fix: correct device information update during account switch

[guqing]

What type of PR is this?

/kind bug
/area core
/milestone 2.19.x

What this PR does / why we need it:

修复切换账号登录时设备信息更新不正确的问题

原因：

1. 使用 admin 账号登录，此时会记录 device_id 的 cookie
2. 退出登录，device_id 会保留在 cookie 中并随着新账号带到服务端
3. 服务端根据 device_id 查询当前设备是否有对应的记录，但是没有校验用户名是否与当前登陆的一致然后就去更新登录时间
4. 正确的处理是校验 device_id 是否有与之对应的记录并且用户名相同，如果不相同则认为是新设备重新生成 device_id

how to test it?

1. 先清理 cookie 然后使用一个账号登录
2. 退出登陆并切换新账号登录
3. 检查新登录的账号的设备信息是否正确

Does this PR introduce a user-facing change?

修复切换账号登录时设备信息更新不正确的问题

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 23 lines in your changes missing coverage. Please review.

Project coverage is 58.22%. Comparing base (bc10336) to head (9255cfc).
Report is 128 commits behind head on main.

Files	Patch %	Lines
...un/halo/app/security/device/DeviceServiceImpl.java	0.00%	23 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #6483      +/-   ##
============================================
+ Coverage     54.51%   58.22%   +3.71%     
- Complexity     3523     3778     +255     
============================================
  Files           646      651       +5     
  Lines         21862    22138     +276     
  Branches       1528     1555      +27     
============================================
+ Hits          11917    12890     +973     
+ Misses         9328     8625     -703     
- Partials        617      623       +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[ruibaby]

/lgtm

[JohnNiang]

我还发现另外一个问题：在同一个浏览器中频繁切换账号会导致设备使用记录越来越多。

[guqing]

我还发现另外一个问题：在同一个浏览器中频繁切换账号会导致设备使用记录越来越多。

这是正常的，切换了账号之后设备id就不在了，目前检测设备是靠设备 id 的 cookie 的，设备记录超过10个会被清理

[JohnNiang]

我还发现另外一个问题：在同一个浏览器中频繁切换账号会导致设备使用记录越来越多。

这是正常的，切换了账号之后设备id就不在了，目前检测设备是靠设备 id 的 cookie 的，设备记录超过10个会被清理

我仍然坚持我的观点：这种现象是不正常的。这种场景应该和登录后登出再登录的结果保持一致。不过这并不妨碍当前 PR 的合并。

[JohnNiang]

/approve

[f2c-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JohnNiang

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [JohnNiang]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment