diff --git a/bonus-auth/src/main/java/com/bonus/auth/controller/TokenController.java b/bonus-auth/src/main/java/com/bonus/auth/controller/TokenController.java
index 612c346..d8de835 100644
--- a/bonus-auth/src/main/java/com/bonus/auth/controller/TokenController.java
+++ b/bonus-auth/src/main/java/com/bonus/auth/controller/TokenController.java
@@ -12,6 +12,7 @@ import com.bonus.common.core.domain.R;
 import com.bonus.common.core.exception.ServiceException;
 import com.bonus.common.core.utils.JwtUtils;
 import com.bonus.common.core.utils.StringUtils;
+import com.bonus.common.core.utils.encryption.Sm4Utils;
 import com.bonus.common.core.web.domain.AjaxResult;
 import com.bonus.common.redis.service.RedisService;
 import com.bonus.common.security.auth.AuthUtil;
@@ -152,8 +153,11 @@ public class TokenController {
             return R.fail("当前系统用户并发数超过系统配置，请稍后再试");
         }
 
-        LoginUser login = strategy.login(form.getUsername(), form.getPassword());
-        logService.saveLogin(form.getUsername(), "登录", "登录成功", null, "成功");
+        String username = Sm4Utils.decrypt(form.getUsername());
+        String password = Sm4Utils.decrypt(form.getPassword());
+
+        LoginUser login = strategy.login(username, password);
+        logService.saveLogin(username, "登录", "登录成功", null, "成功");
         return R.ok(tokenService.createToken(login));
 
     }
diff --git a/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm4Utils.java b/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm4Utils.java
index cbfe8bc..72b4979 100644
--- a/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm4Utils.java
+++ b/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm4Utils.java
@@ -53,7 +53,7 @@ public class Sm4Utils {
 
     // 测试方法，演示加密和解密过程
     public static void main(String[] args) {
-        String plainText = "15398187429";
+        String plainText = "admin";
         System.out.println("原文: " + plainText);
 
         // 加密明文