);
+		checkFlag(f.getFlgRetirement(), "退職フラグ", e);
+		if (f.getPassword().length() > 256)
+			e.add("パスワードは256文字以内で入力してください。");
+		return e;
+	}
 
-    private void checkBasic(EmployeeForm f, List<String> e) {
-        if (f.getNmEmployee().isEmpty()) e.add("社員名を入力してください。");
-        else if (f.getNmEmployee().length() > 50) e.add("社員名は50文字以内で入力してください。");
-        // ※社員名よみの文字種（ひらがなのみ等）は設計で確定する。現状は文字数のみチェック
-        if (f.getKnEmployee().isEmpty()) e.add("社員名よみを入力してください。");
-        else if (f.getKnEmployee().length() > 100) e.add("社員名よみは100文字以内で入力してください。");
-    }
+	/** 一般ユーザーによる編集：パスワードのみ（必須）。 */
+	public List<String> validateUpdateBySelf(EmployeeForm f) {
+		f.trim();
+		List<String> e = new ArrayList<>();
+		if (f.getPassword().isEmpty())
+			e.add("パスワードを入力してください。");
+		else if (f.getPassword().length() > 256)
+			e.add("パスワードは256文字以内で入力してください。");
+		return e;
+	}
 
-    private void checkMail(EmployeeForm f, Integer selfId, List<String> e) {
-        String m = f.getMailAddress();
-        if (m.isEmpty()) { e.add("メールアドレスを入力してください。"); return; }
-        if (m.length() > 256) { e.add("メールアドレスは256文字以内で入力してください。"); return; }
-        if (!MAIL.matcher(m).matches()) { e.add("メールアドレスの形式が正しくありません。"); return; }
-        Optional<Employee> dup = employeeRepository.findByMailAddress(m);
-        if (dup.isPresent() && !dup.get().getIdEmployee().equals(selfId)) e.add(MSG_DUP);
-    }
+	private void checkBasic(EmployeeForm f, List<String> e) {
+		if (f.getNmEmployee().isEmpty())
+			e.add("社員名を入力してください。");
+		else if (f.getNmEmployee().length() > 50)
+			e.add("社員名は50文字以内で入力してください。");
+		// ※社員名よみの文字種（ひらがなのみ等）は設計で確定する。現状は文字数のみチェック
+		if (f.getKnEmployee().isEmpty())
+			e.add("社員名よみを入力してください。");
+		else if (f.getKnEmployee().length() > 100)
+			e.add("社員名よみは100文字以内で入力してください。");
+	}
 
-    private static void checkFlag(String v, String label, List<String> e) {
-        if (!"0".equals(v) && !"1".equals(v)) e.add(label + "が正しくありません。");
-    }
+	private void checkMail(EmployeeForm f, Integer selfId, List<String> e) {
+		String m = f.getMailAddress();
+		if (m.isEmpty()) {
+			e.add("メールアドレスを入力してください。");
+			return;
+		}
+		if (m.length() > 256) {
+			e.add("メールアドレスは256文字以内で入力してください。");
+			return;
+		}
+		if (!MAIL.matcher(m).matches()) {
+			e.add("メールアドレスの形式が正しくありません。");
+			return;
+		}
+		Optional<Employee> dup = employeeRepository.findByMailAddress(m);
+		if (dup.isPresent() && !dup.get().getIdEmployee().equals(selfId))
+			e.add(MSG_DUP);
+	}
 
-    // ---------- 登録・更新 ----------
+	private static void checkFlag(String v, String label, List<String> e) {
+		if (!"0".equals(v) && !"1".equals(v))
+			e.add(label + "が正しくありません。");
+	}
 
-    @Transactional
-    public Integer register(EmployeeForm f, LoginUser admin) {
-        raise(validateRegist(f));
-        Employee e = new Employee();
-        e.setNmEmployee(f.getNmEmployee());
-        e.setKnEmployee(f.getKnEmployee());
-        e.setMailAddress(f.getMailAddress());
-        e.setPassword(Const.DEFAULT_PASSWORD);
-        e.setFlgAdmin(f.getFlgAdmin());
-        e.setFlgRetirement(Const.RETIRE_NO);
-        e.setIdUpdate(admin.getIdEmployee());
-        e.setDateUpdate(LocalDateTime.now());
-        try {
-            return employeeRepository.saveAndFlush(e).getIdEmployee();
-        } catch (DataIntegrityViolationException ex) {
-            throw new BusinessException(MSG_DUP);   // 同時登録によるUNIQUE制約違反
-        }
-    }
+	// ---------- 登録・更新 ----------
 
-    @Transactional
-    public void updateByAdmin(EmployeeForm f, LoginUser admin) {
-        raise(validateUpdateByAdmin(f));
-        Employee e = find(f.getIdEmployee());
-        e.setNmEmployee(f.getNmEmployee());
-        e.setKnEmployee(f.getKnEmployee());
-        e.setMailAddress(f.getMailAddress());
-        if (!f.getPassword().isEmpty()) e.setPassword(f.getPassword());
-        e.setFlgAdmin(f.getFlgAdmin());
-        e.setFlgRetirement(f.getFlgRetirement());
-        e.setIdUpdate(admin.getIdEmployee());
-        e.setDateUpdate(LocalDateTime.now());
-        try {
-            employeeRepository.saveAndFlush(e);
-        } catch (DataIntegrityViolationException ex) {
-            throw new BusinessException(MSG_DUP);
-        }
-    }
+	@Transactional
+	public Integer register(EmployeeForm f, LoginUser admin) {
+		raise(validateRegist(f));
+		Employee e = new Employee();
+		e.setNmEmployee(f.getNmEmployee());
+		e.setKnEmployee(f.getKnEmployee());
+		e.setMailAddress(f.getMailAddress());
+		e.setPassword(passwordEncoder.encode(Const.DEFAULT_PASSWORD));
+		e.setFlgAdmin(f.getFlgAdmin());
+		e.setFlgRetirement(Const.RETIRE_NO);
+		e.setIdUpdate(admin.getIdEmployee());
+		e.setDateUpdate(LocalDateTime.now());
+		try {
+			return employeeRepository.saveAndFlush(e).getIdEmployee();
+		} catch (DataIntegrityViolationException ex) {
+			throw new BusinessException(MSG_DUP); // 同時登録によるUNIQUE制約違反
+		}
+	}
 
-    /** 一般ユーザー：自分自身（セッションの社員ID）のパスワードのみ更新する。 */
-    @Transactional
-    public void updateBySelf(EmployeeForm f, LoginUser self) {
-        raise(validateUpdateBySelf(f));
-        Employee e = find(self.getIdEmployee());
-        e.setPassword(f.getPassword());
-        e.setIdUpdate(self.getIdEmployee());
-        e.setDateUpdate(LocalDateTime.now());
-    }
+	@Transactional
+	public void updateByAdmin(EmployeeForm f, LoginUser admin) {
+		raise(validateUpdateByAdmin(f));
+		Employee e = find(f.getIdEmployee());
+		e.setNmEmployee(f.getNmEmployee());
+		e.setKnEmployee(f.getKnEmployee());
+		e.setMailAddress(f.getMailAddress());
+		if (!f.getPassword().isEmpty()) {
+			e.setPassword(passwordEncoder.encode(f.getPassword()));
+		}
+		e.setFlgAdmin(f.getFlgAdmin());
+		e.setFlgRetirement(f.getFlgRetirement());
+		e.setIdUpdate(admin.getIdEmployee());
+		e.setDateUpdate(LocalDateTime.now());
+		try {
+			employeeRepository.saveAndFlush(e);
+		} catch (DataIntegrityViolationException ex) {
+			throw new BusinessException(MSG_DUP);
+		}
+	}
 
-    private static void raise(List<String> errors) {
-        if (!errors.isEmpty()) throw new BusinessException(String.join(" ", errors));
-    }
+	/** 一般ユーザー：自分自身（セッションの社員ID）のパスワードのみ更新する。 */
+	@Transactional
+	public void updateBySelf(EmployeeForm f, LoginUser self) {
+		raise(validateUpdateBySelf(f));
+		Employee e = find(self.getIdEmployee());
+		e.setPassword(passwordEncoder.encode(f.getPassword()));
+		e.setIdUpdate(self.getIdEmployee());
+		e.setDateUpdate(LocalDateTime.now());
+	}
+
+	private static void raise(List<String> errors) {
+		if (!errors.isEmpty())
+			throw new BusinessException(String.join(" ", errors));
+	}
 }

book-rent/src/main/java/com/example/demo/service/LoginAttemptService.java

@@ -0,0 +1,101 @@
+package com.example.demo.service;
+ 
+import java.time.LocalDateTime;
+import java.util.Locale;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.concurrent.ConcurrentMap;
+
+import org.springframework.stereotype.Service;
+ 
+// 失敗回数とロック時間を管理
+@Service
+public class LoginAttemptService {
+ 
+	// 最大失敗回数
+	private static final int MAX_ATTEMPTS = 5;
+	// ロック時間
+	private static final int LOCK_MINUTES = 10;
+ 
+	// 失敗回数を保存
+	private final ConcurrentMap<String, AttemptState> attempts = new ConcurrentHashMap<>();
+ 
+	public static class AttemptState {
+		// 何回失敗したか
+		private final int failedAttempts;
+		// いつロックを解除するか
+		private final LocalDateTime lockedUntil;
+ 
+		private AttemptState(int failedAttempts, LocalDateTime lockedUntil) {
+			this.failedAttempts = failedAttempts;
+			this.lockedUntil = lockedUntil;
+		}
+	}
+ 
+	private String normalize(String mailAddress) {
+		return mailAddress.trim().toLowerCase(Locale.ROOT);
+	}
+ 
+	// ログイン失敗時
+	public void loginFailed(String mailAddress) {
+		String mail = normalize(mailAddress);
+		LocalDateTime now = LocalDateTime.now();
+		AttemptState current = attempts.get(mail);
+ 
+		// ロック中なら何もしない
+		if (current != null && current.lockedUntil != null
+&& now.isBefore(current.lockedUntil)) {
+			return;
+		}
+ 
+		// 失敗回数を数える
+		int count = (current == null || current.lockedUntil != null)
+				? 1
+				: current.failedAttempts + 1;
+ 
+		// 5回失敗したら10分間ロック
+		LocalDateTime lockTime = count >= MAX_ATTEMPTS
+				? now.plusMinutes(LOCK_MINUTES)
+				: null;
+ 
+		// 失敗回数とロック時間を保存
+		attempts.put(mail, new AttemptState(count, lockTime));
+	}
+ 
+	// 現在ロック中かどうか判定
+	public boolean isBlocked(String mailAddress) {
+		String mail = normalize(mailAddress);
+		AttemptState current = attempts.get(mail);
+ 
+		if (current == null) {
+			return false;
+		}
+		if (current.lockedUntil == null) {
+			return false;
+		}
+ 
+		// 10分経過したらロックを解除
+		if (!LocalDateTime.now().isBefore(current.lockedUntil)) {
+			attempts.remove(mail);
+			return false;
+		}
+ 
+		return true;
+ 
+	}
+ 
+	// ログイン成功時に、過去の失敗回数をきれいにリセットする
+	public void loginSucceeded(String mailAddress) {
+		attempts.remove(normalize(mailAddress));
+	}
+ 
+	public int getFailedAttempts(String mailAddress) {
+		AttemptState state = attempts.get(normalize(mailAddress));
+		return state == null ? 0 : state.failedAttempts;
+	}
+ 
+	public int getRemainingAttempts(String mailAddress) {
+		int failed = getFailedAttempts(mailAddress);
+		return Math.max(0, MAX_ATTEMPTS - failed);
+	}
+ 
+}

book-rent/src/main/resources/application.properties

@@ -10,4 +10,4 @@ spring.jpa.open-in-view=false
 spring.jpa.properties.hibernate.jdbc.time_zone=Asia/Tokyo
  
 spring.thymeleaf.cache=false
-server.servlet.session.timeout=30m
+server.servlet.session.timeout=30m

book-rent/src/main/resources/templates/approvalComplete.html

@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<title>書籍貸出申請</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+	<div th:replace="~{fragments/header :: header}"></div>
+	<main class="complete-container">
+	<h1>完了</h1>
+	<div class="info" th:text="${message} ?:'書籍貸出申請を承認しました。'"></div>
+
+	<p>
+		<a class="btn" th:href="@{/admin/applications}">承認待ち一覧に戻る</a>
+		<a class="btn sub" th:href="@{/menu}">メニューに戻る</a>
+	</p>
+	</main>
+</body>
+
+</html>

book-rent/src/main/resources/templates/approvalConfilm.html

@@ -0,0 +1,85 @@
+<!DOCTYPE html>
+<html xmlns:th="http://thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<title>書籍貸出承認確認</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+	<div th:replace="~{fragments/header :: header}"></div>
+	<main>
+		<h1>書籍貸出承認確認</h1>
+		<div class="card">
+			<table>
+				<tr>
+					<th>申請ID</th>
+					<td th:text="${r.idRequest}"></td>
+				</tr>
+				<tr>
+					<th>申請者名</th>
+					<td th:text="${r.nmApplicant}"></td>
+				</tr>
+				<tr>
+					<th>申請日</th>
+					<td th:text="${r.dateRequest}"></td>
+				</tr>
+				<tr>
+					<th>ISBN</th>
+					<td th:text="${r.isbn}"></td>
+				</tr>
+				<tr>
+					<th>書籍名</th>
+					<td th:text="${r.nmBook}" style="width: 700px;"></td>
+				</tr>
+				<tr>
+					<th>出版社</th>
+					<td th:text="${r.publisher}"></td>
+				</tr>
+				<tr>
+					<th>特記事項</th>
+					<td th:text="${r.note}"></td>
+				</tr>
+				<tr>
+					<th>貸出日</th>
+					<td th:text="${r.dateBorrow}"></td>
+				</tr>
+				<tr>
+					<th>返却予定日</th>
+					<td th:text="${r.dateScheduledReturn}"></td>
+				</tr>
+			</table>
+
+			<div class="buttonSection" style="margin-top: 20px;">
+
+				<form th:action="@{/admin/applications/{id}/approve(id=${r.idRequest})}" method="post"
+					style="display: inline;">
+					<button type="submit">承認</button>
+				</form>
+
+
+				<form th:action="@{/admin/applications/{id}/reject(id=${r.idRequest})}" method="post"
+					style="display: inline; margin-left: 10px;">
+					<button type="submit" class="sub">却下</button>
+				</form>
+				<a th:href="@{/admin/applications}" style="text-decoration: none; margin-left: 10px;">
+					<button type="button" class="sub">承認待ち一覧に戻る</button>
+				</a>
+			</div>
+
+
+
+
+			<script>
+				function logoutSubmit() {
+					if (confirm("ログアウトしますか？")) {
+						window.location.href = "/logout";
+					}
+				}
+			</script>
+		</div>
+	</main>
+</body>
+
+</html>

book-rent/src/main/resources/templates/approvalRejected.html

@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+	<head>
+		<meta charset="UTF-8">
+		<title>書籍貸出申請</title>
+		<link rel="stylesheet" th:href="@{/css/style.css}">
+	</head>
+
+	<body>
+		<div th:replace="~{fragments/header :: header}"></div>
+		<main class="complete-container">
+		<h1>却下</h1>
+			<div class="info" th:text="${message} ?: '書籍貸出申請を却下しました。'"></div>
+
+			<p>
+				<a class="btn" th:href="@{/admin/applications}">承認待ち一覧に戻る</a>
+				<a class="btn sub" th:href="@{/menu}">メニューに戻る</a>
+			</p>
+
+		</main>
+	</body>
+
+
+</html>

book-rent/src/main/resources/templates/bookRegistConfirm.html

@@ -1,38 +0,0 @@
-<!DOCTYPE html>
-<html xmlns:th="http://www.thymeleaf.org">
-
-<head>
-	<meta charset="UTF-8">
-	<title>書籍登録画面</title>
-	<link rel="stylesheet" th:href="@{/css/style.css}">
-</head>
-
-<body>
-
-	<!-- エラーメッセージ -->
-	<div class="msgBox error" th:if="${messageError != null}">
-		<span class="error" th:text="${messageError.message}"></span>
-
-		<table>
-			<th class="header">ISBN</th>
-				<td><input class="readOnly" name="isbn" readonly="readonly" th:value="*{isbn}" type="text"/></td>
-				<th class="header">書籍名</th>
-				<td>
-					<input class="ReadOnly" name="nm_Book" readonly="readonly" th:value="{nm_Book}" type="text"/>
-				</td>
-				<th class="header">書籍名よみ</th>
-				<td>
-					<input class="ReadOnly" name="kn_Book" readonly="readonly" th:value="{kn_Bool}" type="text"/>
-				</td>
-				<th class="header">出版社</th>
-				<td>
-					<input class="ReadOnly" name="publisher" readonly="readonly" th:value="{publisher}" type="text"/>
-				</td>
-				<th class="header">特記事項</th>
-				<td>
-					<input class="ReadOnly" name="note" readonly="readonly" th:value="{note}" type="text"/>
-				</td>
-
-				<a href="bookRegistComplete.html" class="btn"> 登録</a>
-		</table>
-		<a href="@{/bookRegistInput.html}">書籍情報入力に戻る</a>

book-rent/src/main/resources/templates/bookRegistInput.html

@@ -1,44 +0,0 @@
-<!DOCTYPE html>
-<html xmlns:th="http://www.thymeleaf.org">
-
-<head>
-	<meta charset="UTF-8">
-	<title>書籍登録画面</title>
-	<link rel="stylesheet" th:href="@{/css/style.css}">
-</head>
-
-<body>
-	<form action="bookRegistConfirm" method="post" th:object="${AdminBookController}">
-	<!-- エラーメッセージ -->
-	<div class="msgBox error" th:if="${messageError != null}">
-		<span class="error" th:text="${messageError.message}"></span>
-
-
-			<table>
-				<th class="header">ISBN</th>
-				<td>
-					<input placeholder="ISBN" th:field="*{isbn}" type="text" />
-				</td>
-				<th class="header">書籍名</th>
-				<td>
-					<input placeholder="書籍名" th:field="*{nm_book}" type="text" />
-				</td>
-				<th class="header">書籍名よみ</th>
-				<td>
-					<input placeholder="書籍名よみ" th:field="*{kn_book}" type="text" />
-				</td>
-				<th class="header">出版社</th>
-				<td>
-					<input placeholder="出版社" th:field="*{publisher}" type="text" />
-				</td>
-				<th class="header">特記事項</th>
-				<td>
-					<input placeholder="特記事項" th:field="*{note}" type="text" />
-				</td>
-
-				<a href="bookRegistConfirm" class="btn"> 申請確認</a>
-			</table>
-			<a href="@{/bookList.html}">書籍一覧に戻る</a>
-</body>
-
-</html>

book-rent/src/main/resources/templates/complete.html

@@ -12,7 +12,7 @@
   <div class="info" th:text="${message} ?: '処理が完了しました。'"></div>
   <p>
     <a class="btn" th:href="@{${backUrl}}" th:text="${backLabel}">戻る</a>
-    <a class="btn sub" th:href="@{/menu}">メニューに戻る</a>
+<!--    <a class="btn sub" th:href="@{/menu}">メニューに戻る</a>-->
   </p>
 </main>
 </body>

book-rent/src/main/resources/templates/employeeRegistConfirm.html

@@ -0,0 +1,101 @@
+
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>社員登録確認</title>
+    <link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+
+    <!-- 共通ヘッダー -->
+    <div th:replace="~{fragments/header :: header}"></div>
+
+    <main>
+        <h2>社員登録確認</h2>
+
+        <!-- エラーメッセージ -->
+        <div class="error"
+             th:if="${errors != null and !errors.isEmpty()}">
+            <p th:each="error : ${errors}"
+               th:text="${error}">
+            </p>
+        </div>
+
+        <!-- 登録内容確認 -->
+        <div class="card">
+
+            <p>以下の内容で登録します。内容を確認してください。</p>
+
+            <form th:action="@{/admin/employees/new/execute}"
+                  th:object="${form}"
+                  method="post">
+
+                <!-- 登録内容一覧 -->
+                <table>
+                    <tbody>
+                        <tr>
+                            <th>社員名</th>
+                            <td th:text="*{nmEmployee}"></td>
+                        </tr>
+
+                        <tr>
+                            <th>社員名よみ</th>
+                            <td th:text="*{knEmployee}"></td>
+                        </tr>
+
+                        <tr>
+                            <th>メールアドレス</th>
+                            <td th:text="*{mailAddress}"></td>
+                        </tr>
+
+                        <tr>
+                            <th>パスワード</th>
+                            <td>********</td>
+                        </tr>
+
+                        <tr>
+                            <th>権限</th>
+                            <td th:text="*{flgAdmin == '1' ? '管理者' : '一般'}"></td>
+                        </tr>
+                    </tbody>
+                </table>
+
+                <!-- 登録処理に必要な値を引き継ぐ -->
+                <input type="hidden" th:field="*{nmEmployee}">
+                <input type="hidden" th:field="*{knEmployee}">
+                <input type="hidden" th:field="*{mailAddress}">
+                <input type="hidden" th:field="*{password}">
+                <input type="hidden" th:field="*{flgAdmin}">
+
+                <!-- ボタン：左に戻る、右に登録 -->
+<!--                <div style="display: flex;-->
+<!--                            justify-content: space-between;-->
+<!--                            align-items: center;-->
+<!--                            width: 100%;-->
+<!--                            margin-top: 20px;">-->
+
+                    <!-- 社員情報入力に戻る -->
+					<p>
+                    <a class="btn sub"
+                       th:href="@{/admin/employees/new}">
+                        社員情報入力に戻る
+                    </a>
+
+                    <!-- 登録 -->
+                    <button type="submit" class="btn">
+                        登録
+                    </button>
+					</p>
+			
+
+            </form>
+
+        </div>
+    </main>
+
+</body>
+</html>

book-rent/src/main/resources/templates/employeeRegistInput.html

@@ -0,0 +1,117 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<meta name="viewport" content="width=device-width, initial-scale=1.0">
+	<title>社員登録</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+
+	<!-- 共通ヘッダー -->
+	<div th:replace="~{fragments/header :: header}"></div>
+
+	<main>
+		<h2>社員登録</h2>
+
+		<!-- 入力エラー表示 -->
+		<div class="error" th:if="${errors != null and !errors.isEmpty()}">
+			<p th:each="error : ${errors}" th:text="${error}">
+			</p>
+		</div>
+
+		<!-- 社員登録フォーム -->
+		<div class="card">
+
+			<form th:action="@{/admin/employees/new/confirm}" th:object="${form}" method="post">
+
+				<!-- 社員名 -->
+				<div>
+					<label for="nmEmployee">社員名</label>
+					<input type="text" id="nmEmployee" th:field="*{nmEmployee}">
+				</div>
+
+				<!-- 社員名よみ -->
+				<div>
+					<label for="knEmployee">社員名よみ</label>
+					<input type="text" id="knEmployee" th:field="*{knEmployee}">
+				</div>
+
+				<!-- メールアドレス -->
+				<div>
+					<label for="mailAddress">メールアドレス</label>
+					<input type="email" id="mailAddress" th:field="*{mailAddress}">
+				</div>
+
+				<!-- パスワード -->
+				<div>
+					<label for="password">パスワード</label>
+					<input type="password" id="password" th:field="*{password}">
+				</div>
+				<label for="flgAdmin">管理者フラグ</label>
+				<select id="flgAdmin" name="flgAdmin">
+					<option value="0" th:selected="${form.flgAdmin == '0'}">0：一般</option>
+					<option value="1" th:selected="${form.flgAdmin == '1'}">1：管理者</option>
+				</select>
+				<p><a class="btn sub" th:href="@{/menu}">メニューへ戻る</a>
+					<button type="submit">登録確認</button>
+				</p>
+
+				<!-- 権限：枠線なし・横並び -->
+				<!--                <div style="border: none;-->
+				<!--                            display: flex;-->
+				<!--                            flex-direction: row;-->
+				<!--                            align-items: center;-->
+				<!--                            gap: 25px;-->
+				<!--                            margin: 15px 0 25px;">-->
+
+				<!--                    <label style="display: inline-flex;-->
+				<!--                                  align-items: center;-->
+				<!--                                  gap: 5px;-->
+				<!--                                  white-space: nowrap;">-->
+				<!--                        <input type="radio"-->
+				<!--                               th:field="*{flgAdmin}"-->
+				<!--                               value="1">-->
+				<!--                        管理者-->
+				<!--                    </label>-->
+
+				<!--                    <label style="display: inline-flex;-->
+				<!--                                  align-items: center;-->
+				<!--                                  gap: 5px;-->
+				<!--                                  white-space: nowrap;">-->
+				<!--                        <input type="radio"-->
+				<!--                               th:field="*{flgAdmin}"-->
+				<!--                               value="0">-->
+				<!--                        一般ユーザー-->
+				<!--                    </label>-->
+
+				<!--                </div>-->
+
+				<!--                 ボタン：左に戻る・右に確認 -->
+				<!--                <div style="display: flex;-->
+				<!--                            justify-content: space-between;-->
+				<!--                            align-items: center;-->
+				<!--                            width: 100%;-->
+				<!--                            margin-top: 20px;">-->
+
+				<!--                    <a class="btn sub"-->
+				<!--                       th:href="@{/menu}">-->
+				<!--                        メニューに戻る-->
+				<!--                    </a>-->
+
+				<!--                    <button type="submit" class="btn">-->
+				<!--                        確認-->
+				<!--                    </button>-->
+
+				<!--                </div>-->
+
+			</form>
+
+		</div>
+	</main>
+
+</body>
+
+</html>

book-rent/src/main/resources/templates/employeeSearch.html

@@ -0,0 +1,29 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<title>社員検索</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+	<div th:replace="~{fragments/header :: header}"></div>
+	<main>
+		<h1>社員検索</h1>
+		<div class="error" th:if="${errorMessage}" th:text="${errorMessage}"></div>
+		<div class="error" th:each="e : ${errors}" th:text="${e}"></div>
+		<div class="card">
+			<form th:action="@{/employees/search}" method="post">
+				<label for="mailAddress">メールアドレス（256文字以内）</label>
+				<input type="text" id="mailAddress" name="mailAddress" th:value="${mailAddress}">
+
+				<p><button type="submit">検索</button>
+					<a class="btn sub" th:href="@{/menu}">メニューに戻る</a>
+				</p>
+			</form>
+		</div>
+	</main>
+</body>
+
+</html>

book-rent/src/main/resources/templates/employeeUpdateConfirm.html

@@ -0,0 +1,67 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<title>社員編集確認</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+	<div th:replace="~{fragments/header :: header}"></div>
+	<main>
+		<h1>社員編集確認</h1>
+		<div class="card">
+			<table>
+				<th:block th:if="${admin}">
+					<tr>
+						<th>社員名</th>
+						<td th:text="${form.nmEmployee}"></td>
+					</tr>
+					<tr>
+						<th>社員名よみ</th>
+						<td th:text="${form.knEmployee}"></td>
+					</tr>
+					<tr>
+						<th>メールアドレス</th>
+						<td th:text="${form.mailAddress}"></td>
+					</tr>
+					<tr>
+						<th>管理者フラグ</th>
+						<td th:text="${form.flgAdmin == '1'} ? '1：管理者' : '0：一般'"></td>
+					</tr>
+					<tr>
+						<th>退職フラグ</th>
+						<td th:text="${form.flgRetirement == '1'} ? '1：退職' : '0：所属'"></td>
+					</tr>
+				</th:block>
+				<tr>
+					<th>パスワード</th>
+					<td th:text="${#strings.isEmpty(form.password)} ? '（変更しない）' : '********'"></td>
+				</tr>
+			</table>
+			<form th:action="@{/employees/edit/execute}" method="post" style="display:inline">
+				<input type="hidden" name="idEmployee" th:value="${form.idEmployee}">
+				<input type="hidden" name="nmEmployee" th:value="${form.nmEmployee}">
+				<input type="hidden" name="knEmployee" th:value="${form.knEmployee}">
+				<input type="hidden" name="mailAddress" th:value="${form.mailAddress}">
+				<input type="hidden" name="flgAdmin" th:value="${form.flgAdmin}">
+				<input type="hidden" name="flgRetirement" th:value="${form.flgRetirement}">
+				<input type="hidden" name="password" th:value="${form.password}">
+				<button type="submit">編集</button>
+			</form>
+			<form th:action="@{/employees/edit/input}" method="post" style="display:inline">
+				<input type="hidden" name="idEmployee" th:value="${form.idEmployee}">
+				<input type="hidden" name="nmEmployee" th:value="${form.nmEmployee}">
+				<input type="hidden" name="knEmployee" th:value="${form.knEmployee}">
+				<input type="hidden" name="mailAddress" th:value="${form.mailAddress}">
+				<input type="hidden" name="flgAdmin" th:value="${form.flgAdmin}">
+				<input type="hidden" name="flgRetirement" th:value="${form.flgRetirement}">
+				<input type="hidden" name="password" th:value="${form.password}">
+				<button type="submit" class="sub">社員情報入力に戻る</button>
+			</form>
+		</div>
+	</main>
+</body>
+
+</html>

book-rent/src/main/resources/templates/employeeUpdateInput.html

@@ -0,0 +1,52 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<title>社員編集</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+	<div th:replace="~{fragments/header :: header}"></div>
+	<main>
+		<h1>社員編集</h1>
+		<div class="error" th:if="${errorMessage}" th:text="${errorMessage}"></div>
+		<div class="error" th:each="e : ${errors}" th:text="${e}"></div>
+		<div class="card">
+			<form th:action="@{/employees/edit/confirm}" method="post">
+				<input type="hidden" name="idEmployee" th:value="${form.idEmployee}">
+				<th:block th:if="${admin}">
+					<label for="nmEmployee">社員名（必須・50文字以内）</label>
+					<input type="text" id="nmEmployee" name="nmEmployee" th:value="${form.nmEmployee}" maxlength="50">
+					<label for="knEmployee">社員名よみ（必須・100文字以内）</label>
+					<input type="text" id="knEmployee" name="knEmployee" th:value="${form.knEmployee}" maxlength="100">
+					<label for="mailAddress">メールアドレス（必須）</label>
+					<input type="text" id="mailAddress" name="mailAddress" th:value="${form.mailAddress}"
+						maxlength="256">
+					<label for="flgAdmin">管理者フラグ</label>
+					<select id="flgAdmin" name="flgAdmin">
+						<option value="0" th:selected="${form.flgAdmin == '0'}">0：一般</option>
+						<option value="1" th:selected="${form.flgAdmin == '1'}">1：管理者</option>
+					</select>
+					<label for="flgRetirement">退職フラグ</label>
+					<select id="flgRetirement" name="flgRetirement">
+						<option value="0" th:selected="${form.flgRetirement == '0'}">0：所属</option>
+						<option value="1" th:selected="${form.flgRetirement == '1'}">1：退職</option>
+					</select>
+					<label for="password">パスワード（変更する場合のみ入力）</label>
+				</th:block>
+				<th:block th:unless="${admin}">
+					<p>※パスワードのみ変更できます。</p>
+					<label for="password">新しいパスワード（必須）</label>
+				</th:block>
+				<input type="password" id="password" name="password" maxlength="256" autocomplete="new-password">
+				<p><button type="submit">編集確認</button>
+					<a class="btn sub" th:href="@{/menu}">メニューへ戻る</a>
+				</p>
+			</form>
+		</div>
+	</main>
+</body>
+
+</html>

book-rent/src/main/resources/templates/lendingList.html

@@ -0,0 +1,34 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+<head>
+  <meta charset="UTF-8">
+  <title>貸出中書籍一覧</title>
+  <link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+<body>
+<div th:replace="~{fragments/header :: header}"></div>
+<main>
+  <h1>貸出中書籍一覧</h1>
+  <div class="error" th:if="${errorMessage}" th:text="${errorMessage}"></div>
+  <div class="error" th:each="e : ${errors}" th:text="${e}"></div>
+  <div class="card">
+    <p th:if="${#lists.isEmpty(list)}">貸出中の書籍はありません。</p>
+    <table th:unless="${#lists.isEmpty(list)}">
+      <thead><tr><th>申請ID</th><th>申請者名</th><th>書籍名</th><th>申請日</th><th>貸出日</th><th>返却予定日</th><th>操作</th></tr></thead>
+      <tbody>
+        <tr th:each="r : ${list}">
+          <td th:text="${r.idRequest}"></td>
+          <td th:text="${r.nmApplicant}"></td>
+          <td th:text="${r.nmBook}"></td>
+          <td th:text="${r.dateRequest}"></td>
+          <td th:text="${r.dateBorrow}"></td>
+          <td th:text="${r.dateScheduledReturn}"></td>
+          <td><a class="btn" th:href="@{/admin/lendings/{id}(id=${r.idRequest})}">返却</a></td>
+        </tr>
+      </tbody>
+    </table>
+  </div>
+  <p><a class="btn sub" th:href="@{/menu}">メニューに戻る</a></p>
+</main>
+</body>
+</html>

book-rent/src/main/resources/templates/login.html

@@ -1,12 +1,12 @@
 <!DOCTYPE html>
 <html xmlns:th="http://www.thymeleaf.org">
-
+ 
 <head>
 	<meta charset="UTF-8">
 	<title>ログイン</title>
 	<link rel="stylesheet" th:href="@{/css/style.css}">
 </head>
-
+ 
 <body>
 	<main>
 		<h1>書籍貸出管理システム</h1>
@@ -24,43 +24,43 @@
 		</div>
 	</main>
 </body>
-
+ 
 </html>
-
+ 
 <!--<!DOCTYPE html>-->
 <!--<html xmlns:th="http://www.thymeleaf.org">-->
-
+ 
 <!--<head>-->
 <!--    <meta charset="UTF-8">-->
 <!--    <meta name="viewport" content="width=device-width, initial-scale=1.0">-->
-
+ 
 <!--     外部スクリプトの読み込み -->
 <!--    <script th:src="@{/js/common.js}"></script>-->
-
+ 
 <!--     CSSの読み込み -->
 <!--    <link rel="stylesheet" th:href="@{/css/all.css}" type="text/css">-->
 <!--    <link rel="stylesheet" th:href="@{/css/style.css}" type="text/css">-->
-
+ 
 <!--    <title>ログイン</title>-->
 <!--</head>-->
-
+ 
 <!--<body>-->
-
+ 
 <!--    <div class="loginContainer">-->
-
+ 
 <!--        <h1>ログイン</h1>-->
-
+ 
 <!--        <form th:action="@{/doLogin}"-->
 <!--              method="post"-->
 <!--              th:object="${loginInfoForm}">-->
-
+ 
 <!--             エラーメッセージ -->
 <!--            <div class="msgBox error"-->
 <!--                 th:if="${messageError != null}">-->
 <!--                <span class="error"-->
 <!--                      th:text="${messageError.message}"></span>-->
 <!--            </div>-->
-
+ 
 <!--            <table>-->
 <!--                 メールアドレス -->
 <!--                <tr>-->
@@ -75,7 +75,7 @@
 <!--                        />-->
 <!--                    </td>-->
 <!--                </tr>-->
-
+ 
 <!--                 パスワード -->
 <!--                <tr>-->
 <!--                    <th class="header">パスワード</th>-->
@@ -89,7 +89,7 @@
 <!--                        />-->
 <!--                    </td>-->
 <!--                </tr>-->
-
+ 
 <!--                 ボタン -->
 <!--                <tr>-->
 <!--                    <td class="btnArea" colspan="2">-->
@@ -97,7 +97,7 @@
 <!--                            type="submit"-->
 <!--                            value="ログイン"-->
 <!--                        />-->
-
+ 
 <!--                        <button-->
 <!--                            type="button"-->
 <!--                            onclick="clearInput()">-->
@@ -106,11 +106,11 @@
 <!--                    </td>-->
 <!--                </tr>-->
 <!--            </table>-->
-
+ 
 <!--        </form>-->
-
+ 
 <!--    </div>-->
-
+ 
 <!--     入力内容のリセット -->
 <!--    <script>-->
 <!--        function clearInput() {-->
@@ -118,6 +118,6 @@
 <!--            document.getElementById('password').value = '';-->
 <!--        }-->
 <!--    </script>-->
-
+ 
 <!--</body>-->
 <!--</html>-->

book-rent/src/main/resources/templates/menu.html

@@ -23,3 +23,6 @@
 </main>
 </body>
 </html>
+ 
+
+ 

book-rent/src/main/resources/templates/returnComplete.html

@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+
+<head>
+	<meta charset="UTF-8">
+	<title>書籍返却完了</title>
+	<link rel="stylesheet" th:href="@{/css/style.css}">
+</head>
+
+<body>
+	<div th:replace="~{fragments/header :: header}"></div>
+	<main class="complete-container">
+	<h1>返却完了</h1>
+	<div class="info" th:text="${message} ?: '書籍の返却が完了しました。'"></div>
+
+	<p>
+		<a class="btn" th:href="@{/admin/lendings}">貸出中書籍一覧に戻る</a>
+		<a class="btn sub" th:href="@{/menu}">メニューに戻る</a>
+	</p>
+	</main>
+</body>
+
+</html>